$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: mw9B/Lr+KIlQGO2JjMf3I297fkXkfeTd9ikBnODU+pI= Subject key identifier: 8B:78:1A:41:09:8D:D4:9D:EF:EF:0A:F9:D0:C8:C1:63:BA:64:6C:8F Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 26 Signing time: Fri 09 May 2025 06:51:12 +0000 Manifest this update: Fri 09 May 2025 06:51:12 +0000 Manifest next update: Fri 16 May 2025 06:51:12 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: Djh0xY1BIk7hH71yXtk/HIj+rv4VcuuDOwZUQNXTusg=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: May 9 06:51:12 2025 GMT Not After : May 16 06:51:12 2025 GMT Subject: CN=681da5e0-538d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:1b:b9:7a:f2:4b:2d:2d:10:93:44:ed:7a: 6c:8c:f9:37:6f:a0:63:ca:d4:d5:21:03:5d:7f:ac: b7:6a:19:fc:29:d0:03:c8:65:c3:ca:4c:e8:b5:66: 0e:9e:e7:e9:9e:39:c6:be:56:48:62:a4:51:ea:2f: 80:c2:c8:ea:e0:bf:73:7e:01:db:a6:54:c9:13:7a: c3:c2:23:3d:66:97:4a:bd:6a:e9:a3:13:f6:47:80: ef:40:6e:1b:ef:74:e0:6c:a3:df:57:be:94:db:e5: 39:bf:69:a9:24:b1:bb:e1:bc:cf:60:8a:c1:2f:4f: 84:27:94:0d:cf:d8:40:2c:ef:35:66:1b:f2:42:b5: ad:d9:10:31:92:22:1b:da:8e:49:42:eb:17:50:35: c1:5f:2b:a7:90:69:fe:db:d3:63:d3:73:6e:9a:79: ff:44:fc:ad:86:d2:26:04:1d:dc:95:fb:64:57:5c: af:65:2c:f8:22:a1:a7:85:09:69:3f:15:fa:4c:3f: 97:de:03:d8:58:db:a4:f5:55:ab:a3:b4:56:54:1c: bd:66:f4:7e:6b:a1:4e:0a:0d:6b:98:2a:04:a2:34: 12:1b:bf:3e:b3:69:e2:bf:66:5f:82:53:47:60:88: 4e:cf:d7:0d:38:ff:6b:81:35:d1:06:2b:c4:db:11: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:78:1A:41:09:8D:D4:9D:EF:EF:0A:F9:D0:C8:C1:63:BA:64:6C:8F X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:23:1f:9b:1b:c6:c0:f1:92:14:78:86:59:10:93:5c:a4:98: 46:9b:ef:c3:20:d3:24:14:43:05:12:b7:10:8a:78:ac:43:7a: 86:32:4e:02:28:a8:06:be:92:b7:a1:09:7d:9e:d1:eb:06:5a: b7:d5:e9:70:db:30:5e:d3:76:80:c5:88:5b:fe:2b:b4:ee:65: fe:9e:c9:cb:98:8b:a2:5e:c1:23:f8:bc:35:e7:47:f8:d1:86: be:8e:c6:fa:b5:04:a3:96:e8:be:fb:90:0e:23:db:0b:ad:a1: 74:d5:d5:31:24:2b:26:68:b2:16:c3:80:56:a4:14:11:7c:69: 4d:66:42:64:a6:f9:76:09:8a:69:32:52:6c:79:bf:2b:91:f9: 98:c3:25:76:69:b8:13:26:ae:10:ac:b9:d9:ed:a4:ec:31:54: fa:5e:b9:ef:22:1c:4a:d7:11:7e:2c:f5:4e:27:6c:8f:9d:ae: 11:32:e9:f5:17:46:d2:6e:a8:4f:f8:99:ad:1f:f0:b5:ec:33: 9d:28:ba:54:64:37:15:df:95:00:11:5e:34:59:89:9c:f9:0c: 93:f7:e2:d2:0b:11:e9:f5:d8:27:30:c5:23:b0:a3:37:e9:3d: 63:41:64:32:2d:4b:fe:05:f2:16:e7:8d:b9:33:a0:85:c9:15: de:2c:06:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA1MDkwNjUxMTJaFw0yNTA1MTYwNjUxMTJaMBgxFjAUBgNV BAMTDTY4MWRhNWUwLTUzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3rhu5evJLLS0Qk0TtemyM+TdvoGPK1NUhA11/rLdqGfwp0APIZcPKTOi1Zg6e 5+meOca+VkhipFHqL4DCyOrgv3N+AdumVMkTesPCIz1ml0q9aumjE/ZHgO9Abhvv dOBso99XvpTb5Tm/aakksbvhvM9gisEvT4QnlA3P2EAs7zVmG/JCta3ZEDGSIhva jklC6xdQNcFfK6eQaf7b02PTc26aef9E/K2G0iYEHdyV+2RXXK9lLPgioaeFCWk/ FfpMP5feA9hY26T1VaujtFZUHL1m9H5roU4KDWuYKgSiNBIbvz6zaeK/Zl+CU0dg iE7P1w04/2uBNdEGK8TbEZCtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi3gaQQmN 1J3v7wr50MjBY7pkbI8wHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALcjH5sbxsDxkhR4hlkQk1ykmEab78Mg0yQUQwUStxCKeKxDeoYyTgIo qAa+krehCX2e0esGWrfV6XDbMF7TdoDFiFv+K7TuZf6eycuYi6JewSP4vDXnR/jR hr6Oxvq1BKOW6L77kA4j2wutoXTV1TEkKyZoshbDgFakFBF8aU1mQmSm+XYJimky Umx5vyuR+ZjDJXZpuBMmrhCsudntpOwxVPpeue8iHErXEX4s9U4nbI+drhEy6fUX RtJuqE/4ma0f8LXsM50oulRkNxXflQARXjRZiZz5DJP34tILEen12CcwxSOwozfp PWNBZDItS/4F8hbnjbkzoIXJFd4sBvc= -----END CERTIFICATE-----Generated at Sat May 10 22:15:26 2025 by rpki-client