$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: sAqufcRGhx/AmEGLHQ998BKU1dGZuYgESJVSbmDVKyU= Subject key identifier: E2:A8:BE:08:BE:36:23:5F:00:E1:7E:8C:C0:A9:D0:0A:D3:0F:31:9E Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0C47 Signing time: Mon 12 May 2025 18:16:59 +0000 Manifest this update: Mon 12 May 2025 18:16:58 +0000 Manifest next update: Mon 19 May 2025 18:16:58 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: 7b2XIdAhqVIKXqw8HNq6ARvNeRbOCCZF9+/Un39QT5I=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: May 12 18:16:58 2025 GMT Not After : May 19 18:16:58 2025 GMT Subject: CN=68223b1b-83b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:6c:dd:7b:05:23:61:77:7b:85:e5:ef:0b: d5:82:26:9a:2e:73:df:df:2b:26:06:56:a5:f9:34: 22:2f:b0:53:96:76:1e:14:01:3b:34:f8:29:cb:85: fc:23:e6:72:5b:b9:4f:a8:9b:2b:a1:a7:e5:f6:59: 25:5b:77:92:fd:a9:8c:95:f3:73:af:23:73:04:69: c5:73:75:8b:22:04:2d:fb:0d:3c:19:bc:a3:5a:fb: e4:76:ae:b3:7a:ee:b2:97:e4:11:42:23:0d:a8:87: 93:67:ab:a9:66:9d:23:1b:2a:8e:39:10:d2:99:d8: 00:fb:0a:e6:fe:c2:23:8b:47:73:64:b4:04:da:d7: cb:b7:78:4b:bb:e9:00:f1:13:64:ee:65:c3:6c:62: ac:63:3d:36:48:88:00:28:6d:45:27:1e:7f:aa:45: e1:6b:67:f7:97:89:4c:7c:3f:c0:62:85:5c:76:3d: d9:e4:86:59:0f:ae:df:1b:26:6e:e7:33:22:da:70: 4b:39:96:ab:85:b6:f6:8a:94:63:ef:fe:a7:12:ff: ef:2b:f1:18:a5:6a:e3:7c:97:0b:d4:dd:c1:31:3a: 99:55:df:cc:59:8b:30:12:48:54:d2:22:3a:27:ba: 6a:b4:2a:36:80:54:f4:73:1a:f7:27:01:17:30:6b: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A8:BE:08:BE:36:23:5F:00:E1:7E:8C:C0:A9:D0:0A:D3:0F:31:9E X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:27:3d:75:bd:86:c2:2e:a3:5f:a5:ac:db:c8:d9:55:17:73: bf:f3:89:27:bc:c1:89:1d:16:d2:9e:4c:3f:31:fd:87:bc:e9: eb:70:52:a0:1e:f6:60:3a:c4:e6:bb:81:55:e8:b6:da:2f:6f: 8f:50:f5:db:ed:91:ee:3f:69:aa:72:2b:3d:0a:29:e9:fc:5d: 34:41:e2:d6:e4:fe:ec:b2:9d:90:5a:35:1e:e2:53:a4:b6:dc: 71:f4:c5:12:72:79:33:c1:b0:a8:ff:a0:9c:72:29:51:f3:0a: 28:67:08:5b:83:da:9c:be:4b:0d:28:f6:6a:79:7f:bc:72:6d: 0b:79:b4:62:9a:d6:21:9e:f2:f4:d5:2f:74:3c:cb:59:cf:6a: e4:d8:f6:c0:6e:34:37:4e:e3:3e:f2:f6:3a:6c:b0:23:6f:8b: 96:8b:ee:83:bc:c3:e5:70:79:cb:9b:97:1d:41:9f:90:f5:40: cf:0f:25:53:1b:49:aa:13:c6:d9:05:9d:27:39:52:b3:fb:d2: 11:38:79:06:24:49:60:2a:56:a4:c6:f6:1d:72:0a:44:a5:3f: cd:4c:dd:f3:44:7f:9f:14:8f:48:19:1e:77:83:2c:5e:9d:bd: 13:57:34:ef:d7:f3:8d:33:e6:97:af:ea:a0:9b:d0:00:2d:a9: 81:9b:29:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUwNTEyMTgxNjU4WhcNMjUwNTE5MTgxNjU4WjAYMRYwFAYD VQQDEw02ODIyM2IxYi04M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4Fs3XsFI2F3e4Xl7wvVgiaaLnPf3ysmBlal+TQiL7BTlnYeFAE7NPgpy4X8 I+ZyW7lPqJsroafl9lklW3eS/amMlfNzryNzBGnFc3WLIgQt+w08GbyjWvvkdq6z eu6yl+QRQiMNqIeTZ6upZp0jGyqOORDSmdgA+wrm/sIji0dzZLQE2tfLt3hLu+kA 8RNk7mXDbGKsYz02SIgAKG1FJx5/qkXha2f3l4lMfD/AYoVcdj3Z5IZZD67fGyZu 5zMi2nBLOZarhbb2ipRj7/6nEv/vK/EYpWrjfJcL1N3BMTqZVd/MWYswEkhU0iI6 J7pqtCo2gFT0cxr3JwEXMGsCYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKovgi+ NiNfAOF+jMCp0ArTDzGeMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbJz11vYbCLqNfpazbyNlVF3O/84knvMGJHRbSnkw/Mf2HvOnrcFKg HvZgOsTmu4FV6LbaL2+PUPXb7ZHuP2mqcis9Cinp/F00QeLW5P7ssp2QWjUe4lOk ttxx9MUScnkzwbCo/6CccilR8wooZwhbg9qcvksNKPZqeX+8cm0LebRimtYhnvL0 1S90PMtZz2rk2PbAbjQ3TuM+8vY6bLAjb4uWi+6DvMPlcHnLm5cdQZ+Q9UDPDyVT G0mqE8bZBZ0nOVKz+9IROHkGJElgKlakxvYdcgpEpT/NTN3zRH+fFI9IGR53gyxe nb0TVzTv1/ONM+aXr+qgm9AALamBmylv -----END CERTIFICATE-----Generated at Tue May 13 11:43:50 2025 by rpki-client