$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: 8h9T0Pu8/yc9OpViU4K/GVxSaI5ghzD9JVWG9d9CraI= Subject key identifier: FE:93:AC:FA:27:FE:7A:2C:CE:E1:FA:33:EA:94:2D:BA:1C:2C:A4:CE Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 0495 Signing time: Sat 29 Mar 2025 00:15:11 +0000 Manifest this update: Sat 29 Mar 2025 00:15:10 +0000 Manifest next update: Sat 05 Apr 2025 00:15:10 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: 34u5umYCwQ0dEE95B3gdWVWF9xcSkfAK3Ut27dTwcJg=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A Validity Not Before: Mar 29 00:15:10 2025 GMT Not After : Apr 5 00:15:10 2025 GMT Subject: CN=67e73b8e-ca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:40:2f:ba:fb:84:a8:da:12:20:ee:85:b6:d6: b9:99:39:d1:f0:ce:8f:7f:f3:3b:bc:ec:51:32:47: 73:fa:cf:c1:1f:a2:f2:2c:9d:ac:71:7e:e1:1a:01: 49:9c:8c:a4:b0:40:3e:78:d7:10:4e:d3:65:ae:ab: 47:e0:23:e7:92:75:84:2b:70:6d:c3:70:7c:9d:eb: 98:8c:23:db:13:ae:5b:2a:a2:62:fb:3d:a5:d7:86: 30:75:a7:37:42:95:d7:87:35:7c:2f:d4:6a:b5:c0: a2:18:f9:52:fa:a7:75:91:09:55:77:1f:b8:6e:50: 61:53:1d:bd:0f:64:b3:f0:7d:7a:32:4c:c0:4c:da: 9d:5f:27:f3:59:04:9e:41:d2:ba:75:5b:77:d9:b1: bd:a9:5e:dd:2b:42:fb:68:8d:42:83:da:6d:48:9d: f9:58:ed:6c:0b:be:66:17:50:21:f1:02:c0:eb:da: 73:7d:08:71:a4:0a:86:33:36:b0:9c:39:ff:24:16: 50:91:c5:e8:64:24:e0:62:58:0c:60:86:9d:95:8d: 28:14:78:75:7c:92:8a:ac:e7:8c:23:5f:ae:bf:33: 23:7b:25:28:0a:cd:bf:e5:cf:97:37:e8:a8:1f:fe: f7:c9:03:04:0c:f4:e2:65:06:27:ce:24:8e:56:52: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:AC:FA:27:FE:7A:2C:CE:E1:FA:33:EA:94:2D:BA:1C:2C:A4:CE X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:cf:43:d9:d9:c6:c6:25:d2:2a:8f:97:ff:06:a5:dc:79:81: 83:94:6b:bd:32:08:42:e3:c3:b0:44:aa:c6:26:4e:d9:ce:d2: fd:a8:0d:92:96:04:36:81:ef:07:8b:20:36:9e:dc:a5:b3:99: 18:59:36:59:ae:33:5e:66:6b:b8:95:42:23:ee:82:8c:49:88: 35:12:b6:48:28:ec:f3:45:22:e9:39:41:2d:5d:a4:19:13:aa: 0e:75:ea:da:ea:5d:be:83:70:a3:9b:36:ff:33:ad:ab:b4:0e: 02:76:9e:bd:3a:b5:9c:c9:b8:d6:50:99:d0:df:c7:0e:fa:5e: 6f:46:6e:c8:9c:b4:81:8b:95:63:ac:c8:94:51:68:eb:81:47: 7b:46:30:79:05:6e:21:a4:db:e6:9b:84:67:ad:0a:f7:39:70: 20:5b:d7:c2:46:cc:70:c0:9b:c1:ca:0b:11:19:6c:89:99:0f: 90:3b:dd:45:68:35:fa:7c:a1:c9:4c:f4:fe:96:dc:67:a6:b5: 45:db:ce:0c:95:80:b6:c3:5f:f7:30:ac:45:da:d9:57:66:ff: ba:9b:09:12:bc:e2:4f:86:82:d0:3b:ab:00:8c:d2:50:6e:6d: 9a:8a:b0:72:b5:38:30:9f:7e:79:72:63:c6:c6:cf:0a:65:5a: fa:ad:ea:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUwMzI5MDAxNTEwWhcNMjUwNDA1MDAxNTEwWjAYMRYwFAYD VQQDEw02N2U3M2I4ZS1jYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+0AvuvuEqNoSIO6Ftta5mTnR8M6Pf/M7vOxRMkdz+s/BH6LyLJ2scX7hGgFJ nIyksEA+eNcQTtNlrqtH4CPnknWEK3Btw3B8neuYjCPbE65bKqJi+z2l14Ywdac3 QpXXhzV8L9RqtcCiGPlS+qd1kQlVdx+4blBhUx29D2Sz8H16MkzATNqdXyfzWQSe QdK6dVt32bG9qV7dK0L7aI1Cg9ptSJ35WO1sC75mF1Ah8QLA69pzfQhxpAqGMzaw nDn/JBZQkcXoZCTgYlgMYIadlY0oFHh1fJKKrOeMI1+uvzMjeyUoCs2/5c+XN+io H/73yQMEDPTiZQYnziSOVlJC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6TrPon /noszuH6M+qULbocLKTOMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIz0PZ2cbGJdIqj5f/BqXceYGDlGu9MghC48OwRKrGJk7ZztL9qA2S lgQ2ge8HiyA2ntyls5kYWTZZrjNeZmu4lUIj7oKMSYg1ErZIKOzzRSLpOUEtXaQZ E6oOdera6l2+g3Cjmzb/M62rtA4Cdp69OrWcybjWUJnQ38cO+l5vRm7InLSBi5Vj rMiUUWjrgUd7RjB5BW4hpNvmm4RnrQr3OXAgW9fCRsxwwJvBygsRGWyJmQ+QO91F aDX6fKHJTPT+ltxnprVF284MlYC2w1/3MKxF2tlXZv+6mwkSvOJPhoLQO6sAjNJQ bm2airBytTgwn355cmPGxs8KZVr6reon -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:48 2025 by rpki-client