$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json) Hash identifier: Z0rSl0YiC71cPPqwfn1PmHzhaf9dMfH6Usvgu0F8RiY= Subject key identifier: D3:E7:D5:4A:2A:11:A3:41:EF:F3:48:EB:9F:AC:AD:AB:93:A3:63:4B Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft Manifest number: 04C7 Signing time: Thu 08 May 2025 23:38:36 +0000 Manifest this update: Thu 08 May 2025 23:38:35 +0000 Manifest next update: Thu 15 May 2025 23:38:35 +0000 Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: FQZMXMGzkyEZXgzw3ffUo5jy9gwpwKWQn1Si/nxR1OU=) 2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: 6pWGQwdhpFKj5uyRVvtM8M7iiAHBMFerXsGqI0l0KTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Validity Not Before: May 8 23:38:35 2025 GMT Not After : May 15 23:38:35 2025 GMT Subject: CN=681d407c-3e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:e7:35:a6:e8:68:7d:c5:99:43:89:95:eb: 38:8a:92:de:e3:20:bc:a8:e4:43:fc:f8:59:2b:9a: c8:fd:64:b6:c3:0f:69:95:29:b0:e8:68:e9:70:b1: 26:52:70:48:6a:f6:fa:3c:80:99:5f:f6:91:b2:48: 44:40:20:37:dc:c7:eb:c3:31:c9:a1:39:69:35:c1: b6:f3:70:3d:03:0e:f5:16:2f:e8:04:29:39:77:77: 07:2b:0c:b4:bf:ec:c9:03:73:52:02:ba:91:f4:08: 46:8d:78:78:a1:bd:35:89:6f:2d:18:9c:46:cb:ca: 41:cd:be:34:bf:51:08:7b:da:6d:a4:3a:69:2c:20: 86:94:72:5e:20:68:e5:a2:27:47:85:21:82:c6:22: fc:20:3f:c8:e0:e1:06:03:53:35:57:c3:dc:51:c7: 24:5c:d8:ac:29:09:a0:4f:33:17:59:c9:d3:ba:14: c8:0f:75:7c:a9:a3:cd:d6:2e:e5:64:aa:9b:10:63: 8e:21:da:b8:2a:da:96:00:f2:fb:68:0d:d7:b3:35: e0:61:60:03:a3:6c:27:5b:16:7e:ff:07:f0:7b:42: 32:e1:65:f7:6b:49:98:a5:62:ea:49:ba:38:3d:6f: f3:aa:e8:14:53:3b:a0:d7:2c:c1:6b:15:a2:44:20: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:D5:4A:2A:11:A3:41:EF:F3:48:EB:9F:AC:AD:AB:93:A3:63:4B X509v3 Authority Key Identifier: keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6b:c4:00:be:98:0c:71:87:de:52:8a:11:ef:d8:6c:6c:7c: 0e:1a:1c:03:e1:d4:70:f3:23:9e:9c:0e:4a:13:e2:7d:d5:19: e0:3b:4e:f3:f4:0a:6e:59:2c:7b:a9:d7:27:d9:97:44:66:ec: cf:f7:56:4b:6a:e5:3f:37:ab:46:f0:a4:52:a1:3e:c2:ad:ce: 95:fb:87:28:df:8c:e8:7d:f6:8f:bc:bf:da:e5:21:fa:e3:7e: 88:62:a4:e7:d7:67:c4:e8:5a:c2:d3:ed:d9:96:02:ec:de:70: d5:1b:13:bb:48:e6:fc:c4:4c:5d:3b:82:48:39:80:91:e5:3c: d0:12:82:b9:79:f7:34:a5:f1:83:28:c7:4c:47:15:1b:79:dd: ea:66:45:ba:94:27:9a:e0:96:ae:b3:1f:e5:9e:e7:e7:f1:da: 53:5f:27:f2:5c:90:e8:cb:41:ce:4c:06:58:62:ac:7a:36:14: c0:c4:82:47:66:45:9a:a3:e3:c8:0b:af:63:2c:e5:e8:cc:d2: c0:de:cb:50:62:60:cb:6a:ea:41:86:06:bf:3a:75:bf:15:12: a9:e6:10:28:58:af:e1:01:49:6c:3f:46:87:c0:ac:d8:a8:3d: 0a:49:5a:3a:da:48:08:c6:9a:e4:24:65:55:be:04:3f:32:3f: e4:46:97:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3OTIxMTAvBgNVBAUTKEYxNzhBODdDNTQ3MzA0MzdCQTU5RkFBOUNFMTg0RkY4 NzkwRkU0RjEwHhcNMjUwNTA4MjMzODM1WhcNMjUwNTE1MjMzODM1WjAYMRYwFAYD VQQDEw02ODFkNDA3Yy0zZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4PnNaboaH3FmUOJles4ipLe4yC8qORD/PhZK5rI/WS2ww9plSmw6GjpcLEm UnBIavb6PICZX/aRskhEQCA33MfrwzHJoTlpNcG283A9Aw71Fi/oBCk5d3cHKwy0 v+zJA3NSArqR9AhGjXh4ob01iW8tGJxGy8pBzb40v1EIe9ptpDppLCCGlHJeIGjl oidHhSGCxiL8ID/I4OEGA1M1V8PcUcckXNisKQmgTzMXWcnTuhTID3V8qaPN1i7l ZKqbEGOOIdq4KtqWAPL7aA3XszXgYWADo2wnWxZ+/wfwe0Iy4WX3a0mYpWLqSbo4 PW/zqugUUzug1yzBaxWiRCDUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPn1Uoq EaNB7/NI65+srauTo2NLMB8GA1UdIwQYMBaAFPF4qHxUcwQ3uln6qc4YT/h5D+Tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjc5Mi9EQkYxQzc3MjIx RUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJEZTZXZnFwemhoUC1Ia1A1 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYaW9mRlJ6QkRlNldmcXB6aGhQLUhrUDVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njc5Mi9EQkYxQzc3MjIxRUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJE ZTZXZnFwemhoUC1Ia1A1UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2a8QAvpgMcYfeUooR79hsbHwOGhwD4dRw8yOenA5KE+J91RngO07z 9ApuWSx7qdcn2ZdEZuzP91ZLauU/N6tG8KRSoT7Crc6V+4co34zoffaPvL/a5SH6 436IYqTn12fE6FrC0+3ZlgLs3nDVGxO7SOb8xExdO4JIOYCR5TzQEoK5efc0pfGD KMdMRxUbed3qZkW6lCea4Jausx/lnufn8dpTXyfyXJDoy0HOTAZYYqx6NhTAxIJH ZkWao+PIC69jLOXozNLA3stQYmDLaupBhga/OnW/FRKp5hAoWK/hAUlsP0aHwKzY qD0KSVo62kgIxprkJGVVvgQ/Mj/kRpfY -----END CERTIFICATE-----Generated at Sat May 10 19:45:27 2025 by rpki-client