$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: 32s82psV0rbxa54S0FDrxT6mio07lvTrtY5cbdDMT90= Subject key identifier: 9C:90:7A:E3:13:A5:02:47:3D:FF:0A:9E:F5:E7:2A:13:80:62:47:48 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 0154 Signing time: Sun 11 May 2025 03:00:00 +0000 Manifest this update: Sun 11 May 2025 02:59:59 +0000 Manifest next update: Sun 18 May 2025 02:59:59 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: 1MR6NU5322d3bZBzvwtC7DVPIOPtibq2QvldzT/B3a4=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: May 11 02:59:59 2025 GMT Not After : May 18 02:59:59 2025 GMT Subject: CN=682012af-ae17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:96:da:7a:71:2a:22:c0:51:4e:4b:5e:9f: 4f:1b:fd:6c:49:88:0d:e0:af:f1:53:d9:81:98:98: a3:2f:8d:e5:32:12:92:14:29:a1:9e:9c:d2:35:a9: ad:1a:9a:19:1c:33:90:ac:ec:37:10:33:cf:6f:cd: 3b:9b:4a:c5:b6:4f:c0:a5:2f:9c:e6:85:fa:e2:4e: 10:21:12:d8:b6:29:4b:66:b7:b0:86:97:1e:42:78: fc:07:8f:20:2b:96:c6:bd:04:c4:90:f4:c0:d5:0a: 8e:51:26:63:0b:1b:c9:5f:6c:92:51:c7:52:92:ed: be:7e:43:9e:db:09:8d:98:b2:7c:6d:6d:0f:70:29: 75:00:2b:24:0b:a1:d0:67:1a:73:1e:2e:52:5f:de: db:16:ec:96:0c:ca:a1:aa:0d:a7:0d:90:e4:2f:b4: b4:cb:e3:44:23:d5:41:dd:6c:aa:16:ce:7d:1b:6e: bb:6a:2d:9d:56:e2:04:db:6e:7b:ed:47:6b:3e:28: ab:92:fb:94:b8:6c:ae:fe:4f:39:af:7c:43:96:f6: b7:ca:94:59:d1:e1:18:f4:f6:da:ce:50:52:98:e2: 2c:78:64:75:9f:b8:d9:c3:00:e8:d0:e7:f1:63:72: e5:3c:fc:8f:be:9b:c9:16:80:1b:00:33:98:46:7e: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:7A:E3:13:A5:02:47:3D:FF:0A:9E:F5:E7:2A:13:80:62:47:48 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fc:ee:31:43:81:e9:3a:79:46:27:65:ae:f0:27:6a:b2:b2: 8c:f1:16:33:62:28:8a:dc:d2:90:c1:90:7e:2a:0b:f1:80:f1: 76:50:87:75:3d:ae:3f:17:d8:89:2f:15:7a:0d:b2:db:47:20: 14:89:0e:bf:26:9a:a7:ca:86:60:c4:aa:29:5b:f5:df:86:11: b7:dd:b5:52:92:f8:4a:4b:28:dd:30:1d:38:90:7c:7d:37:21: bb:d4:9a:35:62:3b:80:37:77:4e:aa:f1:7e:1c:3d:ae:2f:be: 07:ee:22:f0:4b:05:96:0a:56:03:ff:28:32:68:f8:47:31:08: 2f:a7:1c:0e:72:6f:8b:0b:87:b3:69:98:c2:5d:d8:83:53:9f: 26:79:db:98:86:6c:72:5e:51:7a:ea:79:81:fc:be:e4:d1:e3: 9f:cf:4d:83:89:84:30:0e:8f:d6:d2:a2:19:c2:92:1f:57:bf: e8:be:bc:48:33:39:a1:60:2b:f1:d3:ce:7c:c6:18:a6:5b:ac: ca:76:15:a4:d7:b1:57:22:bc:d3:5c:3e:61:c4:e7:c0:3b:da: 08:53:b1:a8:d0:33:b8:f3:6b:7f:c8:46:df:3a:e3:b7:16:de: 8b:7e:e5:c2:8d:10:05:0d:b0:f0:14:44:6a:5b:2e:e4:ac:c9: c6:69:81:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNTExMDI1OTU5WhcNMjUwNTE4MDI1OTU5WjAYMRYwFAYD VQQDEw02ODIwMTJhZi1hZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJaW2npxKiLAUU5LXp9PG/1sSYgN4K/xU9mBmJijL43lMhKSFCmhnpzSNamt GpoZHDOQrOw3EDPPb807m0rFtk/ApS+c5oX64k4QIRLYtilLZrewhpceQnj8B48g K5bGvQTEkPTA1QqOUSZjCxvJX2ySUcdSku2+fkOe2wmNmLJ8bW0PcCl1ACskC6HQ ZxpzHi5SX97bFuyWDMqhqg2nDZDkL7S0y+NEI9VB3WyqFs59G267ai2dVuIE2257 7UdrPiirkvuUuGyu/k85r3xDlva3ypRZ0eEY9PbazlBSmOIseGR1n7jZwwDo0Ofx Y3LlPPyPvpvJFoAbADOYRn4LAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyQeuMT pQJHPf8KnvXnKhOAYkdIMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/O4xQ4HpOnlGJ2Wu8CdqsrKM8RYzYiiK3NKQwZB+KgvxgPF2UId1 Pa4/F9iJLxV6DbLbRyAUiQ6/JpqnyoZgxKopW/XfhhG33bVSkvhKSyjdMB04kHx9 NyG71Jo1YjuAN3dOqvF+HD2uL74H7iLwSwWWClYD/ygyaPhHMQgvpxwOcm+LC4ez aZjCXdiDU58meduYhmxyXlF66nmB/L7k0eOfz02DiYQwDo/W0qIZwpIfV7/ovrxI MzmhYCvx0858xhimW6zKdhWk17FXIrzTXD5hxOfAO9oIU7Go0DO482t/yEbfOuO3 Ft6LfuXCjRAFDbDwFERqWy7krMnGaYFR -----END CERTIFICATE-----Generated at Sun May 11 13:53:15 2025 by rpki-client