$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: CJG8XgoMzEz5LDiGoI0s4Q+ufoTOVGhKLAKhZLaQchw= Subject key identifier: 8B:FF:22:29:C5:5D:F7:7B:40:E8:F5:FE:9F:6E:66:F1:28:D8:FF:65 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 62 Signing time: Thu 15 May 2025 06:24:33 +0000 Manifest this update: Thu 15 May 2025 06:24:32 +0000 Manifest next update: Thu 22 May 2025 06:24:32 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: /No8971IpNncy3UnTLol1bxcz6+JS4HQIzkDncCCcU4=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: May 15 06:24:32 2025 GMT Not After : May 22 06:24:32 2025 GMT Subject: CN=682588a0-97be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:79:b9:61:ff:c7:0e:f6:7e:38:2b:36:81:55: ed:8f:26:53:50:ac:2c:35:49:8c:7e:cc:94:ee:2a: c7:48:ba:9b:94:c9:10:6f:e1:08:a8:a0:1a:5f:09: 1f:96:6d:a1:8f:c1:2b:68:34:1d:83:8f:d4:96:19: 50:f1:22:33:c2:ff:bf:42:c1:15:21:91:20:6a:8e: a8:fd:54:ea:08:9d:4b:ff:ec:b0:7c:08:f4:d6:ee: 40:b6:39:c0:c7:53:4e:c2:18:b6:70:50:ca:e0:d1: 2c:a1:70:f4:03:3c:b5:bc:47:b8:4b:21:b0:b5:8b: d3:fd:0f:97:ef:5e:7f:8c:3d:88:66:99:b4:4c:ef: ed:0e:ed:ca:d0:99:01:26:06:85:24:a4:11:3b:03: 3c:9a:8c:42:6c:1f:8c:22:03:0c:95:50:52:86:8f: b5:3d:38:48:87:6f:94:0e:20:22:e8:07:33:29:75: a4:f2:cd:71:ef:18:08:c5:42:0b:37:c1:27:25:ce: 92:6b:16:17:ad:34:e7:19:d5:98:54:92:98:60:ff: 50:e0:9d:1f:f0:4a:70:3f:d6:73:8c:ad:4e:6c:98: 4e:27:2b:9d:8e:a7:5a:48:5d:43:72:95:e1:fe:b6: 18:02:e2:30:77:ee:09:a1:e9:66:ef:0b:d2:b6:73: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:22:29:C5:5D:F7:7B:40:E8:F5:FE:9F:6E:66:F1:28:D8:FF:65 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:29:d9:08:92:2b:ff:5a:5e:da:d4:4d:c5:6b:b6:84:75:12: 96:34:c5:7b:72:7f:2f:d7:4e:02:87:24:02:c8:e0:f1:08:55: d3:a8:0d:87:e0:70:66:5f:26:8e:31:52:79:65:a3:4b:23:2d: dd:7b:5b:b3:7c:4e:d9:dc:47:00:84:85:eb:8a:70:67:c4:7d: 99:b7:30:45:c4:61:27:15:21:20:a0:0d:87:a4:60:fd:20:52: cb:10:3f:8f:7a:a1:b6:55:24:d1:9d:7b:c5:1e:d3:06:c3:67: dd:e3:89:2f:cb:90:e8:5c:24:9d:f9:f6:65:c2:69:c3:5b:5c: 73:c7:a0:cd:a7:0e:03:c7:df:be:94:fd:4f:6e:e3:3f:92:6a: 9c:23:ff:6e:5b:a0:06:a9:5f:52:28:f6:7a:56:31:7c:0c:f4: fc:ab:a7:e0:4e:83:e7:c8:18:fa:da:94:c6:4b:a0:60:4d:8d: f7:01:ec:43:50:bc:13:31:e2:8a:e1:56:9b:98:bd:72:3b:b4: 62:4e:ab:d3:04:e7:2f:0e:32:0c:12:42:f8:43:8a:2d:e6:71: 76:dd:46:c8:40:ce:d1:04:a6:de:cc:ab:38:cc:84:72:87:67: 2f:51:3c:9a:60:b3:33:c0:fb:09:34:55:9f:3e:9c:24:93:b9: 76:b0:df:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA1MTUwNjI0MzJaFw0yNTA1MjIwNjI0MzJaMBgxFjAUBgNV BAMTDTY4MjU4OGEwLTk3YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDweblh/8cO9n44KzaBVe2PJlNQrCw1SYx+zJTuKsdIupuUyRBv4QiooBpfCR+W baGPwStoNB2Dj9SWGVDxIjPC/79CwRUhkSBqjqj9VOoInUv/7LB8CPTW7kC2OcDH U07CGLZwUMrg0SyhcPQDPLW8R7hLIbC1i9P9D5fvXn+MPYhmmbRM7+0O7crQmQEm BoUkpBE7AzyajEJsH4wiAwyVUFKGj7U9OEiHb5QOICLoBzMpdaTyzXHvGAjFQgs3 wSclzpJrFhetNOcZ1ZhUkphg/1DgnR/wSnA/1nOMrU5smE4nK52Op1pIXUNyleH+ thgC4jB37gmh6WbvC9K2c+RhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi/8iKcVd 93tA6PX+n25m8SjY/2UwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACop2QiSK/9aXtrUTcVrtoR1EpY0xXtyfy/XTgKHJALI4PEIVdOoDYfg cGZfJo4xUnllo0sjLd17W7N8TtncRwCEheuKcGfEfZm3MEXEYScVISCgDYekYP0g UssQP496obZVJNGde8Ue0wbDZ93jiS/LkOhcJJ359mXCacNbXHPHoM2nDgPH376U /U9u4z+Sapwj/25boAapX1Io9npWMXwM9Pyrp+BOg+fIGPralMZLoGBNjfcB7ENQ vBMx4orhVpuYvXI7tGJOq9ME5y8OMgwSQvhDii3mcXbdRshAztEEpt7MqzjMhHKH Zy9RPJpgszPA+wk0VZ8+nCSTuXaw3+k= -----END CERTIFICATE-----Generated at Thu May 15 17:59:23 2025 by rpki-client