$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: 2xtkzwsEtlNh5o5Kt6BwDS66nudSKxUm/gyV+A8T2P0= Subject key identifier: B6:A4:CA:4A:B4:3E:B2:AB:C1:36:11:4A:88:7F:5B:44:D2:CF:8C:B3 Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 09EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 09E6 Signing time: Wed 14 May 2025 20:00:48 +0000 Manifest this update: Wed 14 May 2025 20:00:47 +0000 Manifest next update: Wed 21 May 2025 20:00:47 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: W+vNFlPmCIEAwNsRX2WXpRhylrvxgmArWuN9IiXV3ho=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749, serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: May 14 20:00:47 2025 GMT Not After : May 21 20:00:47 2025 GMT Subject: CN=6824f66f-9563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:d6:35:ec:ca:82:2e:79:9c:10:30:a1:31: da:7a:8a:f5:56:bb:ed:37:53:4f:88:35:5e:36:e4: 6e:0a:2e:e1:2b:67:ab:87:f8:94:24:43:62:20:2f: 57:43:bb:34:26:88:83:19:c8:79:fb:8e:b9:d1:07: ff:d7:f0:4b:b6:60:ec:ae:c9:a1:fd:73:cc:88:51: 5a:f8:8a:fc:ae:92:58:9a:0b:61:8b:4c:f6:1d:38: da:cb:23:95:79:23:b9:1e:51:ba:a7:68:31:04:a4: b5:17:c4:78:2f:ec:d9:92:a7:c8:76:e3:fe:de:e8: 33:0d:1a:27:97:3a:5f:ee:f0:94:f1:1e:5c:c7:b5: a6:60:55:77:91:0c:c4:5b:4d:fb:09:36:74:52:76: 6f:ab:76:84:9b:01:80:ea:44:2e:50:e7:92:10:35: 2d:4c:72:5b:74:8e:ef:d3:4e:03:19:99:a6:4c:5d: 87:b0:9a:38:6b:42:3e:78:bb:4d:0f:71:fc:cc:7e: 78:28:6a:08:ff:d2:47:36:38:d2:98:62:42:f0:dd: ea:f7:3e:18:d4:16:91:6e:8b:bd:b0:fa:aa:18:bf: 7d:8e:fa:3a:ec:f5:45:77:55:97:e3:c0:3a:60:3f: 99:99:98:0e:ca:38:a5:77:de:50:21:58:d3:d1:8b: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:CA:4A:B4:3E:B2:AB:C1:36:11:4A:88:7F:5B:44:D2:CF:8C:B3 X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:dd:50:0a:e1:74:db:79:ff:9e:92:37:eb:08:47:3e:bf: 5b:f3:26:f0:95:a9:f0:84:81:6b:2f:46:45:f3:c3:d8:ca:be: 23:de:20:8a:cb:a2:de:0f:f1:4d:aa:fb:fe:85:e5:45:33:74: df:a1:2d:d9:e3:c3:ee:b1:48:af:3f:1d:47:33:ee:30:3e:40: fa:23:73:81:8b:65:c7:cc:34:b1:72:84:7e:b6:3c:b5:22:60: 85:ae:58:83:0d:23:e2:b3:7c:5a:35:ed:48:a6:e9:e2:ec:0b: bd:ed:fe:49:fc:53:99:0f:c5:5b:c0:61:4a:df:8b:35:10:34: 3b:0a:c9:10:10:77:35:b6:d9:2f:5f:c3:5b:9a:a2:76:7b:f4: 17:c6:30:cb:08:95:74:90:fa:ab:ab:c3:be:fc:70:3b:a4:11: 46:cf:57:0f:60:8f:28:b5:0f:3f:0b:d8:ef:4a:03:4f:76:ef: 33:49:38:ac:01:17:d6:48:c1:97:23:07:8e:42:42:f7:78:fb: a7:67:1f:a3:29:8f:f6:bd:67:0c:0c:52:46:52:b1:94:a7:ff: 5f:2c:ac:f1:af:34:67:ce:eb:3a:49:e9:88:09:2c:c6:0f:67: 26:9c:8e:42:46:df:06:c6:38:b4:0f:35:aa:0c:4b:df:29:02: 25:1c:a3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjUwNTE0MjAwMDQ3WhcNMjUwNTIxMjAwMDQ3WjAYMRYwFAYD VQQDEw02ODI0ZjY2Zi05NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmajWNezKgi55nBAwoTHaeor1VrvtN1NPiDVeNuRuCi7hK2erh/iUJENiIC9X Q7s0JoiDGch5+4650Qf/1/BLtmDsrsmh/XPMiFFa+Ir8rpJYmgthi0z2HTjayyOV eSO5HlG6p2gxBKS1F8R4L+zZkqfIduP+3ugzDRonlzpf7vCU8R5cx7WmYFV3kQzE W037CTZ0UnZvq3aEmwGA6kQuUOeSEDUtTHJbdI7v004DGZmmTF2HsJo4a0I+eLtN D3H8zH54KGoI/9JHNjjSmGJC8N3q9z4Y1BaRbou9sPqqGL99jvo67PVFd1WX48A6 YD+ZmZgOyjild95QIVjT0Yu+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLakykq0 PrKrwTYRSoh/W0TSz4yzMB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7p91QCuF023n/npI36whHPr9b8ybwlanwhIFrL0ZF88PYyr4j3iCK y6LeD/FNqvv+heVFM3TfoS3Z48PusUivPx1HM+4wPkD6I3OBi2XHzDSxcoR+tjy1 ImCFrliDDSPis3xaNe1Ipuni7Au97f5J/FOZD8VbwGFK34s1EDQ7CskQEHc1ttkv X8NbmqJ2e/QXxjDLCJV0kPqrq8O+/HA7pBFGz1cPYI8otQ8/C9jvSgNPdu8zSTis ARfWSMGXIweOQkL3ePunZx+jKY/2vWcMDFJGUrGUp/9fLKzxrzRnzus6SemICSzG D2cmnI5CRt8Gxji0DzWqDEvfKQIlHKPb -----END CERTIFICATE-----Generated at Thu May 15 18:35:29 2025 by rpki-client