$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: X1OQDxEZp2mTiJFGCOjYJPE5+iL93HWIvbI/LE6Z2Qo= Subject key identifier: 2F:DC:35:24:3B:41:FE:95:19:4B:50:23:B0:AB:85:03:15:E9:B1:1C Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0731 Signing time: Sat 10 May 2025 21:25:33 +0000 Manifest this update: Sat 10 May 2025 21:25:33 +0000 Manifest next update: Sat 17 May 2025 21:25:33 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: AtrKJhCo3ynVaWZbRwDWaA5lt8o9YzIKYmNg8YboSw0=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: SdQIXAZgLAYC0wC8aVzYt0Gf/I3END/T1//qc7xaDnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: May 10 21:25:33 2025 GMT Not After : May 17 21:25:33 2025 GMT Subject: CN=681fc44d-b502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:84:93:27:13:07:c8:31:ed:da:16:f3:8d: 0f:fc:0f:d7:81:b4:b9:11:27:fe:d6:58:46:68:fa: ac:cc:b6:59:3b:7b:14:4a:ba:47:08:59:17:82:f5: 2b:22:4d:17:2a:0d:53:ee:3f:e6:ab:52:bc:6b:1b: 06:28:26:4f:91:71:be:77:d3:dd:a6:3c:73:95:ca: 2e:21:8b:cf:6d:00:e1:a8:25:d4:ab:6e:83:d6:4e: 97:96:ff:51:de:e6:88:cc:06:25:ad:db:e1:95:b2: 93:6e:93:7d:54:57:1d:cc:02:ac:23:18:f0:69:7f: fb:13:db:11:dd:e8:3d:6a:6b:c3:43:f5:bf:a9:ec: 67:b8:85:c9:12:93:a6:3e:3c:54:4e:92:e8:a4:9a: 3b:03:37:38:69:b7:41:e1:d7:24:c4:a6:5e:2f:be: 8e:2a:da:32:2d:f3:d4:82:a6:e5:30:d2:0b:80:23: 8e:0d:9d:96:0a:6a:27:35:5f:87:a7:de:b7:da:00: 19:80:c7:bb:7d:6e:d8:e5:73:4b:ff:a5:ef:b4:70: 50:39:6a:da:98:66:fd:02:12:0c:0a:61:a6:df:ea: 27:54:9e:6e:ef:1f:01:85:5e:2d:df:10:fc:29:29: 4d:48:99:33:30:66:47:8a:78:8a:a7:b1:14:ff:2f: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DC:35:24:3B:41:FE:95:19:4B:50:23:B0:AB:85:03:15:E9:B1:1C X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:59:d3:be:2f:15:3b:b4:b1:95:3f:9c:a8:3e:8f:e3:f8:e0: ce:c6:4f:b0:7c:e1:73:cb:4f:04:2f:86:e8:c0:43:71:67:b3: de:c7:44:ae:fe:66:3a:59:62:16:d3:fc:04:a7:de:65:fd:47: e8:62:91:cb:e0:3b:9d:e0:06:bd:12:34:6a:88:bc:ac:7c:2b: cc:15:7b:24:b6:62:21:73:cf:26:ce:c4:ed:c5:ae:2a:55:36: 47:b3:1e:b4:bd:ec:42:a6:a5:cb:5e:1f:1c:bb:a9:c9:ed:f5: 94:21:fe:12:8b:11:21:a0:89:ab:ca:f3:5a:5b:40:07:0c:00: 98:ef:1e:d7:50:8e:aa:d4:ea:b6:23:a1:43:ec:c0:5c:80:a4: 22:4a:07:4d:89:7f:58:90:d2:1b:d9:c4:69:35:71:e8:0f:14: 38:dc:78:5e:b7:83:0b:8f:c8:50:41:2a:7c:fa:51:68:3e:2c: 21:05:83:65:49:d1:4e:16:bc:b0:6b:a7:a4:e6:27:13:bc:d5: 6b:eb:68:50:a1:a2:2a:44:ea:99:cc:84:19:4b:f3:e1:25:54: 41:e8:ae:f7:29:c8:e1:96:cc:00:f2:d9:67:d5:6b:5e:8c:9a: 1e:4d:20:bd:74:a5:98:1f:fd:1e:5c:bd:83:b1:cb:af:21:8d: 10:15:e3:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwNTEwMjEyNTMzWhcNMjUwNTE3MjEyNTMzWjAYMRYwFAYD VQQDEw02ODFmYzQ0ZC1iNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yGEkycTB8gx7doW840P/A/XgbS5ESf+1lhGaPqszLZZO3sUSrpHCFkXgvUr Ik0XKg1T7j/mq1K8axsGKCZPkXG+d9PdpjxzlcouIYvPbQDhqCXUq26D1k6Xlv9R 3uaIzAYlrdvhlbKTbpN9VFcdzAKsIxjwaX/7E9sR3eg9amvDQ/W/qexnuIXJEpOm PjxUTpLopJo7Azc4abdB4dckxKZeL76OKtoyLfPUgqblMNILgCOODZ2WCmonNV+H p9632gAZgMe7fW7Y5XNL/6XvtHBQOWramGb9AhIMCmGm3+onVJ5u7x8BhV4t3xD8 KSlNSJkzMGZHiniKp7EU/y91XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/cNSQ7 Qf6VGUtQI7CrhQMV6bEcMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0WdO+LxU7tLGVP5yoPo/j+ODOxk+wfOFzy08EL4bowENxZ7Pex0Su /mY6WWIW0/wEp95l/UfoYpHL4Dud4Aa9EjRqiLysfCvMFXsktmIhc88mzsTtxa4q VTZHsx60vexCpqXLXh8cu6nJ7fWUIf4SixEhoImryvNaW0AHDACY7x7XUI6q1Oq2 I6FD7MBcgKQiSgdNiX9YkNIb2cRpNXHoDxQ43Hhet4MLj8hQQSp8+lFoPiwhBYNl SdFOFrywa6ek5icTvNVr62hQoaIqROqZzIQZS/PhJVRB6K73KcjhlswA8tln1Wte jJoeTSC9dKWYH/0eXL2DscuvIY0QFeOu -----END CERTIFICATE-----Generated at Sun May 11 16:48:24 2025 by rpki-client