$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: dETqplwU8mbbqmmxWRC6fGf1K2kNMj/ttvJZ5U54Tqs= Subject key identifier: 01:04:64:69:BA:ED:04:6F:86:DB:83:DF:6F:83:FF:3C:70:36:A3:1B Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 071F Signing time: Sat 10 May 2025 21:29:21 +0000 Manifest this update: Sat 10 May 2025 21:29:21 +0000 Manifest next update: Sat 17 May 2025 21:29:21 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: gxIX/p8N75ztMsnU1gE0LkF4/5KaolBrbNJF3dEFk9s=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: May 10 21:29:21 2025 GMT Not After : May 17 21:29:21 2025 GMT Subject: CN=681fc531-3b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:5b:dd:7d:9e:f8:f1:9a:f2:8e:69:87:ad: 75:79:50:e8:b2:af:62:65:92:85:4b:1c:a2:e6:ad: 32:4e:da:2d:1b:b4:2b:c2:3a:16:53:63:59:9e:f5: c2:3c:b8:33:8c:b2:cc:46:81:41:3f:f8:cf:17:a6: 1b:c3:a8:53:d3:9e:fb:08:7a:b9:2e:44:b8:a6:f7: 57:e9:0d:55:a1:8b:b4:05:2c:7b:67:67:06:be:ce: c6:b2:92:21:8b:f5:d5:88:85:61:97:bf:46:e0:03: 17:c4:9f:35:42:64:20:6a:69:aa:6f:8c:e7:23:c2: 7e:0c:70:47:11:81:1b:84:ec:40:5b:de:11:d5:a1: 4b:91:06:2a:44:69:b3:51:79:6b:67:0c:f1:87:f5: cf:5b:5f:e2:a1:30:87:9a:54:7d:d7:2b:73:31:00: e5:b6:53:5e:33:04:8a:8e:07:ff:9c:25:da:21:9a: 05:35:59:99:59:56:4b:2b:c5:3e:79:a5:e3:1b:33: e2:90:4d:e5:89:92:f1:ba:25:59:a5:88:19:a6:b6: 76:14:c6:0c:a1:ba:93:2b:c4:b3:9c:a5:a4:66:10: f1:c5:ed:36:1e:56:f6:ec:76:84:a6:a4:5f:3d:b9: 48:60:cc:da:bb:0e:f0:0f:73:57:72:56:d5:e7:57: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:04:64:69:BA:ED:04:6F:86:DB:83:DF:6F:83:FF:3C:70:36:A3:1B X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cc:07:39:24:74:8a:7c:73:92:b3:3b:72:a3:30:72:8f:6e: 1e:82:22:e9:ca:03:b7:bf:f2:55:ca:a2:1d:fc:9a:12:a8:98: cc:e9:8f:fc:64:75:7e:ab:df:e0:17:ec:61:db:6e:25:0b:92: 78:f1:54:05:4a:f4:00:71:c0:c2:b7:98:2a:96:b7:2e:ae:7e: 73:03:d8:bb:e1:29:ae:7c:cd:ef:64:57:f1:9f:23:8b:9a:3f: 8e:0e:98:b6:19:4f:88:8c:e3:b5:e7:c7:2c:a8:bd:ba:ed:64: 9b:7d:ed:1d:b8:07:3e:55:e0:a7:c1:2d:74:ee:56:13:94:94: 5b:e8:02:0d:cc:a8:c2:b5:52:c2:c5:af:57:0f:ab:56:1c:90: 8e:47:75:49:a0:98:a6:00:2a:ca:cc:c3:a5:01:ae:9d:3a:79: 5b:11:09:74:85:f6:26:ed:84:92:e7:e6:b4:44:08:16:6f:ca: 36:4a:55:fb:58:e9:8e:6d:9a:ad:f7:66:84:3c:b9:9f:4f:7b: 25:04:15:d2:7b:51:e9:bc:a1:d5:1e:43:07:b8:78:5b:f2:9e: 43:ae:3f:a9:6b:2a:72:75:01:b2:16:6e:83:49:38:38:c7:7e: 8f:6e:28:92:4b:4c:25:3b:53:c1:c6:45:89:fa:c0:d1:f7:4d: 13:7c:6c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwNTEwMjEyOTIxWhcNMjUwNTE3MjEyOTIxWjAYMRYwFAYD VQQDEw02ODFmYzUzMS0zYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN1b3X2e+PGa8o5ph611eVDosq9iZZKFSxyi5q0yTtotG7QrwjoWU2NZnvXC PLgzjLLMRoFBP/jPF6Ybw6hT0577CHq5LkS4pvdX6Q1VoYu0BSx7Z2cGvs7GspIh i/XViIVhl79G4AMXxJ81QmQgammqb4znI8J+DHBHEYEbhOxAW94R1aFLkQYqRGmz UXlrZwzxh/XPW1/ioTCHmlR91ytzMQDltlNeMwSKjgf/nCXaIZoFNVmZWVZLK8U+ eaXjGzPikE3liZLxuiVZpYgZprZ2FMYMobqTK8SznKWkZhDxxe02Hlb27HaEpqRf PblIYMzauw7wD3NXclbV51d8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEEZGm6 7QRvhtuD32+D/zxwNqMbMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2zAc5JHSKfHOSsztyozByj24egiLpygO3v/JVyqId/JoSqJjM6Y/8 ZHV+q9/gF+xh224lC5J48VQFSvQAccDCt5gqlrcurn5zA9i74SmufM3vZFfxnyOL mj+ODpi2GU+IjOO158csqL267WSbfe0duAc+VeCnwS107lYTlJRb6AINzKjCtVLC xa9XD6tWHJCOR3VJoJimACrKzMOlAa6dOnlbEQl0hfYm7YSS5+a0RAgWb8o2SlX7 WOmObZqt92aEPLmfT3slBBXSe1HpvKHVHkMHuHhb8p5Drj+paypydQGyFm6DSTg4 x36PbiiSS0wlO1PBxkWJ+sDR900TfGyQ -----END CERTIFICATE-----Generated at Mon May 12 13:29:31 2025 by rpki-client