$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: h7TUT98lrBTu2IbiXnL7lvgSwZq/sd3lmKRFXWFeebU= Subject key identifier: 93:7B:79:CD:36:25:77:0C:B4:D7:CD:93:88:EC:4D:88:7F:A5:E7:FA Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01D6 Signing time: Tue 13 May 2025 02:08:28 +0000 Manifest this update: Tue 13 May 2025 02:08:28 +0000 Manifest next update: Tue 20 May 2025 02:08:28 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: bF1ioU8z9s9fP3hQnrg646pHeaD1nHqUDL89fxEpDRg=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: May 13 02:08:28 2025 GMT Not After : May 20 02:08:28 2025 GMT Subject: CN=6822a99c-e481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:78:36:17:ab:7a:46:a0:ce:08:03:55:b8: bf:4b:30:fe:1b:12:b3:b0:8b:ac:1f:da:c5:25:c6: af:46:6c:3e:c4:31:2b:39:28:f1:f0:dc:4d:d6:67: 88:75:9f:95:2d:7f:64:8a:46:de:a7:02:a4:6f:bb: 63:40:1d:6b:28:af:ad:a5:07:d4:9e:0f:7b:70:59: f5:29:86:87:45:cc:39:cf:b8:74:1f:7c:90:c7:6a: 2e:fa:98:24:d9:66:67:63:69:9c:8a:87:82:6d:fe: ec:ef:04:13:88:f7:78:04:22:d0:47:39:ee:a5:63: 76:0e:1c:ad:3e:b9:05:80:bd:85:8f:96:dc:47:e0: ab:f2:7f:0e:5b:c4:60:39:77:64:15:d4:87:f3:ad: 7d:cd:d9:8d:a0:57:85:86:b2:fc:e8:b3:3a:68:79: 52:a7:84:1b:77:d3:cb:a4:8a:32:57:d2:36:6f:b2: a3:d7:15:c9:43:bc:41:ca:9c:a6:93:07:d9:dc:36: 62:a2:a4:59:74:29:ae:8c:4e:6d:29:a3:b2:ba:a6: 4d:5f:fa:87:e8:f6:63:bf:8c:70:a2:5a:ee:10:13: 50:cd:a9:31:a1:ff:af:4d:36:30:23:59:af:cc:1a: c9:9f:87:ee:bd:53:75:17:bb:fc:c7:45:f6:fa:df: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7B:79:CD:36:25:77:0C:B4:D7:CD:93:88:EC:4D:88:7F:A5:E7:FA X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:eb:0f:3a:d0:dc:92:e6:aa:a1:97:c7:44:24:c4:73:58:43: c5:ef:c4:a4:bb:be:77:5f:b6:62:03:73:cd:a2:d0:a1:cd:fa: 6b:ce:f0:d8:c5:2f:56:24:f1:2f:dd:3e:e8:3c:43:d5:97:27: 48:13:ca:8d:a1:51:c0:4b:49:f1:bc:5f:5b:4a:3f:fa:c1:38: 31:20:08:a7:43:2b:fe:9f:9a:2a:09:73:be:73:9a:e5:19:2b: 57:a0:e9:35:02:17:59:65:57:4c:ea:6c:4f:6f:71:c0:d9:39: a1:d6:e4:14:bd:aa:af:8f:01:4b:11:03:a9:81:c3:a0:12:2b: ba:21:13:cb:09:64:9e:ce:20:d2:79:3e:c6:53:af:43:63:ff: 8c:c3:d5:fb:65:09:bc:d9:15:1d:41:f8:78:23:ea:64:d7:a0: a8:7f:95:71:8f:f1:b0:f2:68:9d:ba:03:b7:c7:60:bf:9d:a2: f2:d5:48:e4:88:49:f7:62:c6:14:20:fc:56:4f:d8:74:49:e7: e5:e1:ca:63:0f:c8:ea:f5:da:54:76:da:c9:57:97:d1:12:9e: fd:d9:a7:b2:ab:71:62:25:46:57:6f:90:b4:b7:af:77:de:c0: 65:ae:52:53:41:9b:34:23:a0:b1:70:5f:bc:49:53:04:33:5f: e6:52:c8:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNTEzMDIwODI4WhcNMjUwNTIwMDIwODI4WjAYMRYwFAYD VQQDEw02ODIyYTk5Yy1lNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQJ4NherekagzggDVbi/SzD+GxKzsIusH9rFJcavRmw+xDErOSjx8NxN1meI dZ+VLX9kikbepwKkb7tjQB1rKK+tpQfUng97cFn1KYaHRcw5z7h0H3yQx2ou+pgk 2WZnY2mcioeCbf7s7wQTiPd4BCLQRznupWN2DhytPrkFgL2Fj5bcR+Cr8n8OW8Rg OXdkFdSH8619zdmNoFeFhrL86LM6aHlSp4Qbd9PLpIoyV9I2b7Kj1xXJQ7xBypym kwfZ3DZioqRZdCmujE5tKaOyuqZNX/qH6PZjv4xwolruEBNQzakxof+vTTYwI1mv zBrJn4fuvVN1F7v8x0X2+t/ZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN7ec02 JXcMtNfNk4jsTYh/pef6MB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv6w860NyS5qqhl8dEJMRzWEPF78Sku753X7ZiA3PNotChzfprzvDY xS9WJPEv3T7oPEPVlydIE8qNoVHAS0nxvF9bSj/6wTgxIAinQyv+n5oqCXO+c5rl GStXoOk1AhdZZVdM6mxPb3HA2Tmh1uQUvaqvjwFLEQOpgcOgEiu6IRPLCWSeziDS eT7GU69DY/+Mw9X7ZQm82RUdQfh4I+pk16Cof5Vxj/Gw8midugO3x2C/naLy1Ujk iEn3YsYUIPxWT9h0Sefl4cpjD8jq9dpUdtrJV5fREp792aeyq3FiJUZXb5C0t693 3sBlrlJTQZs0I6CxcF+8SVMEM1/mUsgm -----END CERTIFICATE-----Generated at Wed May 14 04:42:15 2025 by rpki-client