$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: Tw9zdkdGpbQZDLAa77Yj9z/Kfu1ixmfiCzsNUQE6fYs= Subject key identifier: 20:D1:B2:21:2A:40:DA:ED:D8:14:36:F6:98:33:DE:B3:92:B6:DB:FD Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: BD Signing time: Mon 07 Apr 2025 04:48:35 +0000 Manifest this update: Mon 07 Apr 2025 04:48:34 +0000 Manifest next update: Mon 14 Apr 2025 04:48:34 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: aoD/0nxWd3MzcUqNagt9ihd7Az38YF/QzLZOpLWYbb4=) 2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=) 3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE Validity Not Before: Apr 7 04:48:34 2025 GMT Not After : Apr 14 04:48:34 2025 GMT Subject: CN=67f35923-d504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:8e:e8:d6:2b:e5:a2:96:d9:44:7d:e5:f4: 12:e9:ef:f9:16:5a:c4:08:1b:b0:ce:b8:9b:3f:5e: 6c:2a:72:8a:42:aa:e3:92:b2:66:b5:71:a6:bc:26: e0:e2:fe:4b:a6:52:0c:f4:44:5a:5b:a6:ab:50:41: 53:9a:81:48:dd:a0:10:3e:20:8a:cf:e1:75:53:ce: fb:59:d0:f5:a2:b0:3f:a4:13:cb:04:e3:bf:d0:1d: 3c:fb:da:a4:a3:bf:f2:fa:70:37:2e:03:70:75:61: b9:c7:7d:0a:a3:e7:d7:68:37:95:2f:92:c9:e8:2f: 51:f0:70:fe:27:ee:13:f6:e5:17:d0:77:6e:03:27: 71:e3:88:d3:f0:6a:f6:20:5f:11:c7:2a:9f:88:19: 46:a9:bd:41:30:6b:6b:be:73:6d:24:6f:d3:eb:f1: 38:5b:3a:1a:20:bb:7a:03:50:ab:df:b0:f2:ff:cb: 4a:05:46:8b:e3:30:1d:cf:fb:fa:5d:5a:49:8a:5f: 35:28:ea:b0:7f:09:ea:26:82:f1:f2:76:ae:ba:c6: 2c:c9:ae:46:0d:cc:27:40:98:18:e3:45:02:b9:d0: 58:da:51:a5:3c:a4:7b:af:7a:93:77:9a:a5:ad:14: 77:21:b5:61:1e:af:96:4b:48:34:20:c0:8b:9d:07: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:B2:21:2A:40:DA:ED:D8:14:36:F6:98:33:DE:B3:92:B6:DB:FD X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:07:37:7c:14:09:82:13:c7:c5:ae:45:03:48:ea:e0:a4:c8: ea:d0:a4:49:bf:23:3f:b6:29:ce:4e:b9:5e:ad:4e:80:65:b1: 93:c6:22:22:0a:3e:f2:fc:3e:d3:98:3d:25:c4:d1:dc:97:c1: f9:0e:32:b3:a1:43:28:df:f7:f7:06:8e:83:51:61:cf:9e:8d: 42:47:ba:11:11:c7:a2:f0:1d:0e:27:ec:0f:f2:9a:0e:5b:82: 5f:d5:6c:e1:71:04:17:ee:46:3d:7a:0d:40:d4:f4:e9:15:a8: 5c:7e:53:b8:2c:7d:bc:7e:d9:8b:22:51:0e:1b:d5:95:a3:47: fc:10:3a:29:7e:57:d0:e8:e0:61:66:68:ff:f6:b4:41:31:74: d6:c5:97:3b:6e:eb:95:fb:59:42:51:8a:51:ad:dd:c0:be:8a: dc:a6:4f:53:50:c6:e7:7b:1e:73:e6:aa:42:c9:09:3f:90:20: e6:28:e3:f5:f9:5a:f6:e0:76:ea:48:43:b7:26:7f:bf:11:33: 94:ad:70:ce:47:69:67:2f:9c:2f:5b:9d:8a:c6:46:bf:57:46: bb:e3:97:c8:11:91:c2:fe:cb:2a:66:4b:e5:3e:64:92:cc:f7: 19:b9:01:78:0b:c8:f7:0c:07:b5:b8:f5:16:78:28:3c:6d:72: 6a:6d:cb:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNDA3MDQ0ODM0WhcNMjUwNDE0MDQ0ODM0WjAYMRYwFAYD VQQDEw02N2YzNTkyMy1kNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszCO6NYr5aKW2UR95fQS6e/5FlrECBuwzribP15sKnKKQqrjkrJmtXGmvCbg 4v5LplIM9ERaW6arUEFTmoFI3aAQPiCKz+F1U877WdD1orA/pBPLBOO/0B08+9qk o7/y+nA3LgNwdWG5x30Ko+fXaDeVL5LJ6C9R8HD+J+4T9uUX0HduAydx44jT8Gr2 IF8RxyqfiBlGqb1BMGtrvnNtJG/T6/E4WzoaILt6A1Cr37Dy/8tKBUaL4zAdz/v6 XVpJil81KOqwfwnqJoLx8nauusYsya5GDcwnQJgY40UCudBY2lGlPKR7r3qTd5ql rRR3IbVhHq+WS0g0IMCLnQdpzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDRsiEq QNrt2BQ29pgz3rOSttv9MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCBzd8FAmCE8fFrkUDSOrgpMjq0KRJvyM/tinOTrlerU6AZbGTxiIi Cj7y/D7TmD0lxNHcl8H5DjKzoUMo3/f3Bo6DUWHPno1CR7oREcei8B0OJ+wP8poO W4Jf1WzhcQQX7kY9eg1A1PTpFahcflO4LH28ftmLIlEOG9WVo0f8EDopflfQ6OBh Zmj/9rRBMXTWxZc7buuV+1lCUYpRrd3Avorcpk9TUMbnex5z5qpCyQk/kCDmKOP1 +Vr24HbqSEO3Jn+/ETOUrXDOR2lnL5wvW52Kxka/V0a745fIEZHC/ssqZkvlPmSS zPcZuQF4C8j3DAe1uPUWeCg8bXJqbctb -----END CERTIFICATE-----Generated at Tue Apr 8 17:41:32 2025 by rpki-client