$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json) Hash identifier: 7rFtFehsBU1hYKklHkGBRneSUFD0LszkK5UKJmMAJyw= Subject key identifier: B6:61:1F:E9:99:FA:42:41:00:1B:EE:83:F6:A9:EB:00:C2:DF:1E:E3 Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft Manifest number: 08C2 Signing time: Mon 12 May 2025 20:19:04 +0000 Manifest this update: Mon 12 May 2025 20:19:03 +0000 Manifest next update: Mon 19 May 2025 20:19:03 +0000 Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: finKgn35VX4HAgvMpxFWurTjGtQEZsJrNJqQdZaMV+4=) 2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: qrOVzHUnQpUjj2NXO2uI9c1Lmn26rV+B/0QYiSJpTNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Validity Not Before: May 12 20:19:03 2025 GMT Not After : May 19 20:19:03 2025 GMT Subject: CN=682257b8-6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:7a:9f:63:aa:e1:86:8c:83:24:0f:63:25: 80:0a:75:9e:c0:7d:53:f0:1a:c6:bb:6a:f9:e5:d0: ca:b2:22:81:3c:aa:bc:07:f1:3b:0a:13:39:13:5d: af:5f:ba:4d:99:70:f0:8b:dd:ed:ac:3b:3b:99:74: 76:23:3a:27:3c:fe:91:3e:f9:fd:df:9d:38:92:5b: 8b:c4:24:56:c0:91:9e:b5:77:4a:44:33:2a:85:ef: 7c:25:62:8d:a8:67:d3:cc:2e:e0:95:c1:5f:ae:3f: 08:66:a9:f9:76:8a:6b:12:60:1a:b9:fd:73:1e:12: 9b:50:a8:2f:34:81:23:d6:ac:a8:60:7c:35:51:44: 8c:a9:23:b4:80:16:53:df:6a:e3:f9:fd:7e:56:4b: 33:f7:5a:7b:e6:55:8d:45:1a:50:85:76:f3:43:ac: d1:7f:06:fb:38:4c:30:db:14:af:dc:e3:7a:ff:f2: 35:94:df:58:63:86:7f:5b:12:79:eb:6d:ba:7d:46: da:21:7d:72:6f:a6:b8:78:57:82:ea:bf:de:0e:46: 18:e0:85:6a:e9:77:7f:6b:a5:ad:93:5b:db:8e:17: ad:04:b7:85:6c:2a:19:62:93:34:2f:6f:98:8f:01: 59:17:39:2c:1b:c4:2a:3b:49:7f:55:f4:d8:58:c4: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:61:1F:E9:99:FA:42:41:00:1B:EE:83:F6:A9:EB:00:C2:DF:1E:E3 X509v3 Authority Key Identifier: keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:25:ac:8b:74:e0:0c:70:75:eb:32:93:ea:b4:22:84:b6:0c: 12:cc:3b:c7:39:87:2f:94:ed:e9:5e:0a:4c:09:d0:00:7c:39: fc:73:4b:57:41:28:9e:9b:92:49:14:00:f5:18:a3:31:44:89: 90:57:d1:4d:67:32:a5:aa:9d:d1:d8:fa:fd:e2:ce:10:38:01: 9c:f2:80:59:f4:ca:ee:3a:e4:3f:e6:e8:41:95:11:be:cc:16: 37:96:06:a1:73:3e:12:7e:84:74:0b:ea:78:0f:7c:c3:aa:f4: 9d:f5:de:02:0a:9c:bd:95:62:6f:0a:23:3c:46:cf:42:fa:5e: ba:c4:79:b6:e4:b7:6b:c1:b2:5c:c6:d3:20:38:26:e5:27:46: 8e:90:45:b6:58:e9:74:7c:fc:33:f3:ac:49:c5:20:ba:2a:80: 18:63:28:0d:89:a0:a8:ed:73:04:ea:22:7b:bd:bd:1b:e2:4e: c1:00:15:85:46:e3:28:87:0d:5e:9d:8c:a3:b7:32:20:8c:43: 70:08:23:9a:84:41:0b:2f:5d:8a:76:38:04:ea:70:67:58:fa: f2:93:c5:2f:96:53:66:86:c0:a0:02:fc:3a:c9:49:2e:58:93: 5f:8a:dc:d5:c3:5c:ec:3d:42:5c:45:e1:64:b0:f4:4d:bb:79: 7b:0f:63:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5 NjY2MDlERDQwHhcNMjUwNTEyMjAxOTAzWhcNMjUwNTE5MjAxOTAzWjAYMRYwFAYD VQQDEw02ODIyNTdiOC02ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrp6n2Oq4YaMgyQPYyWACnWewH1T8BrGu2r55dDKsiKBPKq8B/E7ChM5E12v X7pNmXDwi93trDs7mXR2IzonPP6RPvn93504kluLxCRWwJGetXdKRDMqhe98JWKN qGfTzC7glcFfrj8IZqn5doprEmAauf1zHhKbUKgvNIEj1qyoYHw1UUSMqSO0gBZT 32rj+f1+Vksz91p75lWNRRpQhXbzQ6zRfwb7OEww2xSv3ON6//I1lN9YY4Z/WxJ5 6226fUbaIX1yb6a4eFeC6r/eDkYY4IVq6Xd/a6Wtk1vbjhetBLeFbCoZYpM0L2+Y jwFZFzksG8QqO0l/VfTYWMQK+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZhH+mZ +kJBABvug/ap6wDC3x7jMB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODUzMC8xOEY2NkQ4NkIxRTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8y aVVEV2pwaFVlWXVXWmduZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJayLdOAMcHXrMpPqtCKEtgwSzDvHOYcvlO3pXgpMCdAAfDn8c0tX QSiem5JJFAD1GKMxRImQV9FNZzKlqp3R2Pr94s4QOAGc8oBZ9MruOuQ/5uhBlRG+ zBY3lgahcz4SfoR0C+p4D3zDqvSd9d4CCpy9lWJvCiM8Rs9C+l66xHm25LdrwbJc xtMgOCblJ0aOkEW2WOl0fPwz86xJxSC6KoAYYygNiaCo7XME6iJ7vb0b4k7BABWF RuMohw1enYyjtzIgjENwCCOahEELL12KdjgE6nBnWPryk8UvllNmhsCgAvw6yUku WJNfitzVw1zsPUJcReFksPRNu3l7D2P9 -----END CERTIFICATE-----Generated at Tue May 13 02:22:34 2025 by rpki-client