$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json) Hash identifier: op64Rvd1LOr2BzDj6ZLpdBjuLetS34/fQjVXy1r59qM= Subject key identifier: 1D:E7:40:C9:F1:B3:E6:04:0B:51:73:C0:6A:25:62:60:6B:97:A2:7E Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft Manifest number: 2F Signing time: Thu 17 Apr 2025 06:34:15 +0000 Manifest this update: Thu 17 Apr 2025 06:34:14 +0000 Manifest next update: Thu 24 Apr 2025 06:34:14 +0000 Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: KKyUOVBeAYZeHExI3eCs3puK2ezxhdMlIdbXqdroDaQ=) 2: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: Ij4MYxmZ1kvvIkA44sca2pptoxt6bSkjj51C+GS/Tgs=) 3: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: PGaqXaUYwNRQvWR/0qrY71jZOIngXVLT0XurTqit5EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA Validity Not Before: Apr 17 06:34:14 2025 GMT Not After : Apr 24 06:34:14 2025 GMT Subject: CN=6800a0e6-d6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:f4:92:76:26:6a:88:26:33:ac:63:25:e4: 7f:05:87:35:80:08:76:25:a1:47:ee:9c:d8:05:76: f3:87:a5:df:cd:2d:92:93:21:7a:ee:05:d7:12:85: cf:00:33:38:dc:45:42:91:bd:48:41:b7:eb:04:d7: 58:a4:e7:60:b1:6c:7e:95:e2:17:7f:a7:b0:78:7d: 78:39:13:e9:6c:7c:d3:da:8d:08:af:c7:de:99:06: 0d:9f:cb:48:b0:68:a2:8e:f9:30:c7:72:53:69:e9: 88:97:02:24:0f:64:8a:6c:54:7b:dc:71:6a:90:17: 45:bd:08:e4:3c:aa:8f:2a:5c:50:a3:4e:ee:2a:76: a2:62:47:5b:b8:de:52:ab:91:8f:28:56:a2:6c:06: 17:3a:14:65:2a:77:63:93:1b:41:e2:62:42:5e:14: 5a:3a:e1:d3:b9:4f:45:33:57:d1:84:da:22:87:67: b2:2a:37:86:02:86:d0:f9:09:e9:ae:f4:ae:c4:c9: 60:da:1f:27:75:90:46:51:99:c2:a0:77:f3:26:f5: e9:80:40:81:fe:e0:fe:31:9a:d0:5c:41:a1:43:e6: 0e:f9:84:c9:59:bb:91:5c:94:5e:73:8c:3c:1b:cd: a6:e5:cd:1e:34:c7:e9:2a:f6:f7:96:54:7e:c0:43: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E7:40:C9:F1:B3:E6:04:0B:51:73:C0:6A:25:62:60:6B:97:A2:7E X509v3 Authority Key Identifier: keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:08:33:a6:91:d6:12:30:8c:81:ba:94:10:bb:a3:60:25: ef:69:05:53:6f:b7:5c:6d:84:c7:bd:5d:3e:1f:35:2d:bd:b1: 5e:be:83:b0:8e:c5:e1:36:79:1f:34:07:cb:c9:24:e6:88:69: 0c:cb:25:83:96:c2:b8:98:97:1a:7b:b0:93:a5:f1:ea:8b:4d: 4a:e2:3a:9f:ba:74:5b:e1:e0:91:42:a9:6b:b4:fa:ae:4a:84: 30:c5:21:c6:b6:6a:8b:13:6c:82:fb:b8:8f:b8:40:00:86:53: 49:bf:76:13:a5:c9:a5:fb:d3:f4:d3:78:77:c6:d6:6d:5a:07: 16:8f:cd:a1:7e:48:d4:76:6c:81:34:fa:34:e2:71:51:3d:1d: b0:07:45:8c:18:33:1c:64:7b:ea:7f:45:a9:be:eb:75:ce:f0: 67:3b:05:aa:59:13:b5:8f:d9:9e:19:0a:c6:ab:4e:ce:a6:a5: 2f:f2:b2:76:49:ba:4d:81:93:0e:10:21:3a:d6:43:aa:e2:57: 37:87:0f:71:74:9f:59:53:81:ca:32:c9:1e:0f:c7:7c:e9:2b: 4b:55:37:27:57:05:75:1a:a6:10:2a:40:d5:8e:d2:47:6e:36: da:ba:ad:9f:11:ae:cb:3e:19:e0:cf:2f:48:80:55:64:1e:68: c7:b6:3f:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjdERTExMC8GA1UEBRMoNTdDNTgxNjFCREVDNERDNzlFRjQ4RTIwNUYyQjhEMTIw MjhGMEFFQTAeFw0yNTA0MTcwNjM0MTRaFw0yNTA0MjQwNjM0MTRaMBgxFjAUBgNV BAMTDTY4MDBhMGU2LWQ2ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAZPSSdiZqiCYzrGMl5H8FhzWACHYloUfunNgFdvOHpd/NLZKTIXruBdcShc8A MzjcRUKRvUhBt+sE11ik52CxbH6V4hd/p7B4fXg5E+lsfNPajQivx96ZBg2fy0iw aKKO+TDHclNp6YiXAiQPZIpsVHvccWqQF0W9COQ8qo8qXFCjTu4qdqJiR1u43lKr kY8oVqJsBhc6FGUqd2OTG0HiYkJeFFo64dO5T0UzV9GE2iKHZ7IqN4YChtD5Cemu 9K7EyWDaHyd1kEZRmcKgd/Mm9emAQIH+4P4xmtBcQaFD5g75hMlZu5FclF5zjDwb zablzR40x+kq9veWVH7AQ6IvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHedAyfGz 5gQLUXPAaiViYGuXon4wHwYDVR0jBBgwFoAUV8WBYb3sTcee9I4gXyuNEgKPCuow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCN0RFLzZDRTZCNDA0RTEz RjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNlZTlJNGdYeXVORWdLUEN1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjhXQlliM3NUY2VlOUk0Z1h5dU5FZ0tQQ3VvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC N0RFLzZDRTZCNDA0RTEzRjExRUZBRjE4ODQxRkM0RjlBRTAyL1Y4V0JZYjNzVGNl ZTlJNGdYeXVORWdLUEN1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJLCDOmkdYSMIyBupQQu6NgJe9pBVNvt1xthMe9XT4fNS29sV6+g7CO xeE2eR80B8vJJOaIaQzLJYOWwriYlxp7sJOl8eqLTUriOp+6dFvh4JFCqWu0+q5K hDDFIca2aosTbIL7uI+4QACGU0m/dhOlyaX70/TTeHfG1m1aBxaPzaF+SNR2bIE0 +jTicVE9HbAHRYwYMxxke+p/Ram+63XO8Gc7BapZE7WP2Z4ZCsarTs6mpS/ysnZJ uk2Bkw4QITrWQ6riVzeHD3F0n1lTgcoyyR4Px3zpK0tVNydXBXUaphAqQNWO0kdu Ntq6rZ8Rrss+GeDPL0iAVWQeaMe2P4o= -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:40 2025 by rpki-client