$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: urvhxJS/Q5Rfdm4AENmaw4U6BCmk9gL6JMJbGrEDJTI= Subject key identifier: CD:85:08:87:05:BC:D0:B6:BB:A5:D5:A1:BE:67:BD:80:04:B9:6C:29 Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 0693 Signing time: Wed 14 May 2025 22:16:58 +0000 Manifest this update: Wed 14 May 2025 22:16:58 +0000 Manifest next update: Wed 21 May 2025 22:16:58 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: kXQ1yy3oUtDWmKEbhtAaopInhoY2Tv00062ujPpVsP8=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: May 14 22:16:58 2025 GMT Not After : May 21 22:16:58 2025 GMT Subject: CN=6825165a-bd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:1e:91:81:8e:cf:9f:05:ea:36:be:ea:e0: 73:18:27:2b:21:f7:52:d5:fb:d5:f4:17:50:87:32: ea:5d:7f:95:27:72:89:6f:4c:97:bf:65:ea:00:81: 9d:c2:ff:5f:37:ae:fe:c5:ea:bc:6c:42:2d:75:d7: 0c:2e:46:4a:be:51:e3:01:b5:b9:07:a8:21:5d:f5: f3:fb:96:77:6c:0f:db:f1:c6:69:f6:c1:f3:b2:4b: e1:a0:a5:b7:c8:64:03:4c:85:f4:27:35:44:5a:f5: 50:76:6e:70:65:4b:c8:f6:30:a7:66:19:b2:d7:8c: 4c:48:9a:0b:ee:16:34:82:34:eb:4c:8a:0e:b9:ac: 3d:e5:d2:58:77:67:0a:ec:d6:84:59:65:b6:ae:70: c1:3f:1c:9e:31:1a:be:ff:a3:ce:5d:6a:39:b9:99: 52:7a:4d:c5:3a:2a:d8:3a:b7:0e:3a:98:7c:2d:a5: 1e:ab:9b:df:02:48:1c:ef:a5:c8:54:fa:3e:cf:54: 8e:53:ed:49:98:1b:b8:3c:9b:86:de:4a:50:22:ba: 97:1e:fe:41:18:f7:67:f6:16:c7:c5:70:c6:36:f6: bb:f5:01:a1:bb:95:3a:41:7c:d7:06:e7:5c:e1:ac: 24:ec:32:fb:22:15:cb:5f:50:6d:4e:fb:da:34:f0: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:85:08:87:05:BC:D0:B6:BB:A5:D5:A1:BE:67:BD:80:04:B9:6C:29 X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:6d:73:a5:eb:33:b9:0e:66:c1:27:ba:9f:7f:0d:86:79: a5:08:bc:db:0c:07:df:c6:4a:0f:34:25:63:9d:02:f9:84:33: ce:03:e8:d7:bd:ce:44:a6:bd:67:44:70:0c:81:39:48:d9:0b: 7e:32:f9:06:a9:6e:70:2f:39:e8:42:be:d3:17:2b:9a:a5:88: cf:2c:42:f1:89:00:a3:0a:80:fe:c1:ca:91:a5:5a:c2:f7:3f: 56:38:f2:e0:23:3e:61:69:3c:38:38:d1:86:da:75:30:34:b5: d2:c8:64:1a:99:d7:cd:78:08:d3:45:5d:d1:34:f0:b4:28:05: ae:73:e8:d2:8d:60:5f:9a:60:7c:c5:35:7c:ad:52:43:8e:68: f1:51:1f:25:36:bd:d9:81:33:71:a7:32:27:85:4e:cf:41:87: 97:05:5d:b0:03:42:e7:33:cc:1a:cf:e1:d7:4d:b7:09:1b:29: d6:dc:e2:ca:3b:7a:be:76:fc:b8:ab:ff:e4:7b:30:55:28:c8: 1a:03:45:d5:2b:50:71:f1:e5:bf:bc:e5:93:5a:58:4a:51:76: fb:6e:d6:0e:ee:2c:05:1d:26:32:b9:46:95:b8:65:b3:c2:f6: 82:a6:5b:3c:d4:0a:80:46:33:ac:46:9b:f5:90:25:9c:5d:8d: 12:06:73:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUwNTE0MjIxNjU4WhcNMjUwNTIxMjIxNjU4WjAYMRYwFAYD VQQDEw02ODI1MTY1YS1iZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+AekYGOz58F6ja+6uBzGCcrIfdS1fvV9BdQhzLqXX+VJ3KJb0yXv2XqAIGd wv9fN67+xeq8bEItddcMLkZKvlHjAbW5B6ghXfXz+5Z3bA/b8cZp9sHzskvhoKW3 yGQDTIX0JzVEWvVQdm5wZUvI9jCnZhmy14xMSJoL7hY0gjTrTIoOuaw95dJYd2cK 7NaEWWW2rnDBPxyeMRq+/6POXWo5uZlSek3FOirYOrcOOph8LaUeq5vfAkgc76XI VPo+z1SOU+1JmBu4PJuG3kpQIrqXHv5BGPdn9hbHxXDGNva79QGhu5U6QXzXBudc 4awk7DL7IhXLX1BtTvvaNPA2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2FCIcF vNC2u6XVob5nvYAEuWwpMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX021zpeszuQ5mwSe6n38NhnmlCLzbDAffxkoPNCVjnQL5hDPOA+jX vc5Epr1nRHAMgTlI2Qt+MvkGqW5wLznoQr7TFyuapYjPLELxiQCjCoD+wcqRpVrC 9z9WOPLgIz5haTw4ONGG2nUwNLXSyGQamdfNeAjTRV3RNPC0KAWuc+jSjWBfmmB8 xTV8rVJDjmjxUR8lNr3ZgTNxpzInhU7PQYeXBV2wA0LnM8waz+HXTbcJGynW3OLK O3q+dvy4q//kezBVKMgaA0XVK1Bx8eW/vOWTWlhKUXb7btYO7iwFHSYyuUaVuGWz wvaCpls81AqARjOsRpv1kCWcXY0SBnPp -----END CERTIFICATE-----Generated at Fri May 16 05:06:27 2025 by rpki-client