$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: 763MBHlaWVRuxguTSjHAvYOOmDuuh33l7VldrvA6iFo= Subject key identifier: CC:69:22:69:11:36:45:B3:D3:01:6C:90:DA:D1:A7:9A:A0:19:B3:2F Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 0776 Signing time: Tue 08 Apr 2025 21:13:16 +0000 Manifest this update: Tue 08 Apr 2025 21:13:15 +0000 Manifest next update: Tue 15 Apr 2025 21:13:15 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: pEE///lSKU1ntUJ3vqsjFeTjnhfpgrsitcXOtm+awIg=) 2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: YCjgtUnq0bK/nQUFojfVd+RvvleBXGJZLtaNdj95Zd4=) 3: 69E6E12EDC9011EF9BE91E56C4F9AE02.roa (hash: cAYJAsveDaU7daevw1gSN5NU9WXBY8DFWS1w5jLRBMU=) 4: 557C01B0DC9011EFB2FA0156C4F9AE02.roa (hash: yMRj6zXkNB91QEkpYUaCtfSJCsK4a+LvUrWQ52M/QbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312 Validity Not Before: Apr 8 21:13:15 2025 GMT Not After : Apr 15 21:13:15 2025 GMT Subject: CN=67f5916b-6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:ed:ab:0e:18:0a:1f:95:4c:86:5a:56:35: ff:ad:2a:8e:28:c1:47:56:30:51:b0:28:47:b0:e4: 74:c4:00:14:36:c5:f9:ff:fd:17:f6:1c:f7:89:29: fe:64:53:37:5a:1f:a7:3a:6d:33:40:cc:d2:4a:a2: 95:ba:4b:bc:17:cd:fd:53:f4:c7:69:3f:35:e3:d7: 5f:06:ef:8c:c9:9a:82:8d:b1:88:d6:39:dd:d1:51: 96:fe:e0:5b:21:ba:1e:22:65:f8:4e:e0:5b:8a:0f: 05:dc:97:ad:42:f5:37:3c:52:6d:6d:38:fe:47:c9: 0e:43:b6:fe:69:f3:60:24:8d:00:f6:58:58:df:d3: 72:3c:61:5e:eb:8c:04:89:41:f6:6f:d9:e6:4e:2e: 6e:d5:14:60:22:82:5e:1e:e8:1c:8e:e2:c0:50:5a: 02:c3:ea:b8:e8:47:1f:41:b6:08:c1:27:c7:bf:30: f9:84:53:a9:09:9d:0a:b0:65:43:c5:23:f7:82:73: 9b:67:e9:5a:36:00:80:4a:75:1e:70:95:ea:63:60: bd:08:db:b7:36:2f:20:b2:ec:fe:45:a5:55:27:01: c0:22:60:a7:44:cf:8f:8d:7d:ea:e9:1e:2d:f8:d5: 15:30:03:f5:f9:6d:0c:24:b5:2f:fe:de:7f:4b:82: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:69:22:69:11:36:45:B3:D3:01:6C:90:DA:D1:A7:9A:A0:19:B3:2F X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c5:07:db:27:30:08:f4:d8:23:e5:12:d6:de:a6:dd:c8:e5: 7f:39:24:63:ed:74:8b:d5:a8:d1:dd:81:39:84:e6:e2:73:f8: 96:14:99:9e:d4:08:c0:ab:15:e2:33:3e:88:75:c6:26:7b:3f: f7:62:2a:17:91:6f:47:79:39:7d:7b:30:42:56:d1:66:9f:3f: 1c:35:c6:22:b7:f7:24:07:11:2c:47:1d:ba:89:14:5a:c4:6f: 92:8f:d5:29:25:8c:81:1f:66:56:35:6a:7d:33:fe:0b:fb:63: 36:e1:0b:f3:1d:a8:16:bf:a6:f5:9d:5d:d7:f9:a2:f1:8a:75: b2:63:9c:a8:2d:90:93:0f:c6:8f:60:46:ae:dc:66:45:be:1f: d8:2e:c1:7c:0d:2a:ad:52:d4:db:68:f7:74:08:28:92:b7:e2: dd:c4:f3:40:42:7f:e0:5f:86:36:56:1c:1c:74:e6:3b:49:53: 79:e0:73:88:46:6f:51:7a:d9:90:46:e0:d5:d3:6c:e0:b8:04: 7b:b7:00:e1:67:e4:bd:39:0f:e1:fd:0b:75:4d:b0:1b:b7:6a: 6f:25:b7:19:05:00:29:12:fe:90:27:68:06:24:18:99:7e:fa: 1c:44:71:ee:b6:36:e2:f2:b7:9a:da:ad:0f:21:a3:d4:7a:2e: e5:03:14:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUwNDA4MjExMzE1WhcNMjUwNDE1MjExMzE1WjAYMRYwFAYD VQQDEw02N2Y1OTE2Yi02ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuDtqw4YCh+VTIZaVjX/rSqOKMFHVjBRsChHsOR0xAAUNsX5//0X9hz3iSn+ ZFM3Wh+nOm0zQMzSSqKVuku8F839U/THaT8149dfBu+MyZqCjbGI1jnd0VGW/uBb IboeImX4TuBbig8F3JetQvU3PFJtbTj+R8kOQ7b+afNgJI0A9lhY39NyPGFe64wE iUH2b9nmTi5u1RRgIoJeHugcjuLAUFoCw+q46EcfQbYIwSfHvzD5hFOpCZ0KsGVD xSP3gnObZ+laNgCASnUecJXqY2C9CNu3Ni8gsuz+RaVVJwHAImCnRM+PjX3q6R4t +NUVMAP1+W0MJLUv/t5/S4LPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxpImkR NkWz0wFskNrRp5qgGbMvMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCexQfbJzAI9Ngj5RLW3qbdyOV/OSRj7XSL1ajR3YE5hObic/iWFJme 1AjAqxXiMz6IdcYmez/3YioXkW9HeTl9ezBCVtFmnz8cNcYit/ckBxEsRx26iRRa xG+Sj9UpJYyBH2ZWNWp9M/4L+2M24QvzHagWv6b1nV3X+aLxinWyY5yoLZCTD8aP YEau3GZFvh/YLsF8DSqtUtTbaPd0CCiSt+LdxPNAQn/gX4Y2VhwcdOY7SVN54HOI Rm9RetmQRuDV02zguAR7twDhZ+S9OQ/h/Qt1TbAbt2pvJbcZBQApEv6QJ2gGJBiZ fvocRHHutjbi8rea2q0PIaPUei7lAxQY -----END CERTIFICATE-----Generated at Fri Apr 11 15:59:46 2025 by rpki-client