$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft File: m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json) Hash identifier: WI/2El+Y4TFh+T8/lCEIDdP0UOi5uQHywnrwBY35PXM= Subject key identifier: 66:9B:76:F7:4C:DC:8F:0C:13:95:C0:02:3F:1D:04:AA:4D:EC:ED:2F Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft Manifest number: 0C93 Signing time: Sun 04 May 2025 18:07:58 +0000 Manifest this update: Sun 04 May 2025 18:07:58 +0000 Manifest next update: Sun 11 May 2025 18:07:58 +0000 Files and hashes: 1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: 3fdFXa4zzTn3sKLICTTLKj+ds/8mE2/fJ8tNDXMPNMk=) 2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=) 3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=) 4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: May 4 18:07:58 2025 GMT Not After : May 11 18:07:58 2025 GMT Subject: CN=6817acfe-3695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:57:ba:f3:91:7a:ba:21:8f:3e:b1:d8:40: fc:f6:fa:2f:75:ce:36:7d:0e:6e:37:c8:be:a0:4c: ca:1d:12:80:be:c9:f1:04:68:e0:08:5a:f0:b3:dc: ed:7e:c2:c7:32:d4:9e:fd:6a:8c:0c:24:05:bb:db: 1e:e9:5d:a1:d6:18:7d:a2:49:0d:99:a2:96:0f:f4: b2:40:c4:3a:db:39:39:3d:86:e3:60:6f:45:97:ed: 96:ef:45:e2:4f:16:60:a0:7e:eb:41:a3:9b:f3:e0: 4c:ff:de:31:46:4c:63:78:d8:a7:7e:ca:26:a4:63: 61:21:00:0f:8c:da:9d:7a:3f:36:08:f1:a8:08:0f: 33:3a:af:24:78:a9:b7:a7:a0:4f:3f:82:53:da:e0: 2a:0f:a5:10:82:e3:cd:a3:22:0b:dd:da:95:ed:1f: 77:7d:31:f8:07:0b:01:ab:4d:f9:6a:69:2b:9e:48: e2:05:cc:9f:ed:c4:49:85:52:20:60:4a:37:d9:54: 88:34:9e:f9:ba:e1:4e:74:a0:fb:09:76:c7:9d:50: 30:37:12:51:f8:9f:e5:da:40:49:fb:38:00:02:61: fb:0b:e1:41:1e:cc:3b:fb:84:99:d7:eb:96:63:32: 0e:69:8a:bc:5d:d2:b9:b7:4c:ae:fd:56:b1:02:e1: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:76:F7:4C:DC:8F:0C:13:95:C0:02:3F:1D:04:AA:4D:EC:ED:2F X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:95:12:16:fe:01:8e:19:e3:ab:df:8b:34:3f:54:bf:ab:ce: 9d:49:e1:5a:2a:16:de:48:06:7d:48:69:23:09:f4:92:d4:ae: 87:ea:95:42:e9:c7:e1:39:34:ca:a7:4c:f4:8c:d4:87:ad:bd: ef:97:b3:cd:7c:d2:02:bc:02:e9:3e:b3:f3:83:4f:8d:4d:b8: 64:77:4e:09:3a:99:87:30:16:7a:4b:2f:5d:0a:c0:99:9d:cb: f0:bd:60:06:63:5a:30:5e:d5:6e:52:93:fb:c9:92:9e:7f:c8: 22:cb:1a:68:8f:b8:5a:19:73:1a:ec:05:13:0f:39:7a:62:61: 3d:95:ab:bb:98:6a:18:3c:d5:fd:d0:d7:36:ea:bc:3c:f2:83: d2:6f:ec:73:07:f8:f2:cb:8c:dd:d2:5a:11:d4:b9:14:fd:72: f2:68:aa:ff:35:1b:ea:f9:a6:f7:40:8e:6b:83:3c:15:f2:26: 66:83:10:7a:45:a6:8e:3f:31:d0:8d:7f:5c:95:9e:67:bc:69: 0e:a5:70:44:a4:d2:bd:5b:57:0b:ff:56:64:b5:96:0d:15:c8: ae:f3:c5:f3:b4:f5:52:fe:93:87:96:0d:8e:1d:70:10:4e:1f: e5:c0:b5:9e:88:d1:20:06:4b:61:a4:49:0b:21:d9:ea:c2:42: 4d:be:fc:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjUwNTA0MTgwNzU4WhcNMjUwNTExMTgwNzU4WjAYMRYwFAYD VQQDEw02ODE3YWNmZS0zNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnhXuvORerohjz6x2ED89vovdc42fQ5uN8i+oEzKHRKAvsnxBGjgCFrws9zt fsLHMtSe/WqMDCQFu9se6V2h1hh9okkNmaKWD/SyQMQ62zk5PYbjYG9Fl+2W70Xi TxZgoH7rQaOb8+BM/94xRkxjeNinfsompGNhIQAPjNqdej82CPGoCA8zOq8keKm3 p6BPP4JT2uAqD6UQguPNoyIL3dqV7R93fTH4BwsBq035amkrnkjiBcyf7cRJhVIg YEo32VSINJ75uuFOdKD7CXbHnVAwNxJR+J/l2kBJ+zgAAmH7C+FBHsw7+4SZ1+uW YzIOaYq8XdK5t0yu/VaxAuHr/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGabdvdM 3I8ME5XAAj8dBKpN7O0vMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZlRIW/gGOGeOr34s0P1S/q86dSeFaKhbeSAZ9SGkjCfSS1K6H6pVC 6cfhOTTKp0z0jNSHrb3vl7PNfNICvALpPrPzg0+NTbhkd04JOpmHMBZ6Sy9dCsCZ ncvwvWAGY1owXtVuUpP7yZKef8giyxpoj7haGXMa7AUTDzl6YmE9lau7mGoYPNX9 0Nc26rw88oPSb+xzB/jyy4zd0loR1LkU/XLyaKr/NRvq+ab3QI5rgzwV8iZmgxB6 RaaOPzHQjX9clZ5nvGkOpXBEpNK9W1cL/1ZktZYNFciu88XztPVS/pOHlg2OHXAQ Th/lwLWeiNEgBkthpEkLIdnqwkJNvvzH -----END CERTIFICATE-----Generated at Mon May 5 22:43:14 2025 by rpki-client