$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: D1Pjw3aODi9rXcEU+6KQ0VkkoSWvoGjy6BorO6jJcX8= Subject key identifier: 42:CD:56:3A:84:04:89:6B:9C:A9:B7:2A:57:64:05:98:74:64:E3:FD Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C44 Signing time: Mon 12 May 2025 18:17:25 +0000 Manifest this update: Mon 12 May 2025 18:17:25 +0000 Manifest next update: Mon 19 May 2025 18:17:25 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: BO1iEL7mqsZIPvcqkH/aXG/TAuL3T0wxPUo/U+dVbXs=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: May 12 18:17:25 2025 GMT Not After : May 19 18:17:25 2025 GMT Subject: CN=68223b35-f806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:bd:be:a6:87:12:c1:cd:82:2b:70:3d:17: 01:f5:e5:f8:0f:ce:b2:a2:fd:27:32:aa:af:5a:0c: 4c:e7:b7:63:62:86:de:df:01:98:43:08:a7:79:78: 68:b9:f6:b3:71:9c:23:cc:7f:d0:e1:56:6b:16:ca: 24:01:2d:45:ed:a9:d7:7f:b4:0a:e0:5a:a0:d1:70: d8:37:87:7d:c9:8d:b7:58:c0:3b:76:46:70:50:51: 62:6b:04:67:47:c1:c5:ea:15:2c:d3:87:5e:20:8f: 2c:25:c7:8d:d2:87:48:7d:fb:40:08:6f:19:f4:cb: a9:7f:7b:24:f1:bf:37:da:c9:2f:af:41:03:ac:cd: 86:d1:35:3b:98:8f:6c:89:5a:fb:75:9b:a9:db:d3: b7:c9:0b:99:18:b5:b9:06:50:0d:10:19:cb:21:b7: 7e:65:8c:f0:af:1b:f6:f1:ad:3b:36:e7:1c:8a:da: a1:90:14:bc:59:8f:53:7d:f4:7f:ae:af:c3:28:d7: a7:ea:02:12:c4:49:a9:c2:84:ab:2e:af:35:62:18: 08:6c:8a:92:f3:ca:c0:30:81:ce:f8:e8:d4:9b:04: 30:00:04:b8:91:e3:2c:bd:9d:7a:86:db:dc:60:54: 1d:ad:79:c6:72:c5:50:10:bf:53:82:78:47:63:16: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CD:56:3A:84:04:89:6B:9C:A9:B7:2A:57:64:05:98:74:64:E3:FD X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6d:ad:cf:07:9c:69:9b:cf:5e:9d:b8:5c:42:a3:5d:b4:90: d4:34:ed:cc:7d:65:cf:ef:f7:d9:a1:94:34:9e:ef:bc:ea:f1: 91:bf:a4:cf:78:f7:9d:30:7a:2f:d2:8e:d2:9a:45:30:d7:69: e5:1b:fd:6a:74:09:38:c2:df:02:cd:f4:e4:8b:b9:69:a6:3f: 08:22:b2:91:5c:96:bc:09:42:74:5c:c0:9d:37:06:30:4c:e8: 1e:3b:24:90:ab:13:f2:04:c0:cf:1a:28:46:76:99:61:b7:24: 6e:0e:cb:cb:44:6c:14:4f:4b:69:ad:88:2e:c4:50:06:bb:92: 14:83:79:f0:00:77:4f:c2:a0:1d:f1:47:c7:b6:ed:6c:ba:a0: 39:0d:6f:6a:61:2d:bb:6a:90:a9:72:74:2c:d7:23:71:50:c1: ec:fc:d5:bf:1b:22:37:05:a8:5b:c8:6c:5a:31:3d:61:17:c8: 2e:de:8b:52:af:14:e9:fd:a6:8d:a5:33:bc:cd:ee:bc:54:b7: 29:d2:e2:a6:3f:43:5a:1e:ab:87:f6:93:0c:72:c3:63:20:08: 02:bd:21:f7:84:25:52:1d:31:1e:a7:69:6f:e1:ac:90:7a:d9: ef:24:e1:39:10:fc:e1:78:b1:fb:ee:17:8c:42:2a:03:4f:fe: 75:38:1b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwNTEyMTgxNzI1WhcNMjUwNTE5MTgxNzI1WjAYMRYwFAYD VQQDEw02ODIyM2IzNS1mODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAy9vqaHEsHNgitwPRcB9eX4D86yov0nMqqvWgxM57djYobe3wGYQwineXho ufazcZwjzH/Q4VZrFsokAS1F7anXf7QK4Fqg0XDYN4d9yY23WMA7dkZwUFFiawRn R8HF6hUs04deII8sJceN0odIfftACG8Z9Mupf3sk8b832skvr0EDrM2G0TU7mI9s iVr7dZup29O3yQuZGLW5BlANEBnLIbd+ZYzwrxv28a07NuccitqhkBS8WY9TffR/ rq/DKNen6gISxEmpwoSrLq81YhgIbIqS88rAMIHO+OjUmwQwAAS4keMsvZ16htvc YFQdrXnGcsVQEL9TgnhHYxbS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELNVjqE BIlrnKm3KldkBZh0ZOP9MB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBba3PB5xpm89enbhcQqNdtJDUNO3MfWXP7/fZoZQ0nu+86vGRv6TP ePedMHov0o7SmkUw12nlG/1qdAk4wt8CzfTki7lppj8IIrKRXJa8CUJ0XMCdNwYw TOgeOySQqxPyBMDPGihGdplhtyRuDsvLRGwUT0tprYguxFAGu5IUg3nwAHdPwqAd 8UfHtu1suqA5DW9qYS27apCpcnQs1yNxUMHs/NW/GyI3BahbyGxaMT1hF8gu3otS rxTp/aaNpTO8ze68VLcp0uKmP0NaHquH9pMMcsNjIAgCvSH3hCVSHTEep2lv4ayQ etnvJOE5EPzheLH77heMQioDT/51OBtu -----END CERTIFICATE-----Generated at Tue May 13 04:59:20 2025 by rpki-client