$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: 3G+LoA238eWjac32jj6lXXIg9XGCuVtkNX71BfNvqwM= Subject key identifier: B7:D4:0E:9E:CF:8B:B9:7A:03:71:B3:49:5A:35:E6:BC:94:07:51:C9 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 07FE Signing time: Mon 12 May 2025 20:43:18 +0000 Manifest this update: Mon 12 May 2025 20:43:18 +0000 Manifest next update: Mon 19 May 2025 20:43:17 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: sZtpbVSNYRtsx0xkc0+08vgLLGWZ68OcrJV8i/G+4BE=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: May 12 20:43:18 2025 GMT Not After : May 19 20:43:17 2025 GMT Subject: CN=68225d66-6d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:ee:89:88:04:24:e7:a1:06:11:72:b1:8b: 9e:5e:52:09:85:36:97:a8:b2:5a:fd:dc:18:b7:e9: 68:bd:c6:d6:d5:a0:ec:d7:9c:80:43:fa:d5:e3:ca: 0d:64:59:05:b4:a7:af:b3:c5:6b:d5:14:df:8b:fa: 07:9c:90:19:8f:09:36:d1:2f:ea:ab:b5:ce:07:29: b7:f3:2a:84:2f:fe:c7:31:97:a9:bb:96:25:d9:82: 71:8e:c4:c4:04:55:20:6a:57:8e:d1:60:a2:4f:fd: 36:cd:46:be:3c:54:4e:28:47:c3:ae:56:a7:43:ae: 3c:24:2c:11:16:8a:26:ec:a4:91:79:96:7a:9d:1a: 74:de:12:9c:84:21:4f:64:34:06:b6:9d:64:49:cc: 30:a0:27:5b:06:0a:91:5f:fb:db:86:78:0c:03:a7: 10:71:17:fd:e5:4c:8c:78:56:3c:22:32:02:f0:64: 7b:fa:af:31:9d:c1:5e:e9:0b:89:f7:80:60:f6:e7: da:e9:25:ee:8e:d0:56:9b:c4:d3:29:c8:67:ae:04: 19:ac:10:cc:01:9b:a5:40:31:7c:11:ec:03:e2:92: 21:e3:f6:ec:66:c0:42:71:7f:93:7a:ab:03:65:2f: f2:c8:4b:d7:53:9c:23:7c:11:c4:e1:4c:63:44:f4: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:0E:9E:CF:8B:B9:7A:03:71:B3:49:5A:35:E6:BC:94:07:51:C9 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fd:fe:a0:d7:9f:e6:af:47:c5:9d:49:d5:16:90:f6:7c:4b: 43:bf:b7:dd:48:34:3a:3e:3b:9e:d2:57:da:1b:bc:b3:ab:af: 4e:d5:52:4e:2a:4f:7d:9e:92:5c:d4:88:a9:b1:2b:01:aa:6b: 13:2c:5d:61:71:25:dc:90:ff:86:54:c2:e1:5d:63:15:48:71: 71:f7:09:08:c8:e0:d2:fa:08:4d:7d:64:81:b0:42:e6:95:61: f6:88:fc:e7:7e:4e:1d:88:53:45:49:52:57:e2:15:21:95:3a: 0d:8d:42:1b:0a:dd:f8:96:56:a2:af:50:71:27:2f:68:0e:58: 99:0c:11:8f:b4:18:8a:a6:87:81:3c:76:6c:fc:c3:c8:fc:4d: b9:49:29:c6:25:3f:7d:20:c0:e6:97:f2:63:b0:f4:55:48:cd: 9c:56:d9:01:e9:64:74:8d:68:db:85:eb:e5:2b:0a:6b:21:70: 46:b7:aa:91:eb:42:1a:aa:5d:98:c9:ed:77:4b:ee:cb:8d:0d: e3:96:9e:99:d0:77:b3:5c:39:3a:fa:0a:d7:eb:e2:84:36:1a: 74:2a:27:27:41:07:2b:95:3a:f5:7b:e6:5c:57:73:e3:9d:4b: a7:27:4d:fd:24:b0:81:c4:6d:63:a7:5a:78:ba:97:cc:0d:2e: dd:08:a9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNTEyMjA0MzE4WhcNMjUwNTE5MjA0MzE3WjAYMRYwFAYD VQQDEw02ODIyNWQ2Ni02ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7buiYgEJOehBhFysYueXlIJhTaXqLJa/dwYt+lovcbW1aDs15yAQ/rV48oN ZFkFtKevs8Vr1RTfi/oHnJAZjwk20S/qq7XOBym38yqEL/7HMZepu5Yl2YJxjsTE BFUgaleO0WCiT/02zUa+PFROKEfDrlanQ648JCwRFoom7KSReZZ6nRp03hKchCFP ZDQGtp1kScwwoCdbBgqRX/vbhngMA6cQcRf95UyMeFY8IjIC8GR7+q8xncFe6QuJ 94Bg9ufa6SXujtBWm8TTKchnrgQZrBDMAZulQDF8EewD4pIh4/bsZsBCcX+TeqsD ZS/yyEvXU5wjfBHE4UxjRPRo7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfUDp7P i7l6A3GzSVo15ryUB1HJMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/f6g15/mr0fFnUnVFpD2fEtDv7fdSDQ6Pjue0lfaG7yzq69O1VJO Kk99npJc1IipsSsBqmsTLF1hcSXckP+GVMLhXWMVSHFx9wkIyODS+ghNfWSBsELm lWH2iPznfk4diFNFSVJX4hUhlToNjUIbCt34llair1BxJy9oDliZDBGPtBiKpoeB PHZs/MPI/E25SSnGJT99IMDml/JjsPRVSM2cVtkB6WR0jWjbhevlKwprIXBGt6qR 60Iaql2Yye13S+7LjQ3jlp6Z0HezXDk6+grX6+KENhp0KicnQQcrlTr1e+ZcV3Pj nUunJ039JLCBxG1jp1p4upfMDS7dCKm1 -----END CERTIFICATE-----Generated at Wed May 14 06:33:30 2025 by rpki-client