$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: +o7yZnCyd4WikhtziFyTjYDpRl7vgrNQaccnVB3XV6Y= Subject key identifier: 4F:06:85:B5:93:C7:46:6B:E8:81:B9:7D:5C:FD:7A:E5:F2:4A:4C:45 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 07EB Signing time: Fri 04 Apr 2025 21:06:42 +0000 Manifest this update: Fri 04 Apr 2025 21:06:41 +0000 Manifest next update: Fri 11 Apr 2025 21:06:41 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: na4N13t3KhnMRgM2VJQMHI3Wf4nlYuubTKrfKDX9fDI=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543 Validity Not Before: Apr 4 21:06:41 2025 GMT Not After : Apr 11 21:06:41 2025 GMT Subject: CN=67f049e2-01f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:81:96:28:20:aa:fb:0f:43:e4:12:68:c7: 03:de:fa:64:9c:c6:15:94:64:67:e5:cc:16:f2:46: a3:98:d8:c3:07:dc:fe:bc:7c:51:35:79:aa:ef:0d: 64:a9:2e:02:b1:15:80:5e:88:6f:48:57:34:aa:5e: 39:3d:70:b9:aa:98:a2:25:d9:f3:87:c4:c8:c3:ab: f4:08:81:50:08:3b:b2:7a:fb:96:d7:b6:4f:d5:93: 30:0c:52:70:0d:09:0c:b4:e6:ae:63:8d:b0:6b:d8: c0:77:5a:1b:f2:d4:5b:eb:d5:b3:86:3a:0e:42:1d: 95:87:ff:43:9f:ed:ca:0d:38:0a:62:d1:bc:4c:a1: 21:b1:f5:6e:34:8e:79:df:cf:21:a5:93:bd:14:19: 52:76:09:15:11:e2:21:33:bc:1f:a4:d9:83:cd:27: 7e:8c:22:fe:f4:a9:4c:e5:fb:44:f5:b5:8e:6d:95: ad:99:8f:0e:96:f3:9b:a1:96:c0:76:8e:33:69:9b: b8:5e:01:41:29:80:85:01:4a:76:48:9f:fa:f5:35: ef:02:a6:9b:70:6e:25:93:0a:02:2e:05:5a:89:11: 69:95:f9:43:85:bf:85:0e:9d:ea:ca:4c:55:d2:53: 45:72:2c:9c:12:ad:ec:25:13:c8:4e:44:42:26:b5: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:06:85:B5:93:C7:46:6B:E8:81:B9:7D:5C:FD:7A:E5:F2:4A:4C:45 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:bc:63:ee:14:eb:60:76:e6:42:47:36:d4:30:9f:c8:a8: 45:91:c8:ac:58:03:49:fe:2d:89:3f:70:53:42:fb:97:fc:41: 71:01:1e:c7:e8:ee:a2:63:a6:90:c0:3d:29:44:d3:f9:e3:76: fc:e3:6e:aa:56:39:96:f7:4b:c3:11:ec:53:34:30:63:20:c0: 02:40:ff:6e:81:dc:ad:5c:a9:61:f9:7b:f5:92:31:50:71:9c: dd:eb:70:ea:86:5c:83:91:45:b5:9d:82:4c:11:f1:ed:cd:65: 96:bf:ce:3c:fa:25:5e:ba:48:aa:6b:81:eb:c9:53:f6:e9:0d: fd:22:c4:b3:80:42:29:2b:8a:cc:d3:70:25:4f:27:e6:a2:9d: 17:55:92:4d:8e:55:d3:ff:66:c1:75:4d:35:94:d7:53:3e:9f: 32:c2:53:5b:05:fe:e6:a9:54:49:0f:22:8c:00:2a:9d:ba:05: 0c:f6:50:9f:0d:9f:6e:ec:39:f8:eb:10:59:63:78:b6:f8:bc: 74:c6:58:61:4b:91:4c:63:ce:1f:23:1a:4e:bd:d1:5a:66:eb: 6c:86:0a:b7:26:b3:42:c2:0b:ca:c8:2d:9c:c7:18:71:3e:56: c5:9e:68:6f:85:d7:3a:87:a8:9a:fd:f7:49:94:db:da:9a:89: 3c:bf:58:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNDA0MjEwNjQxWhcNMjUwNDExMjEwNjQxWjAYMRYwFAYD VQQDEw02N2YwNDllMi0wMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FeBliggqvsPQ+QSaMcD3vpknMYVlGRn5cwW8kajmNjDB9z+vHxRNXmq7w1k qS4CsRWAXohvSFc0ql45PXC5qpiiJdnzh8TIw6v0CIFQCDuyevuW17ZP1ZMwDFJw DQkMtOauY42wa9jAd1ob8tRb69WzhjoOQh2Vh/9Dn+3KDTgKYtG8TKEhsfVuNI55 388hpZO9FBlSdgkVEeIhM7wfpNmDzSd+jCL+9KlM5ftE9bWObZWtmY8OlvOboZbA do4zaZu4XgFBKYCFAUp2SJ/69TXvAqabcG4lkwoCLgVaiRFplflDhb+FDp3qykxV 0lNFciycEq3sJRPITkRCJrXY9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8GhbWT x0Zr6IG5fVz9euXySkxFMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWVbxj7hTrYHbmQkc21DCfyKhFkcisWANJ/i2JP3BTQvuX/EFxAR7H 6O6iY6aQwD0pRNP543b8426qVjmW90vDEexTNDBjIMACQP9ugdytXKlh+Xv1kjFQ cZzd63DqhlyDkUW1nYJMEfHtzWWWv848+iVeukiqa4HryVP26Q39IsSzgEIpK4rM 03AlTyfmop0XVZJNjlXT/2bBdU01lNdTPp8ywlNbBf7mqVRJDyKMACqdugUM9lCf DZ9u7Dn46xBZY3i2+Lx0xlhhS5FMY84fIxpOvdFaZutshgq3JrNCwgvKyC2cxxhx PlbFnmhvhdc6h6ia/fdJlNvamok8v1hq -----END CERTIFICATE-----Generated at Sun Apr 6 21:58:04 2025 by rpki-client