$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: RMbMwdYxQN3K20kL3SmLCMXX31hoIljzGBR3ZjWoEpw= Subject key identifier: 36:F0:93:85:FA:58:56:A3:80:AD:E4:6D:9C:31:07:B3:DC:B9:DF:57 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 047F Signing time: Mon 14 Apr 2025 23:46:14 +0000 Manifest this update: Mon 14 Apr 2025 23:46:14 +0000 Manifest next update: Mon 21 Apr 2025 23:46:14 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: H4TF+9QtdoLcRBVqTCpIcKw7r1TftsMHV6xYslHIipE=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 23:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Apr 14 23:46:14 2025 GMT Not After : Apr 21 23:46:14 2025 GMT Subject: CN=67fd9e46-58a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:b0:83:93:ae:b9:d0:95:d1:52:63:44:ae: 9c:e5:91:bc:4d:15:81:3d:3c:22:60:e8:fb:ee:ce: 24:c7:e5:d6:14:a0:29:e9:21:98:e4:bd:9e:df:c3: 08:78:66:1d:41:2c:21:0c:e9:62:7e:e1:63:0b:4c: 66:3f:91:97:b3:c9:c4:b1:95:f4:e3:8e:a1:12:a8: b7:6c:d6:1b:8a:73:b1:2c:ae:1b:75:3d:2a:34:bf: 65:e4:de:4a:7d:0f:3d:cf:cb:db:25:71:df:96:1c: 73:13:c7:0d:fc:68:01:a7:c1:77:04:9e:2d:da:e4: f0:7c:ef:08:f2:00:a0:ee:c8:ae:f6:ee:fe:10:11: c9:ab:63:b3:b8:a2:2d:50:fa:f8:26:56:66:0e:e6: cc:cb:94:f0:01:e5:f5:e1:30:37:79:96:e2:a0:a9: ec:27:10:44:e1:d9:43:62:cd:60:19:3d:35:c7:76: 51:62:1c:9b:39:7a:b6:38:c5:22:e6:4b:a5:72:0c: 21:aa:cc:3e:21:e5:56:d2:87:7f:60:88:ef:37:bc: c0:d7:19:05:93:e1:f2:c8:a4:c2:05:e6:52:8d:74: 0c:7e:66:2f:52:bc:54:3b:2e:95:6f:3d:e8:a0:c7: 51:e7:0f:8e:ca:d9:f1:a2:f2:c2:3e:6b:52:ed:c1: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F0:93:85:FA:58:56:A3:80:AD:E4:6D:9C:31:07:B3:DC:B9:DF:57 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a5:d9:cf:2b:d2:52:2f:11:57:66:7b:3a:dc:ac:eb:61:e0: bc:c0:f9:2c:5e:ac:73:84:c2:8d:d5:d1:f3:9e:a8:22:dc:2f: 1c:ea:25:30:d2:6a:71:a5:6a:78:26:75:c6:72:bc:42:68:a6: 80:a9:6d:cf:fe:f7:e7:8b:23:46:ba:aa:91:09:78:d4:38:59: b5:30:f3:e7:85:98:99:c8:98:48:5e:c7:9c:7e:42:7e:6f:63: 1f:4e:cd:d8:ae:29:22:01:39:5d:74:75:94:fa:e6:27:42:9d: 56:b1:1c:a5:41:aa:8e:37:90:53:a0:5f:b0:0b:5a:64:cc:76: 56:55:8d:8d:00:10:ed:e0:8a:3f:2f:23:f0:b5:87:32:16:14: 3d:06:f7:a5:c5:33:33:e7:40:f1:5e:0a:0f:c5:34:76:b9:b5: ee:78:d8:69:dd:8b:9e:45:11:83:6b:26:90:0a:a9:98:33:b6: a9:00:dd:84:39:58:1e:ad:e8:02:8f:80:52:64:2b:d9:13:64: 0e:4d:83:b2:be:83:fa:79:c7:0e:64:40:bd:00:6e:58:af:d2: 14:0a:e1:9b:d4:03:2d:9d:81:b8:ae:a1:ce:d1:44:64:b4:02: ec:f5:ba:03:1c:8e:1a:09:3c:a7:b7:45:a2:4d:b6:1e:78:18: 70:60:a5:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUwNDE0MjM0NjE0WhcNMjUwNDIxMjM0NjE0WjAYMRYwFAYD VQQDEw02N2ZkOWU0Ni01OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZqwg5OuudCV0VJjRK6c5ZG8TRWBPTwiYOj77s4kx+XWFKAp6SGY5L2e38MI eGYdQSwhDOlifuFjC0xmP5GXs8nEsZX0446hEqi3bNYbinOxLK4bdT0qNL9l5N5K fQ89z8vbJXHflhxzE8cN/GgBp8F3BJ4t2uTwfO8I8gCg7siu9u7+EBHJq2OzuKIt UPr4JlZmDubMy5TwAeX14TA3eZbioKnsJxBE4dlDYs1gGT01x3ZRYhybOXq2OMUi 5kulcgwhqsw+IeVW0od/YIjvN7zA1xkFk+HyyKTCBeZSjXQMfmYvUrxUOy6Vbz3o oMdR5w+OytnxovLCPmtS7cGJ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbwk4X6 WFajgK3kbZwxB7Pcud9XMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4pdnPK9JSLxFXZns63KzrYeC8wPksXqxzhMKN1dHznqgi3C8c6iUw 0mpxpWp4JnXGcrxCaKaAqW3P/vfniyNGuqqRCXjUOFm1MPPnhZiZyJhIXsecfkJ+ b2MfTs3YrikiATlddHWU+uYnQp1WsRylQaqON5BToF+wC1pkzHZWVY2NABDt4Io/ LyPwtYcyFhQ9BvelxTMz50DxXgoPxTR2ubXueNhp3YueRRGDayaQCqmYM7apAN2E OVgeregCj4BSZCvZE2QOTYOyvoP6eccOZEC9AG5Yr9IUCuGb1AMtnYG4rqHO0URk tALs9boDHI4aCTynt0WiTbYeeBhwYKVT -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:36 2025 by rpki-client