$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json) Hash identifier: uQewOj1NmtiAb1Pz08f8vMabte3K5N7pF2yDk9Qb9ck= Subject key identifier: F8:FB:6C:B6:5F:DE:43:78:27:1E:99:16:04:91:DC:22:E3:29:09:DF Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft Manifest number: 0649 Signing time: Sun 04 May 2025 22:12:09 +0000 Manifest this update: Sun 04 May 2025 22:12:08 +0000 Manifest next update: Sun 11 May 2025 22:12:08 +0000 Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: e5NUlJATfKJ7rKy9Un/62I56xLHt5pFKGRBy3RpbvjA=) 2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Validity Not Before: May 4 22:12:08 2025 GMT Not After : May 11 22:12:08 2025 GMT Subject: CN=6817e638-7daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:9b:eb:dc:85:13:cd:4f:0a:f9:9f:23:77: 70:51:a1:9c:4f:97:67:b5:d7:aa:0e:3c:00:eb:41: c3:05:37:f9:8e:9e:f9:d9:ab:1b:d6:22:8e:5f:db: ee:b6:61:30:53:1a:02:09:5e:9a:26:76:b3:02:3c: f8:13:b1:69:ba:75:fb:80:c8:13:1e:de:70:3a:62: 97:bf:ab:b8:83:64:bf:af:15:6c:e7:61:1e:e1:46: 25:fe:4a:57:c1:f4:66:44:db:6f:b5:ed:ab:06:87: 75:06:9a:f5:7b:ed:07:1f:a1:06:cd:7d:7e:4c:2c: 42:f1:92:13:4d:96:a6:4d:ce:9a:45:fa:b8:2b:9d: b2:71:e8:52:cf:a4:41:f6:d4:72:7c:49:34:90:2b: 07:c6:03:fd:3f:63:45:e5:c2:0f:6b:ee:4c:ed:2d: 20:49:f5:1b:a1:a3:43:06:85:6d:70:66:6d:90:f2: 70:79:58:e5:93:eb:e0:f0:06:9d:f8:55:89:fe:19: c9:82:ea:26:61:7f:82:1a:e6:07:66:f8:a1:bf:89: af:a8:5a:50:3e:2e:05:c0:46:96:55:61:8d:0c:f2: b4:b3:c4:6b:1a:ee:cb:7f:c2:3b:4d:32:9a:ba:f1: 02:ae:1b:9d:72:3f:3c:03:ec:5e:1d:e1:f5:e2:19: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FB:6C:B6:5F:DE:43:78:27:1E:99:16:04:91:DC:22:E3:29:09:DF X509v3 Authority Key Identifier: keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:40:f1:84:43:df:05:47:8f:08:41:2b:8a:d1:71:5f:d2: 92:6b:9a:c7:d5:c0:8a:4a:5d:0d:6a:29:e9:b3:48:4b:0d:5c: f4:b1:79:27:ad:eb:0c:a7:7c:5e:ec:ca:5d:e1:66:27:4d:ba: c8:60:4b:5c:75:d8:49:74:69:7a:28:b5:fa:66:dd:72:ea:59: c6:5d:0f:59:8e:8a:78:74:73:39:28:5a:4f:de:b9:25:7a:36: b8:5c:bd:12:38:84:67:ee:53:03:11:dd:1f:04:70:ed:4f:f6: 2d:4e:10:37:da:56:c2:1a:db:42:15:f5:c9:0a:60:a0:e1:2b: 3f:87:db:42:fa:cd:b3:74:f0:6c:08:1e:da:86:ee:34:d2:5b: 81:23:0c:31:95:6c:8a:bd:e1:ea:6a:26:88:92:01:af:8a:e1: 1f:f8:45:ee:31:73:e4:2c:9f:42:19:de:21:b8:6e:6d:b6:2f: 17:59:7a:4d:f2:27:84:67:bd:e9:fb:6c:e7:98:2d:10:af:81: 8f:60:46:ac:fd:6f:9b:9c:7d:6e:82:0a:5a:82:54:11:41:87: 26:59:20:8e:16:11:8a:f5:c2:fa:85:84:4e:6c:5c:ce:55:bc: 92:07:6e:39:f6:e3:5a:2f:15:10:5f:a7:71:3c:b5:31:fd:d8: 8b:43:b8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG N0VDNkQ0NzAwHhcNMjUwNTA0MjIxMjA4WhcNMjUwNTExMjIxMjA4WjAYMRYwFAYD VQQDEw02ODE3ZTYzOC03ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF2b69yFE81PCvmfI3dwUaGcT5dntdeqDjwA60HDBTf5jp752asb1iKOX9vu tmEwUxoCCV6aJnazAjz4E7FpunX7gMgTHt5wOmKXv6u4g2S/rxVs52Ee4UYl/kpX wfRmRNtvte2rBod1Bpr1e+0HH6EGzX1+TCxC8ZITTZamTc6aRfq4K52ycehSz6RB 9tRyfEk0kCsHxgP9P2NF5cIPa+5M7S0gSfUboaNDBoVtcGZtkPJweVjlk+vg8Aad +FWJ/hnJguomYX+CGuYHZvihv4mvqFpQPi4FwEaWVWGNDPK0s8RrGu7Lf8I7TTKa uvECrhudcj88A+xeHeH14hlYJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPj7bLZf 3kN4Jx6ZFgSR3CLjKQnfMB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2 MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y TlM3TDFLTEhkUHozN0cxSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXj0DxhEPfBUePCEEritFxX9KSa5rH1cCKSl0Nainps0hLDVz0sXkn resMp3xe7Mpd4WYnTbrIYEtcddhJdGl6KLX6Zt1y6lnGXQ9Zjop4dHM5KFpP3rkl eja4XL0SOIRn7lMDEd0fBHDtT/YtThA32lbCGttCFfXJCmCg4Ss/h9tC+s2zdPBs CB7ahu400luBIwwxlWyKveHqaiaIkgGviuEf+EXuMXPkLJ9CGd4huG5tti8XWXpN 8ieEZ73p+2znmC0Qr4GPYEas/W+bnH1uggpaglQRQYcmWSCOFhGK9cL6hYRObFzO VbySB2459uNaLxUQX6dxPLUx/diLQ7gS -----END CERTIFICATE-----Generated at Mon May 5 03:10:39 2025 by rpki-client