$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: Oex+EEGu9Raa45ODUfoEkNqgPvg4YLeWdVpLyDBza5o= Subject key identifier: 8E:9E:B7:A7:24:96:70:41:D2:C6:5C:15:17:F6:F4:0A:17:77:A1:71 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 052A Signing time: Mon 12 May 2025 23:18:55 +0000 Manifest this update: Mon 12 May 2025 23:18:54 +0000 Manifest next update: Mon 19 May 2025 23:18:54 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: 1CUAba85kj606zNptm9k64Q/Ev/C+61ZBDzYRClRr9g=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: CQpWK2+G2LnLlpiGc5AJJ6xJWy2B0MtLT56Nh25qbzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: May 12 23:18:54 2025 GMT Not After : May 19 23:18:54 2025 GMT Subject: CN=682281de-f2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:81:cd:14:b5:0f:a7:56:b6:71:55:54:8c: b3:26:db:84:02:20:8f:73:39:66:6c:1c:c1:40:95: 06:49:93:67:f8:cb:b4:23:b6:d6:8d:2b:88:bd:3a: 6a:22:90:b3:98:4d:60:e6:78:d1:92:05:00:a1:3d: 4e:f5:9b:d1:4f:bb:b0:da:d8:b9:02:a1:3d:a6:24: c4:45:68:c8:4a:70:ba:53:78:d4:75:96:46:9d:7b: 45:b2:67:82:da:89:17:07:38:a9:c3:4d:6d:27:28: ed:97:73:33:1a:17:90:36:f7:0e:1d:b3:6f:d2:fc: 05:18:6d:e0:c4:38:65:49:b9:08:6c:e3:a8:7c:55: 02:84:07:4f:06:cb:19:72:97:be:d9:77:cc:2b:28: 7e:ec:0b:f9:17:bf:59:ea:c5:58:27:2e:75:3f:78: ac:67:d7:ff:6c:35:1e:9d:f4:2c:12:f4:21:f9:f1: 4f:41:76:62:b2:16:24:70:4b:45:62:cb:5a:1a:e9: 22:30:20:52:78:67:1c:60:7d:e0:27:5a:25:b4:66: 02:0e:3a:b5:cf:75:39:f3:ff:92:8e:32:98:fc:4c: 16:8d:07:41:2e:f5:73:3e:1c:0b:dd:c3:b2:fa:f8: 44:9f:ce:76:73:d9:c7:38:e9:da:04:59:eb:de:fb: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:B7:A7:24:96:70:41:D2:C6:5C:15:17:F6:F4:0A:17:77:A1:71 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:04:7a:4f:3b:22:a1:1f:6c:ac:42:73:ef:77:fb:ca:99: 22:06:ae:8d:c0:dc:fc:15:6c:e9:f3:36:37:b7:a9:5e:cd:63: 71:42:c2:0a:02:2b:ed:6b:6f:32:22:6b:cb:49:e9:3e:b8:96: 0e:4c:e3:08:44:99:1d:fd:20:75:0e:56:60:22:6f:f3:a7:7e: 28:cf:ff:a5:bd:24:1f:57:17:9f:f7:96:7a:7a:e2:a1:6f:a1: d6:81:da:1d:f5:b7:0a:93:c6:26:01:cc:02:e6:37:6d:eb:4b: 86:1c:e8:b4:52:1c:c0:ad:42:b9:1b:bd:7c:d0:d5:39:01:53: b3:d9:01:e9:01:68:6f:53:99:61:ff:68:28:b1:7b:33:16:87: b4:a0:dc:e6:8e:65:61:8b:2c:f7:95:d1:cc:ae:8d:41:5e:46: fb:68:2e:65:0e:46:8b:b1:fb:96:e4:ef:7d:ea:fd:85:e4:b7: 91:a3:53:21:ce:89:b0:de:52:4c:db:fe:9e:d3:15:1c:03:7f: c4:6a:32:47:9e:98:89:79:d3:d4:69:50:e6:3c:fb:bc:c7:90: 6c:6a:c3:93:5b:cd:1d:a4:25:3c:ac:ce:b6:87:98:2b:04:60: e6:3f:92:e5:2a:46:02:e4:8e:d0:06:4a:44:5f:2b:28:f4:7f: dc:3d:af:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwNTEyMjMxODU0WhcNMjUwNTE5MjMxODU0WjAYMRYwFAYD VQQDEw02ODIyODFkZS1mMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EKBzRS1D6dWtnFVVIyzJtuEAiCPczlmbBzBQJUGSZNn+Mu0I7bWjSuIvTpq IpCzmE1g5njRkgUAoT1O9ZvRT7uw2ti5AqE9piTERWjISnC6U3jUdZZGnXtFsmeC 2okXBzipw01tJyjtl3MzGheQNvcOHbNv0vwFGG3gxDhlSbkIbOOofFUChAdPBssZ cpe+2XfMKyh+7Av5F79Z6sVYJy51P3isZ9f/bDUenfQsEvQh+fFPQXZishYkcEtF YstaGukiMCBSeGccYH3gJ1oltGYCDjq1z3U58/+SjjKY/EwWjQdBLvVzPhwL3cOy +vhEn852c9nHOOnaBFnr3vtg6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6et6ck lnBB0sZcFRf29AoXd6FxMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATewR6TzsioR9srEJz73f7ypkiBq6NwNz8FWzp8zY3t6lezWNxQsIK Aivta28yImvLSek+uJYOTOMIRJkd/SB1DlZgIm/zp34oz/+lvSQfVxef95Z6euKh b6HWgdod9bcKk8YmAcwC5jdt60uGHOi0UhzArUK5G7180NU5AVOz2QHpAWhvU5lh /2gosXszFoe0oNzmjmVhiyz3ldHMro1BXkb7aC5lDkaLsfuW5O996v2F5LeRo1Mh zomw3lJM2/6e0xUcA3/EajJHnpiJedPUaVDmPPu8x5BsasOTW80dpCU8rM62h5gr BGDmP5LlKkYC5I7QBkpEXyso9H/cPa9P -----END CERTIFICATE-----Generated at Tue May 13 19:39:05 2025 by rpki-client