$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: MM4HZ8aJvIA/8g/XjABhMqXMhvXmEVO5Ds3erbKeCEo= Subject key identifier: 80:18:CC:DD:F5:9E:1E:5E:70:85:AA:B7:A4:D2:0C:55:85:58:91:D0 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: BF Signing time: Tue 13 May 2025 05:03:25 +0000 Manifest this update: Tue 13 May 2025 05:03:24 +0000 Manifest next update: Tue 20 May 2025 05:03:24 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: 3hmpQtvs/XCg+oCumjJ8guUauTWXGhtJnZUq5AFHsoU=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: May 13 05:03:24 2025 GMT Not After : May 20 05:03:24 2025 GMT Subject: CN=6822d29d-9562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:b4:01:7a:a5:6e:1e:6a:c4:2b:1c:7b:29: a2:c6:f4:f0:36:16:d5:ca:c2:e5:0e:dc:12:e8:b7: ad:fc:ef:9a:7e:30:1c:b3:47:ba:10:4b:e8:cc:1d: 16:8d:e7:25:c5:ea:58:db:9f:ff:e7:ab:13:5f:35: 67:f5:1c:0a:39:b0:bb:3d:27:3a:3b:ea:84:51:45: 7f:82:97:2a:a3:5d:6c:92:57:a0:14:6d:99:f0:02: 4d:6d:fa:e9:13:a2:56:cc:72:24:0d:85:ea:66:b3: d3:92:34:15:0e:cc:ec:9c:9a:3d:70:d8:99:a9:3f: fd:c8:fc:f8:b2:8f:43:16:d5:05:ce:76:14:b9:ad: 39:3b:e5:17:be:5c:be:a0:fd:18:42:1e:63:7d:e5: b2:ce:24:09:0b:f6:c7:67:a3:be:d6:64:1d:6f:12: 0c:ef:85:3b:e4:5e:f7:35:a7:17:8b:76:98:4f:1a: 78:36:1d:19:96:3d:b8:11:3e:af:99:58:6c:c1:bc: eb:e3:0c:e5:e9:2f:8f:e4:86:0e:fa:0b:79:eb:e2: 8b:e8:40:15:b9:9d:e4:e6:ab:77:39:43:4e:45:d7: 28:d4:9c:ca:fe:b4:d8:65:6f:db:55:8b:40:c8:61: f3:6b:2d:0f:75:fc:45:ac:d9:75:02:c9:c9:2a:04: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:18:CC:DD:F5:9E:1E:5E:70:85:AA:B7:A4:D2:0C:55:85:58:91:D0 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:3b:e9:9e:13:8f:51:09:d1:14:e3:4d:a7:51:fa:0c:e5:01: 02:44:0b:a9:41:65:41:57:75:81:f2:ee:e6:ae:04:ba:7a:d6: 02:68:f0:e3:a6:0b:33:0e:30:12:5b:2b:ab:69:45:72:5a:0e: 64:d0:f9:68:62:d5:2b:05:bd:15:cc:88:0c:3e:29:95:2f:a3: e4:e2:0a:2a:4b:86:3d:54:60:43:04:70:f6:68:0a:06:ae:a9: 8c:3e:49:04:b3:86:5e:d6:f9:14:6c:5f:72:98:2e:fb:1c:cd: fd:a2:b8:56:9b:5a:59:85:4a:c8:64:67:cc:6e:39:64:20:63: 1c:83:c8:52:ab:6e:22:ca:ca:9d:e8:88:16:40:d5:39:a4:88: 24:7f:ef:19:26:1d:03:5e:a4:07:51:50:2e:73:93:1b:df:9a: 9b:d6:4f:eb:c8:04:6b:f9:d0:c5:8e:96:1c:53:81:1b:e4:28: 23:9a:4c:ab:ab:2e:46:ca:a8:c9:ac:4f:b6:3f:3c:19:00:e7: eb:e8:b0:77:2e:10:df:6a:15:7f:21:fc:b8:c5:42:8d:34:29: 34:53:25:17:87:0d:28:33:58:59:85:d1:f9:a6:90:d1:76:1d: 14:0d:f7:dc:7d:3d:54:30:a5:58:48:16:9e:20:a3:27:81:4c: f8:b2:ca:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwNTEzMDUwMzI0WhcNMjUwNTIwMDUwMzI0WjAYMRYwFAYD VQQDEw02ODIyZDI5ZC05NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWa0AXqlbh5qxCsceymixvTwNhbVysLlDtwS6Let/O+afjAcs0e6EEvozB0W jeclxepY25//56sTXzVn9RwKObC7PSc6O+qEUUV/gpcqo11sklegFG2Z8AJNbfrp E6JWzHIkDYXqZrPTkjQVDszsnJo9cNiZqT/9yPz4so9DFtUFznYUua05O+UXvly+ oP0YQh5jfeWyziQJC/bHZ6O+1mQdbxIM74U75F73NacXi3aYTxp4Nh0Zlj24ET6v mVhswbzr4wzl6S+P5IYO+gt56+KL6EAVuZ3k5qt3OUNORdco1JzK/rTYZW/bVYtA yGHzay0PdfxFrNl1AsnJKgT84wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAYzN31 nh5ecIWqt6TSDFWFWJHQMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCO+meE49RCdEU402nUfoM5QECRAupQWVBV3WB8u7mrgS6etYCaPDj pgszDjASWyuraUVyWg5k0PloYtUrBb0VzIgMPimVL6Pk4goqS4Y9VGBDBHD2aAoG rqmMPkkEs4Ze1vkUbF9ymC77HM39orhWm1pZhUrIZGfMbjlkIGMcg8hSq24iysqd 6IgWQNU5pIgkf+8ZJh0DXqQHUVAuc5Mb35qb1k/ryARr+dDFjpYcU4Eb5Cgjmkyr qy5GyqjJrE+2PzwZAOfr6LB3LhDfahV/Ify4xUKNNCk0UyUXhw0oM1hZhdH5ppDR dh0UDffcfT1UMKVYSBaeIKMngUz4ssrh -----END CERTIFICATE-----Generated at Wed May 14 08:16:35 2025 by rpki-client