$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json) Hash identifier: +1rOT0rI+csXBd3hwO6jD4imodATH+fyyg+s1tEB97k= Subject key identifier: 08:34:B2:21:E5:89:BD:E1:DC:A1:C8:98:ED:3D:0E:09:D6:8D:49:C6 Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft Manifest number: 051B Signing time: Fri 28 Mar 2025 23:51:55 +0000 Manifest this update: Fri 28 Mar 2025 23:51:54 +0000 Manifest next update: Fri 04 Apr 2025 23:51:54 +0000 Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: Pddnqc8j7EzmtBKEiaP6JStAnBN3y3+hMu2RsWnZqUY=) 2: F18DB130603911EF930C0567C4F9AE02.roa (hash: bMyNaPmBlCzUdt5NHJjdyDhr0LajMy+L36w7sDnDjCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056 Validity Not Before: Mar 28 23:51:54 2025 GMT Not After : Apr 4 23:51:54 2025 GMT Subject: CN=67e7361a-83ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f9:a1:8d:71:ac:40:83:a1:63:d4:71:62:c1: 15:a6:d2:10:5f:18:36:cd:6f:61:41:6d:1d:cd:6a: af:2e:b8:d3:d5:47:12:a4:e2:b4:2c:0f:45:d5:f6: fb:1e:db:2d:b1:89:db:5c:8b:78:89:35:9a:cd:47: a9:54:42:88:26:6b:03:84:c3:d1:a6:2f:5b:28:e8: ab:dc:43:68:4d:d3:f8:24:3c:55:b8:b5:48:b7:8e: ec:da:f9:97:59:0d:eb:c5:e1:38:8e:3f:c8:82:a9: b4:e3:62:f0:8d:3d:55:18:a4:a1:df:ce:9f:a8:8f: 05:1c:71:3c:c2:4f:70:28:7a:ef:04:60:ed:d2:6f: c1:db:66:2c:d7:a6:b6:4d:dc:df:21:c4:00:6f:1a: bb:b5:04:38:2b:70:38:1a:7c:26:07:b6:74:8d:58: df:4c:95:f5:c6:38:ac:4f:be:a2:46:2e:d5:7f:4c: a2:6b:b7:db:6c:4e:e9:d2:04:b2:94:4c:d9:d0:44: e1:77:08:06:f7:20:b4:57:95:32:63:e7:a7:0b:60: 77:1c:2c:17:76:ea:cf:f4:54:c4:6a:85:e2:07:3e: 32:7d:b6:3f:2c:fd:ee:2a:2b:15:38:f4:e2:90:7c: 71:bc:b4:19:dc:c9:4c:2c:13:5a:52:2d:aa:f4:95: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:B2:21:E5:89:BD:E1:DC:A1:C8:98:ED:3D:0E:09:D6:8D:49:C6 X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:90:5c:a9:fa:27:1b:30:fe:a9:a9:55:d5:32:3b:f5:7a: 70:7e:aa:a2:1e:bf:a6:2c:05:00:d1:81:b5:e4:cc:c5:50:f8: 6a:6a:09:f5:bc:c2:15:0f:6c:94:ee:6a:22:2c:53:6f:55:e4: 7e:9a:bf:9e:c9:0d:0f:c1:d6:61:d4:a2:d1:75:f4:33:48:4e: d9:4b:ce:f4:d6:13:c8:8c:0e:d8:8b:ad:ee:06:ef:df:87:96: a1:01:ba:b5:e3:f1:57:59:e3:a5:31:13:e8:7c:39:d4:86:32: f8:24:b1:be:51:94:f2:55:eb:2b:4a:5c:47:35:98:ed:57:2c: 80:86:25:c5:bb:23:70:8f:e2:1c:9d:aa:77:f2:94:55:d4:9f: f7:2f:f1:7d:a6:64:bf:ca:5c:ab:4b:0d:80:bf:e9:07:e0:57: e0:ad:28:5b:2a:51:b8:9f:a4:4f:48:94:b0:f5:95:c8:bb:78: 30:12:a7:6f:cc:99:83:38:ca:79:3e:41:b8:2f:ca:25:bd:67: 1d:93:c5:21:06:40:70:72:6c:cd:11:a4:f8:fb:03:2d:47:31: 67:dc:e8:1c:91:48:6a:04:7a:c8:c0:eb:8e:27:ae:5b:50:da: 82:6b:93:a6:2e:16:0c:4e:cc:6a:17:da:8c:84:13:e6:94:03: 97:09:e6:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjUwMzI4MjM1MTU0WhcNMjUwNDA0MjM1MTU0WjAYMRYwFAYD VQQDEw02N2U3MzYxYS04M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/mhjXGsQIOhY9RxYsEVptIQXxg2zW9hQW0dzWqvLrjT1UcSpOK0LA9F1fb7 HtstsYnbXIt4iTWazUepVEKIJmsDhMPRpi9bKOir3ENoTdP4JDxVuLVIt47s2vmX WQ3rxeE4jj/Igqm042LwjT1VGKSh386fqI8FHHE8wk9wKHrvBGDt0m/B22Ys16a2 TdzfIcQAbxq7tQQ4K3A4GnwmB7Z0jVjfTJX1xjisT76iRi7Vf0yia7fbbE7p0gSy lEzZ0EThdwgG9yC0V5UyY+enC2B3HCwXdurP9FTEaoXiBz4yfbY/LP3uKisVOPTi kHxxvLQZ3MlMLBNaUi2q9JXi5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg0siHl ib3h3KHImO09DgnWjUnGMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlJBcqfonGzD+qalV1TI79XpwfqqiHr+mLAUA0YG15MzFUPhqagn1 vMIVD2yU7moiLFNvVeR+mr+eyQ0PwdZh1KLRdfQzSE7ZS8701hPIjA7Yi63uBu/f h5ahAbq14/FXWeOlMRPofDnUhjL4JLG+UZTyVesrSlxHNZjtVyyAhiXFuyNwj+Ic nap38pRV1J/3L/F9pmS/ylyrSw2Av+kH4FfgrShbKlG4n6RPSJSw9ZXIu3gwEqdv zJmDOMp5PkG4L8olvWcdk8UhBkBwcmzNEaT4+wMtRzFn3OgckUhqBHrIwOuOJ65b UNqCa5OmLhYMTsxqF9qMhBPmlAOXCeYg -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:12 2025 by rpki-client