$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: AX1zCT3DaMBDTTgNZwrwQi5/iN29HGirMUg0Ax7rZPE= Subject key identifier: 5A:A0:C5:F3:2A:66:84:A9:0C:94:F0:B8:FD:28:16:22:3B:0E:63:61 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 245B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 2441 Signing time: Wed 14 May 2025 15:52:56 +0000 Manifest this update: Wed 14 May 2025 15:52:55 +0000 Manifest next update: Wed 21 May 2025 15:52:55 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: HfryazYfEpYIDBDNgqWcRTI9YaOJkv8hi9qWDSQmzb0=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: aC8EINXIC01Iys9eKuxANUXX5lS0IOCfT6iahbBp2dk=) 3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: jONv3AteqZr2Pz8WL2R2omzTcnceAzq3S4OqALo7cqA=) 4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: oO1xFuhAbWa8jnpge9HNWcKJyJkQpOd7FW4dAr7Fm4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9307 (0x245b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: May 14 15:52:55 2025 GMT Not After : May 21 15:52:55 2025 GMT Subject: CN=6824bc58-d69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:06:37:53:36:77:20:86:d4:de:6b:b4:5e: 2f:58:89:f7:fe:ab:0f:45:95:88:97:5f:47:4b:01: 02:22:7c:9e:6b:14:2c:36:8f:c3:03:6b:19:57:74: d2:6c:70:f7:d0:be:1f:aa:14:83:51:70:20:40:3f: 1f:53:c9:bd:1f:43:28:3b:4e:7c:c7:b2:75:79:7a: 04:a5:57:c0:6a:3c:ad:90:44:10:00:00:76:96:82: c1:12:39:f8:38:99:37:e8:21:09:87:d1:5c:18:f4: 7e:bc:9b:ff:19:eb:11:73:e7:41:8a:eb:98:58:bd: 55:0f:8d:c1:ef:89:95:31:74:16:27:a5:c6:cd:0f: 5c:06:32:92:71:e1:7b:2a:d2:8f:58:c7:81:0c:8d: 9a:d8:65:e4:d9:f9:2a:09:af:4b:eb:d1:9c:69:da: 5b:29:60:d8:a3:44:14:9e:d5:a5:fc:78:30:59:03: f8:ca:48:50:17:35:e0:b9:72:2a:c4:fa:2d:89:99: 5f:38:d1:82:83:43:60:c5:b5:9b:97:e7:de:f5:1f: a2:39:04:bc:2e:57:64:a2:28:95:6d:cc:74:38:ac: 4c:72:63:24:ea:9e:e6:0e:a1:9d:97:f0:33:13:61: bc:85:c9:39:b2:e8:5e:73:ff:4a:33:9e:3d:d9:47: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:C5:F3:2A:66:84:A9:0C:94:F0:B8:FD:28:16:22:3B:0E:63:61 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:85:12:68:b9:de:5b:a6:cd:10:43:19:e4:da:bc:8f:2c: de:b1:32:92:88:22:4d:13:c9:e2:7a:b8:cf:b0:d3:08:82:34: 7f:38:2a:dd:c5:c8:0f:ac:f9:ea:da:ed:a1:bf:ac:fc:84:14: c4:29:7b:3b:f2:91:8f:ea:ca:4e:44:50:de:4c:84:c5:57:de: 25:e1:23:9c:76:d8:2e:e6:a5:28:36:24:1c:3e:98:af:fd:00: d3:38:17:c9:6b:df:de:69:fe:12:6d:09:20:4f:f3:54:6b:d0: e4:bb:d2:a6:6d:86:ff:28:81:37:27:05:8e:e6:12:e3:03:1f: 5b:19:31:fd:bc:a6:2e:ed:d6:18:d0:86:73:9e:85:4c:b7:39: 65:6d:37:36:25:d4:4e:42:5c:f5:2d:44:a1:3d:23:4c:2c:e8: 66:97:3a:90:65:20:0c:89:dc:75:40:3e:88:82:ce:1a:8d:7f: 35:25:d2:9a:a2:81:ce:b2:67:bc:9c:00:9c:35:85:71:e3:63: de:4d:ee:76:ca:94:25:c3:1e:36:fc:2e:f9:f7:51:19:26:14: 0f:51:7b:01:98:70:24:d8:f2:c1:d3:c3:a6:fa:87:bd:42:06: 23:f8:57:77:ed:af:30:54:94:e3:3e:23:26:16:4c:a4:37:f0: 25:31:05:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwNTE0MTU1MjU1WhcNMjUwNTIxMTU1MjU1WjAYMRYwFAYD VQQDEw02ODI0YmM1OC1kNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx4GN1M2dyCG1N5rtF4vWIn3/qsPRZWIl19HSwECInyeaxQsNo/DA2sZV3TS bHD30L4fqhSDUXAgQD8fU8m9H0MoO058x7J1eXoEpVfAajytkEQQAAB2loLBEjn4 OJk36CEJh9FcGPR+vJv/GesRc+dBiuuYWL1VD43B74mVMXQWJ6XGzQ9cBjKSceF7 KtKPWMeBDI2a2GXk2fkqCa9L69GcadpbKWDYo0QUntWl/HgwWQP4ykhQFzXguXIq xPotiZlfONGCg0NgxbWbl+fe9R+iOQS8LldkoiiVbcx0OKxMcmMk6p7mDqGdl/Az E2G8hck5suhec/9KM5492UeZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqgxfMq ZoSpDJTwuP0oFiI7DmNhMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcOIUSaLneW6bNEEMZ5Nq8jyzesTKSiCJNE8nierjPsNMIgjR/OCrd xcgPrPnq2u2hv6z8hBTEKXs78pGP6spORFDeTITFV94l4SOcdtgu5qUoNiQcPpiv /QDTOBfJa9/eaf4SbQkgT/NUa9Dku9KmbYb/KIE3JwWO5hLjAx9bGTH9vKYu7dYY 0IZznoVMtzllbTc2JdROQlz1LUShPSNMLOhmlzqQZSAMidx1QD6Igs4ajX81JdKa ooHOsme8nACcNYVx42PeTe52ypQlwx42/C7591EZJhQPUXsBmHAk2PLB08Om+oe9 QgYj+Fd37a8wVJTjPiMmFkykN/AlMQWs -----END CERTIFICATE-----Generated at Wed May 14 21:03:07 2025 by rpki-client