$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json) Hash identifier: l3haZYJDz3jPsqPTZ9nJ9rzw+a+LSapXE3dUE9m7mic= Subject key identifier: 42:26:47:13:58:3F:E0:00:A6:24:83:59:45:6E:59:41:FF:DC:2C:76 Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft Manifest number: 5E Signing time: Tue 13 May 2025 06:18:42 +0000 Manifest this update: Tue 13 May 2025 06:18:41 +0000 Manifest next update: Tue 20 May 2025 06:18:41 +0000 Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: vI4ND6Yv8DPMeEL6CLJfH+8DqpHBGB/t9MUXyrKGyoI=) 2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Validity Not Before: May 13 06:18:41 2025 GMT Not After : May 20 06:18:41 2025 GMT Subject: CN=6822e441-6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:26:cc:76:b7:8b:af:9a:1f:12:b8:5c:77: 19:95:b0:c3:f7:54:cc:3e:8c:c2:f5:66:fe:67:21: f0:90:c8:51:6a:4d:4d:65:1f:d9:d1:d7:c4:1b:a0: c3:03:00:20:38:c1:af:ce:99:8b:1f:d9:be:7b:83: 5a:04:fe:f5:0f:35:60:08:85:89:8e:42:dd:89:f8: 79:76:87:5b:2f:07:92:e7:44:e8:17:ca:2e:21:47: 19:41:a7:5b:10:ee:ca:f8:b1:a2:b1:ff:c2:d4:21: 5d:11:90:b9:86:6a:44:87:a9:66:07:17:cd:fa:42: 96:8e:62:9d:a0:dc:ee:70:0e:f2:32:3d:8e:e0:1d: a8:e5:2f:09:55:b0:e4:0b:45:f2:b7:66:45:e7:a4: 17:7b:d1:6d:5e:a9:9e:f0:80:76:a7:f2:cf:1a:d0: e6:12:85:47:50:61:0d:3e:74:e9:ad:94:67:41:bd: 06:06:04:f0:39:75:ac:d0:3c:fb:8d:19:23:57:e5: c4:bc:5d:02:33:21:8f:49:07:5c:d7:66:4d:94:de: ee:44:be:a7:59:21:e3:c2:05:13:6e:bf:c3:ad:2d: 21:85:14:e5:50:b5:6b:75:d7:e8:8d:6c:2f:e4:eb: 8b:4c:48:8e:32:62:c9:6d:29:32:fd:70:ad:f7:12: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:26:47:13:58:3F:E0:00:A6:24:83:59:45:6E:59:41:FF:DC:2C:76 X509v3 Authority Key Identifier: keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:19:88:12:a4:29:63:6e:59:25:6e:7c:c3:ea:79:c4:d3: a7:b2:f1:ba:6a:94:c5:6b:9b:8c:0e:e2:30:c4:2c:2c:49:c4: 44:93:b1:20:ba:14:c2:db:8a:d1:ce:25:58:04:7a:6f:a7:3b: 35:ac:df:e1:68:7b:dc:22:e7:10:b6:6b:d5:34:39:e5:91:da: cc:72:85:bc:31:1e:59:c5:e7:c4:70:0d:24:09:9b:9d:6c:19: 79:cf:da:92:7e:92:16:89:30:ab:f0:df:0f:ea:ae:f2:d2:5c: d5:b2:25:b2:92:12:f1:ea:14:45:86:07:7b:9b:3c:0f:de:6e: 64:07:42:7f:fc:84:2a:d0:54:1b:8e:4f:7b:f6:b1:b1:16:ca: 92:4d:22:db:1f:de:e6:bf:30:f4:4f:f6:5a:07:09:8a:3c:90: 6b:a2:6a:fe:b0:2f:f2:69:2e:c7:3d:1a:a1:57:2b:ac:5f:b4: b0:60:2c:86:a1:97:ee:c0:e3:7e:c7:31:e7:84:11:63:36:34: 03:78:92:89:ac:65:12:bc:54:19:14:be:93:5c:0e:57:cb:78: 7d:f9:a2:08:2c:59:98:ef:d9:26:31:55:89:3e:47:19:8e:97: 40:0d:1c:d3:db:00:78:8b:75:60:0c:63:0d:db:56:9d:1c:53: e6:1c:29:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTVEOTExMC8GA1UEBRMoRjI2QTgxMDE5MTY5NTJGQjIwQkUwMUU4RkM3QzkwRURD OUVFOUY3ODAeFw0yNTA1MTMwNjE4NDFaFw0yNTA1MjAwNjE4NDFaMBgxFjAUBgNV BAMTDTY4MjJlNDQxLTY2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCucibMdreLr5ofErhcdxmVsMP3VMw+jML1Zv5nIfCQyFFqTU1lH9nR18QboMMD ACA4wa/OmYsf2b57g1oE/vUPNWAIhYmOQt2J+Hl2h1svB5LnROgXyi4hRxlBp1sQ 7sr4saKx/8LUIV0RkLmGakSHqWYHF836QpaOYp2g3O5wDvIyPY7gHajlLwlVsOQL RfK3ZkXnpBd70W1eqZ7wgHan8s8a0OYShUdQYQ0+dOmtlGdBvQYGBPA5dazQPPuN GSNX5cS8XQIzIY9JB1zXZk2U3u5EvqdZIePCBRNuv8OtLSGFFOVQtWt11+iNbC/k 64tMSI4yYsltKTL9cK33EonjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQiZHE1g/ 4ACmJINZRW5ZQf/cLHYwHwYDVR0jBBgwFoAU8mqBAZFpUvsgvgHo/HyQ7cnun3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1NUQ5L0NENTRENzM4QTI4 NTExRUZCNjZCMTgxMUM0RjlBRTAyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4z Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1xQkFaRnBVdnNndmdIb19IeVE3Y251bjNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 NUQ5L0NENTRENzM4QTI4NTExRUZCNjZCMTgxMUM0RjlBRTAyLzhtcUJBWkZwVXZz Z3ZnSG9fSHlRN2NudW4zZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVVGYgSpCljblklbnzD6nnE06ey8bpqlMVrm4wO4jDELCxJxESTsSC6 FMLbitHOJVgEem+nOzWs3+Foe9wi5xC2a9U0OeWR2sxyhbwxHlnF58RwDSQJm51s GXnP2pJ+khaJMKvw3w/qrvLSXNWyJbKSEvHqFEWGB3ubPA/ebmQHQn/8hCrQVBuO T3v2sbEWypJNItsf3ua/MPRP9loHCYo8kGuiav6wL/JpLsc9GqFXK6xftLBgLIah l+7A437HMeeEEWM2NAN4komsZRK8VBkUvpNcDlfLeH35oggsWZjv2SYxVYk+RxmO l0ANHNPbAHiLdWAMYw3bVp0cU+YcKc4= -----END CERTIFICATE-----Generated at Wed May 14 13:23:32 2025 by rpki-client