$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: fbzyCE4/j6Od3KiCjPsoO3oWOvTMdIr+Pj1wAHFfsqM= Subject key identifier: 66:D4:4F:54:F4:D3:CA:B1:F4:8B:CA:F2:A3:56:69:CB:3B:63:90:CE Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 0109 Signing time: Tue 13 May 2025 04:14:08 +0000 Manifest this update: Tue 13 May 2025 04:14:08 +0000 Manifest next update: Tue 20 May 2025 04:14:08 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: JUql35isXFREJjC39nHUBEXJ3ZTiOYRn+h9+uGhp+V8=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: May 13 04:14:08 2025 GMT Not After : May 20 04:14:08 2025 GMT Subject: CN=6822c710-4d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:19:1d:f9:f8:1d:07:fb:5d:0e:64:86:03: 31:ec:2c:71:52:b2:90:d6:ff:4a:ee:c9:63:b0:35: 78:1c:6e:f9:02:ea:8d:01:34:a8:bb:5b:d7:4c:63: 73:dd:8c:f5:54:5e:b1:15:70:9e:12:cc:fc:26:20: c3:9b:5f:e5:86:ee:04:19:ad:fc:e3:ad:d7:19:3e: c8:2f:a9:c5:3b:99:d1:58:b0:4d:cb:58:f2:b3:89: 8b:15:a4:2e:43:a4:d2:0d:08:c4:2a:18:e3:13:d0: c4:89:98:3f:6d:00:1f:29:fe:ef:35:7f:53:db:14: f3:6d:14:76:22:24:e7:a1:4c:41:86:9d:5d:ef:5f: c4:53:bf:ce:f7:c3:2f:80:9f:cf:73:6f:6f:f1:8d: 03:26:b3:83:91:ff:67:1d:63:1f:1b:54:91:36:a1: 95:61:ec:33:eb:e9:a3:d1:9e:bd:6f:49:b2:83:17: 13:47:aa:2a:fb:03:cd:a9:cf:b7:4f:53:7a:0d:e8: 39:87:03:24:5b:48:06:93:9f:86:44:bb:68:2e:9a: 37:bf:e9:31:24:c4:22:0e:f5:30:5c:f9:f4:05:f5: 57:34:94:79:10:2e:aa:6f:6c:43:af:95:f4:15:1e: 7c:65:d5:a1:79:44:5f:2f:28:73:79:50:02:9d:49: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:4F:54:F4:D3:CA:B1:F4:8B:CA:F2:A3:56:69:CB:3B:63:90:CE X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:69:15:e7:63:92:72:15:06:1a:4f:6f:f5:fd:fe:dc:ed:b3: 64:ad:cb:02:d6:2a:5f:fc:16:12:48:7f:ee:c9:97:43:1b:cf: e5:b8:2d:00:44:0d:b1:75:97:dd:a6:48:98:28:12:e9:dd:2c: 4c:7e:05:79:81:ac:e8:bd:e0:96:be:4b:ee:a2:23:f2:ac:eb: e9:6e:7a:06:d7:be:a8:3e:15:09:b6:4f:10:0c:93:cc:de:23: e1:1d:56:52:4d:e3:f0:43:07:6f:5b:a6:d7:17:8b:40:b3:ea: 77:47:04:dc:52:8d:ca:02:79:62:85:fc:b5:58:5d:91:19:70: ef:df:5c:3e:ca:7d:e8:6d:dc:1c:f9:e1:e1:3d:cb:07:d0:67: d0:bd:60:59:c6:a5:30:3b:49:80:10:aa:ee:b7:3b:a4:04:fa: 7d:02:87:78:12:c5:85:52:22:07:b5:dc:d7:28:3c:37:8d:3d: bb:49:62:81:73:e3:5a:28:da:40:39:48:9a:09:0b:b8:51:ca: 7f:2f:1e:07:fd:c5:29:17:cc:c0:67:7e:c1:4a:b4:18:12:f2: 69:69:7d:69:32:78:73:0f:d7:f6:44:a1:82:f2:af:ea:a6:eb: c4:c0:09:ad:d4:52:70:4c:4c:f3:25:58:cf:7a:f5:71:07:fe: ad:a3:fe:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwNTEzMDQxNDA4WhcNMjUwNTIwMDQxNDA4WjAYMRYwFAYD VQQDEw02ODIyYzcxMC00ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorcZHfn4HQf7XQ5khgMx7CxxUrKQ1v9K7sljsDV4HG75AuqNATSou1vXTGNz 3Yz1VF6xFXCeEsz8JiDDm1/lhu4EGa38463XGT7IL6nFO5nRWLBNy1jys4mLFaQu Q6TSDQjEKhjjE9DEiZg/bQAfKf7vNX9T2xTzbRR2IiTnoUxBhp1d71/EU7/O98Mv gJ/Pc29v8Y0DJrODkf9nHWMfG1SRNqGVYewz6+mj0Z69b0mygxcTR6oq+wPNqc+3 T1N6Deg5hwMkW0gGk5+GRLtoLpo3v+kxJMQiDvUwXPn0BfVXNJR5EC6qb2xDr5X0 FR58ZdWheURfLyhzeVACnUkqhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbUT1T0 08qx9IvK8qNWacs7Y5DOMB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFaRXnY5JyFQYaT2/1/f7c7bNkrcsC1ipf/BYSSH/uyZdDG8/luC0A RA2xdZfdpkiYKBLp3SxMfgV5gazoveCWvkvuoiPyrOvpbnoG176oPhUJtk8QDJPM 3iPhHVZSTePwQwdvW6bXF4tAs+p3RwTcUo3KAnlihfy1WF2RGXDv31w+yn3obdwc +eHhPcsH0GfQvWBZxqUwO0mAEKrutzukBPp9Aod4EsWFUiIHtdzXKDw3jT27SWKB c+NaKNpAOUiaCQu4Ucp/Lx4H/cUpF8zAZ37BSrQYEvJpaX1pMnhzD9f2RKGC8q/q puvEwAmt1FJwTEzzJVjPevVxB/6to/7j -----END CERTIFICATE-----Generated at Tue May 13 17:39:13 2025 by rpki-client