$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: 4ZulGTiQOxJyxJtJmtnZ7hCwFNgT5kPUlaunCYhIkFY= Subject key identifier: F7:03:CA:AC:65:C6:AA:0A:61:14:33:C7:2B:67:74:60:9A:82:E6:31 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 048A Signing time: Sat 17 May 2025 00:14:57 +0000 Manifest this update: Sat 17 May 2025 00:14:56 +0000 Manifest next update: Sat 24 May 2025 00:14:56 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: dBObPlXFIkkEGJZyB1wyPChPplDPxWnwfMDC0TObQtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: May 17 00:14:56 2025 GMT Not After : May 24 00:14:56 2025 GMT Subject: CN=6827d500-b3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:09:21:2c:f8:96:fb:4d:e8:44:5d:0b:67: 94:43:2f:0c:66:98:ef:7f:d3:99:c4:fc:a3:d5:c8: 48:58:65:ee:ee:e7:35:38:5c:83:1d:2f:20:c6:3b: a8:09:3a:72:d4:85:f4:19:3e:63:b8:cc:9a:d3:21: 37:fa:5d:a6:6e:ec:3b:90:2b:9e:21:fa:63:82:07: d0:a3:0d:a0:0b:16:58:32:52:68:22:69:2c:9d:2c: 7e:37:85:8f:9b:c0:e4:66:4f:1e:30:16:f6:9f:ba: 30:43:5a:62:9b:c7:37:7e:4c:de:c0:4e:f1:74:4f: 7d:97:f4:b9:83:92:b0:6f:7b:d4:11:62:2a:26:b7: d8:b6:75:08:19:e3:01:ea:cf:bd:be:3b:46:fe:ab: 4c:f0:b2:89:fc:36:47:bf:23:6d:fc:b9:2a:0f:9f: 03:e0:67:18:c9:2a:79:5e:6c:c3:3c:c3:f5:d9:af: e8:c3:7e:c7:cd:d9:8a:a8:b3:22:62:02:63:da:08: f7:27:9d:f4:94:f0:18:82:05:da:49:24:69:f3:43: 60:6d:7d:ee:29:ee:61:aa:cc:60:3a:3a:69:9b:b3: ad:32:d4:e3:85:70:62:f4:ea:ba:1b:b4:54:a2:f9: 97:c5:9a:1a:97:7d:df:e6:58:98:8a:91:e3:a9:75: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:03:CA:AC:65:C6:AA:0A:61:14:33:C7:2B:67:74:60:9A:82:E6:31 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bd:8f:43:1a:1c:56:a0:17:b8:69:d1:67:d6:86:b7:b7:d8: 6b:a8:cc:d8:7d:c9:22:7e:e9:de:0c:5d:ea:43:cb:0a:43:38: 9e:f8:e0:53:1c:ec:f3:ed:c9:95:43:b0:3f:eb:00:1e:46:34: a8:41:6c:61:eb:48:57:f0:fb:5f:0d:f3:59:ae:3d:ed:68:48: 2f:34:79:d1:82:90:fb:f7:57:fb:e5:35:45:4c:cf:5f:b7:19: bf:dd:ff:42:a8:11:35:38:54:12:8e:4e:a6:4b:ec:ce:12:84: 13:48:db:81:58:cb:81:5b:39:94:70:8e:6b:62:0b:3b:38:59: 92:58:ad:90:50:2b:de:0b:93:8b:19:87:c3:89:19:e2:fe:18: 0b:48:0d:81:93:e6:6b:24:26:2a:46:cf:da:84:51:96:47:eb: d2:97:6c:6e:43:9b:a9:0a:31:3e:37:ce:2b:56:d2:3b:c5:26: c7:f4:90:2c:f6:f0:12:b9:7e:e3:da:0e:6f:ff:27:bd:1a:bc: 4d:8f:00:87:d4:36:61:58:b1:6b:66:a3:96:88:3b:2e:25:15: 74:77:38:3e:e7:f1:08:ee:0d:8c:30:a4:23:4f:4f:21:12:74: 67:00:a1:12:4e:2c:7d:4c:7e:3b:d9:69:07:6a:a9:1d:e7:84: 30:d9:7b:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwNTE3MDAxNDU2WhcNMjUwNTI0MDAxNDU2WjAYMRYwFAYD VQQDEw02ODI3ZDUwMC1iM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkUJISz4lvtN6ERdC2eUQy8MZpjvf9OZxPyj1chIWGXu7uc1OFyDHS8gxjuo CTpy1IX0GT5juMya0yE3+l2mbuw7kCueIfpjggfQow2gCxZYMlJoImksnSx+N4WP m8DkZk8eMBb2n7owQ1pim8c3fkzewE7xdE99l/S5g5Kwb3vUEWIqJrfYtnUIGeMB 6s+9vjtG/qtM8LKJ/DZHvyNt/LkqD58D4GcYySp5XmzDPMP12a/ow37HzdmKqLMi YgJj2gj3J530lPAYggXaSSRp80NgbX3uKe5hqsxgOjppm7OtMtTjhXBi9Oq6G7RU ovmXxZoal33f5liYipHjqXWLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcDyqxl xqoKYRQzxytndGCaguYxMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7vY9DGhxWoBe4adFn1oa3t9hrqMzYfckifuneDF3qQ8sKQzie+OBT HOzz7cmVQ7A/6wAeRjSoQWxh60hX8PtfDfNZrj3taEgvNHnRgpD791f75TVFTM9f txm/3f9CqBE1OFQSjk6mS+zOEoQTSNuBWMuBWzmUcI5rYgs7OFmSWK2QUCveC5OL GYfDiRni/hgLSA2Bk+ZrJCYqRs/ahFGWR+vSl2xuQ5upCjE+N84rVtI7xSbH9JAs 9vASuX7j2g5v/ye9GrxNjwCH1DZhWLFrZqOWiDsuJRV0dzg+5/EI7g2MMKQjT08h EnRnAKESTix9TH472WkHaqkd54Qw2XsZ -----END CERTIFICATE-----Generated at Sat May 17 05:05:12 2025 by rpki-client