$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: +ytSeG8+V65H1LuFPzSVct7bdg/LGuARv248VB6jkDI= Subject key identifier: 36:1A:7F:02:D5:BA:25:2B:B3:84:97:B7:DF:3F:ED:8B:B4:77:AD:6E Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 09FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 09F6 Signing time: Thu 08 May 2025 19:47:59 +0000 Manifest this update: Thu 08 May 2025 19:47:58 +0000 Manifest next update: Thu 15 May 2025 19:47:58 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: 18qph2RuWk5JDsj5UjNFsW/OeREIuxrqyOTdP+e4VjY=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: May 8 19:47:58 2025 GMT Not After : May 15 19:47:58 2025 GMT Subject: CN=681d0a6e-16bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:cd:ef:85:3d:9e:eb:4b:6e:4e:a2:38:eb: fe:e4:ab:ff:ea:df:67:95:5d:94:03:85:98:e4:d7: fb:91:b3:66:c8:a9:d1:d1:4b:f7:1a:72:f6:d2:03: d2:59:88:bf:f8:f3:31:de:3e:af:aa:c0:b4:18:90: a1:3a:0b:8c:5c:56:84:79:e0:b3:e9:e1:d7:cd:49: 8f:a7:6f:9e:05:64:d2:61:86:e1:90:07:a8:cc:e3: fc:26:ca:58:44:ad:50:cb:73:f6:3a:5c:5a:5a:bb: af:a3:f9:7b:e6:88:32:7e:b3:c1:e9:6b:c0:0e:c7: 74:5c:1b:1c:8b:e7:56:9b:62:96:a0:49:40:74:59: 8a:1b:6f:6b:a3:af:0b:5b:bb:0e:b9:61:7c:b5:6f: ed:b8:b7:fa:e3:f4:8d:02:a0:bb:70:22:1b:1d:c8: 7e:da:02:e9:ef:bf:54:ef:1b:33:d4:0b:22:eb:6f: 47:78:44:a8:b6:91:79:5d:82:b8:e3:7f:b4:ae:45: 91:4d:d9:3d:c0:30:eb:83:88:ab:ff:f3:10:aa:fe: 02:03:31:31:6d:20:83:ad:ed:9c:41:0a:dd:b7:7a: 07:ad:b0:ac:e3:8b:fa:a1:ec:37:1f:59:bb:3d:d9: a0:32:22:e7:2c:4f:58:76:69:ab:d7:e2:69:0a:31: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:7F:02:D5:BA:25:2B:B3:84:97:B7:DF:3F:ED:8B:B4:77:AD:6E X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:ac:52:dd:2f:d6:3d:d2:08:9d:62:03:bc:cb:17:85:91: 2c:f7:d9:e3:76:47:ba:c5:b9:d0:2f:4b:94:e9:1d:86:50:f6: 17:ae:9b:eb:e8:74:68:0d:d1:f7:d0:81:66:1b:cf:77:68:f2: fc:27:41:4f:8f:86:aa:07:59:48:f1:28:d7:84:93:1c:bc:d1: 89:d5:b8:16:cb:c4:7d:75:f7:38:db:ad:df:ab:a1:13:5a:6e: 99:8a:90:fd:62:dd:be:31:9b:1d:8a:ea:02:dc:75:c3:cb:2a: a2:72:3f:e3:26:d5:c9:3b:c5:b9:ab:7d:d0:70:a9:c3:63:97: 38:47:61:90:dc:5f:b2:08:20:6f:91:f3:7a:9d:d3:1f:d7:57: 1e:5a:7e:58:d5:d0:80:bb:ae:37:3d:b0:f4:ed:96:d0:15:42: a1:df:65:db:54:e8:69:cb:1e:c3:7e:7b:39:de:74:d4:e7:f1: e8:95:a8:4a:1b:07:6e:a0:2f:df:18:04:c8:6d:e1:bb:26:3d: 64:55:ea:50:3c:b8:c4:7c:7a:d7:d7:bc:d0:54:f8:fb:1d:7b: 0e:ec:e6:96:96:fb:9b:29:fe:16:b4:2d:24:93:16:45:d6:49: bd:b5:19:a8:23:aa:f2:9b:65:4f:81:b8:ee:c9:dd:de:c0:cb: d1:91:72:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNTA4MTk0NzU4WhcNMjUwNTE1MTk0NzU4WjAYMRYwFAYD VQQDEw02ODFkMGE2ZS0xNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrDN74U9nutLbk6iOOv+5Kv/6t9nlV2UA4WY5Nf7kbNmyKnR0Uv3GnL20gPS WYi/+PMx3j6vqsC0GJChOguMXFaEeeCz6eHXzUmPp2+eBWTSYYbhkAeozOP8JspY RK1Qy3P2OlxaWruvo/l75ogyfrPB6WvADsd0XBsci+dWm2KWoElAdFmKG29ro68L W7sOuWF8tW/tuLf64/SNAqC7cCIbHch+2gLp779U7xsz1Asi629HeESotpF5XYK4 43+0rkWRTdk9wDDrg4ir//MQqv4CAzExbSCDre2cQQrdt3oHrbCs44v6oew3H1m7 PdmgMiLnLE9Ydmmr1+JpCjH6qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYafwLV uiUrs4SXt98/7Yu0d61uMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOrqxS3S/WPdIInWIDvMsXhZEs99njdke6xbnQL0uU6R2GUPYXrpvr 6HRoDdH30IFmG893aPL8J0FPj4aqB1lI8SjXhJMcvNGJ1bgWy8R9dfc4263fq6ET Wm6ZipD9Yt2+MZsdiuoC3HXDyyqicj/jJtXJO8W5q33QcKnDY5c4R2GQ3F+yCCBv kfN6ndMf11ceWn5Y1dCAu643PbD07ZbQFUKh32XbVOhpyx7Dfns53nTU5/HolahK GwduoC/fGATIbeG7Jj1kVepQPLjEfHrX17zQVPj7HXsO7OaWlvubKf4WtC0kkxZF 1km9tRmoI6rym2VPgbjuyd3ewMvRkXJc -----END CERTIFICATE-----Generated at Sat May 10 04:44:31 2025 by rpki-client