$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: 6M24kcYij009yuxxVmAdqV8YPvN+WRuGAh6K8H2T3UM= Subject key identifier: D0:D8:26:1A:6F:EA:29:B8:4A:2B:CA:97:8F:5F:2C:9A:79:49:69:C0 Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 0308 Signing time: Fri 09 May 2025 00:59:56 +0000 Manifest this update: Fri 09 May 2025 00:59:56 +0000 Manifest next update: Fri 16 May 2025 00:59:56 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: jGeaqwwbELE/8eZzdkueBglKO6t4dc4BfXwFIrOOWuQ=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: r+FlKKjUNgnx6Bj8dzyLXGS4dtd9pVHhE7jzwzS2cXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: May 9 00:59:56 2025 GMT Not After : May 16 00:59:56 2025 GMT Subject: CN=681d538c-a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:90:d1:3b:de:d2:8f:98:a5:b0:de:cd:fb: 0d:d2:b2:ae:0b:6f:c2:bb:25:40:f2:f6:00:8c:e0: 3d:77:5c:49:85:3d:80:8e:8b:a9:55:86:57:e2:dc: f7:e0:2a:a0:a3:58:f5:48:1f:97:1d:0c:55:67:eb: c0:0b:50:c4:49:e9:61:b2:0c:a2:3b:22:9a:bb:77: 1e:e2:2d:d7:f0:34:ff:98:e6:f8:3d:f4:76:89:13: 5b:57:07:9a:39:e7:a7:0e:cd:0c:81:5f:f4:16:f9: 73:86:29:22:f5:62:c3:52:64:cd:e7:c7:c4:8c:5c: a8:97:a3:66:6a:fc:3a:8a:77:65:e4:fd:d4:49:2a: d3:50:63:77:50:b5:90:5b:15:50:f6:dd:e7:9f:1e: 7d:92:64:c8:4d:29:92:57:3f:2b:ef:c8:41:2c:93: 54:b5:18:52:69:6e:01:e2:f3:86:13:93:77:e5:14: 13:b3:43:06:a1:11:13:57:f3:ae:b3:f2:28:69:b0: f0:e0:13:80:15:e6:ad:9e:c3:15:d8:e9:e7:1c:f3: d0:c7:fe:df:f1:d4:7e:fb:e3:47:e6:d3:be:15:b7: a9:1a:dd:42:a8:9d:ff:e9:aa:4c:08:b2:5b:20:38: d2:89:28:1f:c9:50:a8:2d:5c:ab:7f:20:b4:63:7a: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:26:1A:6F:EA:29:B8:4A:2B:CA:97:8F:5F:2C:9A:79:49:69:C0 X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e2:63:b2:5a:23:7c:79:22:1b:d4:bf:d1:2f:95:1f:08:ba: a4:35:2d:13:21:4e:49:bb:2c:7b:40:cd:dc:c0:63:05:04:cb: b8:2f:c0:8b:c1:11:ce:e2:dc:e5:2e:32:3d:a1:f3:e2:4e:b8: 94:bb:ab:d7:2d:de:25:57:b7:c9:ff:a9:70:7f:62:9c:9e:f4: 5e:9f:b7:25:3b:0d:03:bb:d8:30:1a:86:80:1c:5d:44:2e:f9: 3b:4f:28:c0:63:71:52:1f:b9:be:69:86:f2:d3:dd:00:3c:01: 59:83:ee:e9:da:89:84:3c:b5:ce:76:c2:c2:ec:53:5d:b5:49: ab:f5:df:d3:e9:87:66:c9:dc:17:5b:26:dc:bf:58:6a:63:53: ad:d6:b1:9e:09:5a:3d:0b:48:7d:d4:6c:64:72:74:0a:59:63: e1:8c:0c:7a:46:10:1f:2e:9e:88:84:ee:8e:fd:27:89:f9:40: 80:77:a7:99:c3:ad:d3:e7:a3:e5:d2:01:65:42:22:58:5c:af: 07:d3:80:ff:47:c6:f4:17:0c:4a:14:8a:bc:ef:d0:95:67:94: ae:af:9d:dc:96:f6:9c:8b:d0:b5:81:82:ac:ab:54:a6:4d:95: 3a:ad:49:3f:e0:c1:58:fd:10:98:a5:17:1a:77:d2:f1:4f:c4: 28:51:2e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwNTA5MDA1OTU2WhcNMjUwNTE2MDA1OTU2WjAYMRYwFAYD VQQDEw02ODFkNTM4Yy1hNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto+Q0Tve0o+YpbDezfsN0rKuC2/CuyVA8vYAjOA9d1xJhT2AjoupVYZX4tz3 4Cqgo1j1SB+XHQxVZ+vAC1DESelhsgyiOyKau3ce4i3X8DT/mOb4PfR2iRNbVwea OeenDs0MgV/0Fvlzhiki9WLDUmTN58fEjFyol6Nmavw6indl5P3USSrTUGN3ULWQ WxVQ9t3nnx59kmTITSmSVz8r78hBLJNUtRhSaW4B4vOGE5N35RQTs0MGoRETV/Ou s/IoabDw4BOAFeatnsMV2OnnHPPQx/7f8dR+++NH5tO+FbepGt1CqJ3/6apMCLJb IDjSiSgfyVCoLVyrfyC0Y3rVYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDYJhpv 6im4SivKl49fLJp5SWnAMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB34mOyWiN8eSIb1L/RL5UfCLqkNS0TIU5Juyx7QM3cwGMFBMu4L8CL wRHO4tzlLjI9ofPiTriUu6vXLd4lV7fJ/6lwf2KcnvRen7clOw0Du9gwGoaAHF1E Lvk7TyjAY3FSH7m+aYby090APAFZg+7p2omEPLXOdsLC7FNdtUmr9d/T6YdmydwX Wybcv1hqY1Ot1rGeCVo9C0h91GxkcnQKWWPhjAx6RhAfLp6IhO6O/SeJ+UCAd6eZ w63T56Pl0gFlQiJYXK8H04D/R8b0FwxKFIq879CVZ5Sur53clvaci9C1gYKsq1Sm TZU6rUk/4MFY/RCYpRcad9LxT8QoUS4j -----END CERTIFICATE-----Generated at Sat May 10 13:53:59 2025 by rpki-client