$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: cJ6JZFkhSSawisKFjBEakGOEOH+U4bKZCCKbhLwni5Q= Subject key identifier: 85:C5:85:D5:8F:D8:FC:EB:52:B8:90:AB:E0:6B:BC:35:40:57:84:43 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C3B Signing time: Sun 04 May 2025 21:17:56 +0000 Manifest this update: Sun 04 May 2025 21:17:56 +0000 Manifest next update: Sun 11 May 2025 21:17:56 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: iD+qn9gSQKv+IDS9JNPMUa2CqKxe2JMIdAT3bST18HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: May 4 21:17:56 2025 GMT Not After : May 11 21:17:56 2025 GMT Subject: CN=6817d984-a0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:a1:38:72:1d:73:3e:9f:76:0b:08:2a:fc: 21:21:ec:d5:35:16:db:19:c7:30:b0:0c:21:69:28: 30:6e:40:e6:12:22:f7:89:a6:4e:f0:cb:0d:77:74: cf:eb:5c:ae:5a:f8:9c:0b:51:88:e2:44:7e:57:08: 19:e6:7d:c1:7a:54:85:c5:9b:62:2e:e3:4c:b4:39: 0e:a2:97:86:f1:d3:c6:6b:26:cc:51:fb:e2:49:1b: b4:6e:1c:4c:e1:fd:85:c8:6a:2f:b3:87:26:d6:5f: 6d:d6:3c:c9:03:f7:ba:f8:79:2f:54:5d:b6:90:d2: 4c:c5:9d:6f:07:99:ca:63:e4:55:19:83:7c:6a:e8: d6:7c:23:f4:74:c8:23:52:87:fa:d7:0e:16:54:c3: 30:7a:80:51:7d:c3:25:18:11:6a:b3:6c:6d:b5:73: 73:1f:f8:08:b3:c0:98:ce:47:35:4c:c9:f6:fa:d4: 8d:1e:cf:71:0d:e6:c8:ae:64:7d:b0:f3:5e:31:55: 51:48:fe:f8:a0:5e:3d:16:0b:7d:a3:77:6c:1b:39: 3f:d8:d3:3a:7b:71:22:54:e1:de:04:ba:60:5c:ad: 3a:67:99:1a:60:bc:3f:4b:24:f7:b6:63:32:c9:17: e8:6c:07:09:10:47:ca:18:9e:23:19:b3:1f:2f:3a: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:85:D5:8F:D8:FC:EB:52:B8:90:AB:E0:6B:BC:35:40:57:84:43 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7b:20:c9:48:48:a2:d3:1d:bc:c7:82:75:c7:1c:a6:4c:6a: c1:05:ff:fa:ec:e9:a6:56:c3:58:d0:3a:30:d1:9f:fd:48:de: 58:80:5b:e2:49:eb:1a:0c:e9:72:c7:29:62:37:92:74:75:39: 34:e6:39:75:1d:28:58:14:55:b0:78:73:e3:27:00:60:ce:3e: b2:69:03:43:c7:4a:97:07:bc:eb:df:ed:14:b0:88:22:c6:dc: 16:b2:f7:da:5f:81:92:10:a7:96:9b:d0:65:4e:5b:7b:6e:64: b7:cc:d0:61:00:13:d7:2e:24:cf:5f:77:42:94:b8:a0:e0:6f: 32:56:9e:f5:b8:21:ca:1f:2b:08:7f:bd:2f:28:10:14:be:58: ea:32:9e:72:65:25:9c:2e:3b:04:c1:58:43:38:db:2a:e8:87: bf:50:4c:57:9f:c4:79:b9:5b:17:eb:1e:5f:9c:c1:5c:fa:44: 8c:36:66:c8:c9:6b:99:69:96:67:17:c7:5e:a9:01:75:8d:e7: 7b:cf:61:3a:ba:10:8c:bf:e6:d6:75:e5:e1:17:81:79:f4:e4: d4:41:61:bf:3c:0d:a2:0a:f3:42:00:6b:8c:af:91:ba:36:32: 0f:1e:fe:4a:16:1a:16:de:ae:2e:43:2a:7e:af:82:d8:ac:20: fb:d7:72:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwNTA0MjExNzU2WhcNMjUwNTExMjExNzU2WjAYMRYwFAYD VQQDEw02ODE3ZDk4NC1hMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5m2hOHIdcz6fdgsIKvwhIezVNRbbGccwsAwhaSgwbkDmEiL3iaZO8MsNd3TP 61yuWvicC1GI4kR+VwgZ5n3BelSFxZtiLuNMtDkOopeG8dPGaybMUfviSRu0bhxM 4f2FyGovs4cm1l9t1jzJA/e6+HkvVF22kNJMxZ1vB5nKY+RVGYN8aujWfCP0dMgj Uof61w4WVMMweoBRfcMlGBFqs2xttXNzH/gIs8CYzkc1TMn2+tSNHs9xDebIrmR9 sPNeMVVRSP74oF49Fgt9o3dsGzk/2NM6e3EiVOHeBLpgXK06Z5kaYLw/SyT3tmMy yRfobAcJEEfKGJ4jGbMfLzrxLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXFhdWP 2PzrUriQq+BrvDVAV4RDMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNeyDJSEii0x28x4J1xxymTGrBBf/67OmmVsNY0Dow0Z/9SN5YgFvi SesaDOlyxyliN5J0dTk05jl1HShYFFWweHPjJwBgzj6yaQNDx0qXB7zr3+0UsIgi xtwWsvfaX4GSEKeWm9BlTlt7bmS3zNBhABPXLiTPX3dClLig4G8yVp71uCHKHysI f70vKBAUvljqMp5yZSWcLjsEwVhDONsq6Ie/UExXn8R5uVsX6x5fnMFc+kSMNmbI yWuZaZZnF8deqQF1jed7z2E6uhCMv+bWdeXhF4F59OTUQWG/PA2iCvNCAGuMr5G6 NjIPHv5KFhoW3q4uQyp+r4LYrCD713LJ -----END CERTIFICATE-----Generated at Mon May 5 12:29:45 2025 by rpki-client