$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: 7iD41erFADocciZ6OorujRkvTohTQNZDaENcoP6hlpE= Subject key identifier: B4:1C:D4:A0:DF:28:2D:78:6F:6E:77:85:37:78:01:55:BA:39:15:EF Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: CE Signing time: Sun 11 May 2025 04:31:55 +0000 Manifest this update: Sun 11 May 2025 04:31:54 +0000 Manifest next update: Sun 18 May 2025 04:31:54 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: AFCjCB4J3/lGUWK7pnEJHsVOU2esceQuv1iy+yDJYXU=) 2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=) 3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: May 11 04:31:54 2025 GMT Not After : May 18 04:31:54 2025 GMT Subject: CN=6820283a-6cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:56:3c:1f:c1:6a:54:e3:23:eb:32:9e:b9: ac:6c:d8:6c:fe:8f:d5:63:64:ab:8b:98:06:ed:92: a7:fa:b4:cb:ae:97:d6:b8:c0:e2:fd:33:86:59:13: c3:72:6c:b1:60:d9:fe:97:30:fd:4c:95:4d:f5:59: a7:52:7f:b8:7b:a8:c4:b8:91:7b:30:1f:78:fc:0e: 4f:00:03:25:2c:6c:a4:11:82:8e:fc:f6:3f:a5:82: 00:f1:88:e7:1f:9a:46:b9:b5:58:1f:95:19:d7:10: af:39:00:c5:f0:5c:52:67:3e:5d:31:20:35:09:e4: 5f:9a:69:a3:af:6d:e2:41:4e:85:bc:5f:e9:cb:9c: d1:91:13:cc:5c:35:bb:d8:6c:fd:5f:29:3c:3b:ba: d2:46:6c:9a:06:5b:1b:94:5a:3a:9b:0e:3c:39:77: 17:76:a6:19:da:4e:9d:94:b9:b0:c4:d8:cd:30:8b: ca:e4:76:c5:0d:79:c9:b4:9b:e9:98:49:b0:88:99: eb:b5:65:22:3f:8d:6e:1c:da:4a:cf:ce:d5:99:e2: db:5f:b0:86:73:e4:21:85:50:c5:4d:f8:15:15:a5: 3d:a1:aa:70:52:ba:df:a6:87:05:a8:c8:72:af:d2: 8a:80:59:9e:8d:24:64:89:fe:b9:23:e0:2b:47:36: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:D4:A0:DF:28:2D:78:6F:6E:77:85:37:78:01:55:BA:39:15:EF X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a3:e0:e7:c7:4d:5d:db:4a:88:56:e7:f5:60:2c:36:65:1e: 84:ab:4a:3d:e5:1c:45:17:58:38:0c:c9:27:7c:66:1e:a1:20: d2:2a:79:34:30:6d:42:75:b0:eb:ba:f9:85:59:e2:71:a3:4c: c7:81:e5:35:87:27:f0:75:0f:4e:7e:48:06:b3:71:8a:3e:03: a4:f6:d0:26:d6:28:61:af:99:a2:ab:62:23:26:a2:bb:07:fe: af:dd:40:c6:c4:c8:98:36:00:36:02:f2:06:e8:28:c8:0d:60: c3:f5:0f:24:2f:39:07:10:a3:f6:63:1c:88:fe:72:34:8f:c3: 58:49:11:89:3a:30:47:a2:ac:b2:a2:f4:78:1d:37:41:5a:45: 01:49:81:09:d1:3d:7c:94:9c:ff:48:51:41:53:4d:6f:b0:c2: 16:7b:93:3c:61:31:da:a7:f9:17:4e:db:35:7a:d3:16:bf:96: 8b:cc:d1:e0:79:5b:fa:68:71:52:fd:4c:fe:b4:ee:68:c8:8d: 79:83:cc:58:0d:96:fd:e7:3e:4a:0f:36:fb:c4:03:c5:5a:38: 76:fc:3f:18:06:07:b3:2b:99:da:58:27:e6:af:d3:0c:06:f2: a4:35:8a:02:95:0b:0e:25:ad:08:9d:6a:5f:89:6e:28:13:5b: b5:ba:53:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNTExMDQzMTU0WhcNMjUwNTE4MDQzMTU0WjAYMRYwFAYD VQQDEw02ODIwMjgzYS02Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rBWPB/BalTjI+synrmsbNhs/o/VY2Sri5gG7ZKn+rTLrpfWuMDi/TOGWRPD cmyxYNn+lzD9TJVN9VmnUn+4e6jEuJF7MB94/A5PAAMlLGykEYKO/PY/pYIA8Yjn H5pGubVYH5UZ1xCvOQDF8FxSZz5dMSA1CeRfmmmjr23iQU6FvF/py5zRkRPMXDW7 2Gz9Xyk8O7rSRmyaBlsblFo6mw48OXcXdqYZ2k6dlLmwxNjNMIvK5HbFDXnJtJvp mEmwiJnrtWUiP41uHNpKz87VmeLbX7CGc+QhhVDFTfgVFaU9oapwUrrfpocFqMhy r9KKgFmejSRkif65I+ArRzb8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQc1KDf KC14b253hTd4AVW6ORXvMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5o+Dnx01d20qIVuf1YCw2ZR6Eq0o95RxFF1g4DMknfGYeoSDSKnk0 MG1CdbDruvmFWeJxo0zHgeU1hyfwdQ9OfkgGs3GKPgOk9tAm1ihhr5miq2IjJqK7 B/6v3UDGxMiYNgA2AvIG6CjIDWDD9Q8kLzkHEKP2YxyI/nI0j8NYSRGJOjBHoqyy ovR4HTdBWkUBSYEJ0T18lJz/SFFBU01vsMIWe5M8YTHap/kXTts1etMWv5aLzNHg eVv6aHFS/Uz+tO5oyI15g8xYDZb95z5KDzb7xAPFWjh2/D8YBgezK5naWCfmr9MM BvKkNYoClQsOJa0InWpfiW4oE1u1ulOq -----END CERTIFICATE-----Generated at Sun May 11 14:45:21 2025 by rpki-client