$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: 52c26LtaBSISA1Xq5VM+K3aQ2elYYkipwk1DGh4m9xw= Subject key identifier: AB:32:A3:E2:57:D5:43:FF:40:22:C2:48:60:B3:33:D6:39:5A:DC:D0 Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 06D2 Signing time: Sat 10 May 2025 21:39:42 +0000 Manifest this update: Sat 10 May 2025 21:39:42 +0000 Manifest next update: Sat 17 May 2025 21:39:42 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: OX0Q1g+FpcLIoBHh4R8z+93c/8wpERgTqcROSFs0QN8=) 2: B6FCD4F60CD111ECABD2264AC4F9AE02.roa (hash: bB+9hsPPapCcbcV407klYfK5DJTWT3wpVck7/MMMHXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: May 10 21:39:42 2025 GMT Not After : May 17 21:39:42 2025 GMT Subject: CN=681fc79e-cfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:b5:1e:9e:55:54:03:33:2c:6d:49:f8:2f: 89:47:13:5e:49:10:d8:4c:1c:37:dc:de:f5:b5:14: ad:09:8d:a7:4c:0d:95:46:ca:82:c7:e0:60:38:e7: 89:22:95:fb:e1:05:12:34:cb:17:5c:30:7c:fd:da: d2:99:8a:7b:ca:af:dd:ae:f3:8d:18:37:6e:f4:7b: 3a:e8:d4:bc:68:a8:8e:e3:33:c4:51:ae:df:9a:13: d9:ec:71:d3:36:a8:16:80:07:19:06:de:89:c2:8e: ee:05:1d:ba:69:77:0d:bb:8f:6e:5f:3c:bd:bd:9f: ae:ff:40:1b:1e:af:88:4a:49:e4:82:39:8e:01:01: a3:bc:5e:4a:1b:8f:2d:98:ec:ab:75:8c:ff:42:c8: f0:5d:11:27:bd:6a:df:97:50:64:25:e3:55:21:62: 24:07:c7:85:72:30:86:11:e7:66:9d:75:f4:f2:94: c0:59:92:57:6b:00:9a:2e:80:00:6f:8f:c3:c1:d2: 7e:d8:4e:b7:c8:dc:9a:d3:9f:d5:b1:4b:6e:34:10: c1:77:d8:43:34:33:5e:7c:00:24:fb:54:de:c7:cf: 00:81:09:44:0a:54:e8:7a:f5:93:46:52:35:29:21: 7b:7c:80:da:f6:b7:47:14:94:4a:f3:02:aa:4d:f4: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:A3:E2:57:D5:43:FF:40:22:C2:48:60:B3:33:D6:39:5A:DC:D0 X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:40:ff:41:5e:74:79:2a:1a:c7:c0:bd:50:0d:d8:2e:5c:89: 86:96:24:cc:ef:dd:be:bd:c6:e5:76:76:b2:f6:35:83:7d:ee: aa:7e:b6:69:43:dd:9c:da:9d:4f:67:c5:ea:5e:33:58:a3:22: 5d:47:07:a5:d2:4c:57:b5:54:e6:56:4b:bf:e0:7f:b9:0b:bf: 98:c0:63:2c:48:a7:cc:ac:4c:55:d4:37:b6:a2:c5:5f:8f:87: 11:c8:7c:c4:b8:58:72:73:5d:88:54:f9:4d:c3:86:5d:55:fb: 0e:bc:6f:e6:1c:43:2e:d8:ed:8d:a8:1a:c3:05:05:e3:4c:ba: a4:79:a7:16:78:b5:e9:4e:58:36:8c:40:d0:63:a5:21:ac:fa: 33:3c:db:d4:4c:eb:c5:fb:69:21:b1:b7:d5:ff:75:be:ac:ea: 7c:a7:56:25:a8:43:ea:c0:8b:5d:7a:73:85:78:2c:77:ba:36: 88:1c:07:a1:c4:8d:84:13:0b:86:0e:5d:e6:63:98:f5:b2:75: e6:fd:74:76:b1:40:8e:aa:2c:cb:39:4d:70:37:1c:d6:97:74: 90:2e:23:30:e9:22:5f:3d:0d:55:a8:01:9b:d7:f5:9c:a9:8d: 5a:22:6a:89:ab:f0:5e:59:87:20:8d:e1:41:dc:80:fe:6e:fd: 2f:c9:d8:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUwNTEwMjEzOTQyWhcNMjUwNTE3MjEzOTQyWjAYMRYwFAYD VQQDEw02ODFmYzc5ZS1jZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14W1Hp5VVAMzLG1J+C+JRxNeSRDYTBw33N71tRStCY2nTA2VRsqCx+BgOOeJ IpX74QUSNMsXXDB8/drSmYp7yq/drvONGDdu9Hs66NS8aKiO4zPEUa7fmhPZ7HHT NqgWgAcZBt6Jwo7uBR26aXcNu49uXzy9vZ+u/0AbHq+ISknkgjmOAQGjvF5KG48t mOyrdYz/QsjwXREnvWrfl1BkJeNVIWIkB8eFcjCGEedmnXX08pTAWZJXawCaLoAA b4/DwdJ+2E63yNya05/VsUtuNBDBd9hDNDNefAAk+1Tex88AgQlEClToevWTRlI1 KSF7fIDa9rdHFJRK8wKqTfTN/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsyo+JX 1UP/QCLCSGCzM9Y5WtzQMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyQP9BXnR5KhrHwL1QDdguXImGliTM792+vcbldnay9jWDfe6qfrZp Q92c2p1PZ8XqXjNYoyJdRwel0kxXtVTmVku/4H+5C7+YwGMsSKfMrExV1De2osVf j4cRyHzEuFhyc12IVPlNw4ZdVfsOvG/mHEMu2O2NqBrDBQXjTLqkeacWeLXpTlg2 jEDQY6UhrPozPNvUTOvF+2khsbfV/3W+rOp8p1YlqEPqwItdenOFeCx3ujaIHAeh xI2EEwuGDl3mY5j1snXm/XR2sUCOqizLOU1wNxzWl3SQLiMw6SJfPQ1VqAGb1/Wc qY1aImqJq/BeWYcgjeFB3ID+bv0vydii -----END CERTIFICATE-----Generated at Sun May 11 20:06:08 2025 by rpki-client