$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: qKMnwLjcYElwXSquaUJTIDgQd7bB9IToNNbRmJc8fgE= Subject key identifier: 33:F9:FB:2D:54:96:72:19:46:56:3A:49:DC:15:08:96:67:BF:97:3F Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 0513 Signing time: Fri 28 Mar 2025 23:51:26 +0000 Manifest this update: Fri 28 Mar 2025 23:51:25 +0000 Manifest next update: Fri 04 Apr 2025 23:51:25 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: dgT1Oi6pTWLrBBJ7w49hg1c6zhHGujnM521juoqsTsU=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: CQpWK2+G2LnLlpiGc5AJJ6xJWy2B0MtLT56Nh25qbzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7 Validity Not Before: Mar 28 23:51:25 2025 GMT Not After : Apr 4 23:51:25 2025 GMT Subject: CN=67e735fd-8924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:e7:21:7e:f3:ce:35:e9:9b:73:49:7d:eb: b2:15:f4:5a:f7:3a:f6:81:4d:31:0b:a4:e0:be:fa: 46:0c:72:ba:f1:ef:24:b0:60:f7:1b:52:4b:e6:22: a4:f7:7f:5f:a9:79:d3:8c:a3:b3:9d:ad:78:b8:40: 0d:55:f9:8c:d5:15:86:c0:9e:1b:33:2e:58:37:c3: 54:2c:23:a2:9e:58:24:c4:ff:1b:44:48:42:4b:5a: 93:4b:00:b7:01:1b:ff:d7:e5:e9:50:78:a5:87:ad: ce:c1:f1:ee:f3:b2:99:f2:6c:5b:15:f3:4c:05:c7: 4c:3b:c7:cc:5a:65:f6:f2:cd:96:74:84:8f:45:96: 1e:82:39:c0:88:3c:33:a9:42:ad:83:57:3a:01:ee: 38:37:4f:f2:81:f3:a4:d5:0a:7d:67:59:e8:f5:e1: fd:58:9b:63:02:14:47:31:9d:d6:89:54:2f:c3:ba: 2e:f4:ad:69:2b:f8:6f:ed:15:8d:3e:fb:54:c4:bc: 60:f3:af:74:46:49:4f:bc:cd:c9:fd:ed:76:aa:dc: 86:95:48:35:23:aa:53:52:ec:40:18:ee:9e:4e:ce: 80:23:f6:25:b4:b4:d1:ae:c2:92:34:c8:62:fb:e5: 28:ad:b3:bb:a4:94:fe:3b:d5:70:90:40:d7:22:55: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:FB:2D:54:96:72:19:46:56:3A:49:DC:15:08:96:67:BF:97:3F X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:a0:7d:8d:dc:ff:27:d9:da:4a:25:aa:31:cb:6e:f7:66: 39:8d:8c:be:a3:a2:75:8f:4a:d1:07:b1:8e:82:26:02:a4:74: 80:24:c5:75:2d:04:2d:d1:8a:cd:ed:5a:b3:8a:6d:84:53:c4: 65:5d:04:c6:2d:0e:54:b8:a1:44:bd:0a:de:87:15:b3:b2:18: a6:a5:0d:c6:41:2c:9e:33:2a:fd:7b:ff:ff:af:44:27:8b:4d: c2:3c:b4:79:59:17:be:21:04:08:ab:b3:55:f1:54:65:09:f8: 04:de:42:b7:33:5d:ea:f4:a9:d4:db:aa:36:ce:55:33:a1:f4: b2:77:e8:5c:47:c6:a4:e8:4c:cd:c7:1e:b9:40:db:2d:a4:3a: a4:4c:10:48:a0:12:0b:57:a6:70:dd:da:ce:cf:f3:af:ce:e9: ed:85:37:5c:39:f2:6d:a0:df:33:a9:c0:70:6d:bc:9b:cf:0b: e0:ef:30:80:8c:cb:bb:21:26:e8:9f:9f:81:95:29:d2:fb:84: c1:f2:1b:7f:6f:94:e8:52:c7:14:7c:01:fa:68:02:e9:54:49: 36:4c:86:2e:46:ae:81:03:97:8c:42:cd:2e:fd:f9:16:1e:18: 68:b4:c3:5a:27:e8:82:e8:1b:69:be:1d:d5:57:8e:cc:93:e6: bd:67:94:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwMzI4MjM1MTI1WhcNMjUwNDA0MjM1MTI1WjAYMRYwFAYD VQQDEw02N2U3MzVmZC04OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AfnIX7zzjXpm3NJfeuyFfRa9zr2gU0xC6TgvvpGDHK68e8ksGD3G1JL5iKk 939fqXnTjKOzna14uEANVfmM1RWGwJ4bMy5YN8NULCOinlgkxP8bREhCS1qTSwC3 ARv/1+XpUHilh63OwfHu87KZ8mxbFfNMBcdMO8fMWmX28s2WdISPRZYegjnAiDwz qUKtg1c6Ae44N0/ygfOk1Qp9Z1no9eH9WJtjAhRHMZ3WiVQvw7ou9K1pK/hv7RWN PvtUxLxg8690RklPvM3J/e12qtyGlUg1I6pTUuxAGO6eTs6AI/YltLTRrsKSNMhi ++UorbO7pJT+O9VwkEDXIlXj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP5+y1U lnIZRlY6SdwVCJZnv5c/MB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHPKB9jdz/J9naSiWqMctu92Y5jYy+o6J1j0rRB7GOgiYCpHSAJMV1 LQQt0YrN7Vqzim2EU8RlXQTGLQ5UuKFEvQrehxWzshimpQ3GQSyeMyr9e///r0Qn i03CPLR5WRe+IQQIq7NV8VRlCfgE3kK3M13q9KnU26o2zlUzofSyd+hcR8ak6EzN xx65QNstpDqkTBBIoBILV6Zw3drOz/OvzunthTdcOfJtoN8zqcBwbbybzwvg7zCA jMu7ISbon5+BlSnS+4TB8ht/b5ToUscUfAH6aALpVEk2TIYuRq6BA5eMQs0u/fkW HhhotMNaJ+iC6Btpvh3VV47Mk+a9Z5S/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:33 2025 by rpki-client