$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: VmB5Kz3fDWI+R8Mh47NWlLSw9A3zy50WYFR1MEa5RMA= Subject key identifier: 3B:96:C9:7C:D0:81:41:CB:A7:4B:12:FC:75:5E:E7:0F:CF:B7:C9:24 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: AA Signing time: Sat 05 Apr 2025 05:24:29 +0000 Manifest this update: Sat 05 Apr 2025 05:24:28 +0000 Manifest next update: Sat 12 Apr 2025 05:24:28 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: xBX0MAJLhFlWBCMAkP68jqbHsTUec9hR3SrluzhfqeY=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: iAqTeq7DYC2XzKkxp4XaSsZwdjNAq/KDqtcN89ShlXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793 Validity Not Before: Apr 5 05:24:28 2025 GMT Not After : Apr 12 05:24:28 2025 GMT Subject: CN=67f0be8d-ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:74:e7:90:85:92:58:07:ce:5e:a4:b3:ea: 99:48:0c:90:f6:3d:c9:c7:3b:ed:c4:06:04:33:69: f4:a5:33:1c:0c:87:1d:80:8d:4d:f8:98:60:e5:77: 47:68:24:d3:20:9a:e8:e8:e8:00:83:57:93:89:87: ee:7b:04:22:5b:e9:b8:76:8d:1f:92:57:21:5d:0e: 8f:f4:7c:fb:30:0a:99:7f:e2:b8:96:cf:af:72:13: c0:08:b4:0f:77:52:46:1a:49:d2:5a:d0:21:41:7d: df:c2:9c:bf:28:0a:85:cc:e8:48:f4:28:f9:5f:1b: 92:ac:f8:9e:4d:db:7e:4a:a9:aa:bb:29:ee:cc:6b: c4:41:fa:16:f8:68:f7:32:8a:7d:fc:ed:8a:b2:fd: 0f:63:66:b5:0f:c3:a2:f5:9d:53:48:b4:74:d5:c1: a0:88:4f:e3:01:ee:65:ec:ea:82:b9:8e:20:a8:c6: ef:39:58:1d:7f:11:0f:58:94:3e:33:a5:04:58:3b: 65:51:08:93:67:78:19:21:e2:e4:64:57:2e:d2:5d: f0:47:0b:86:36:57:ba:43:fe:a2:df:25:c7:23:11: d4:26:9a:5a:4b:d7:b3:f1:b5:26:2a:30:35:f9:cc: ee:20:bb:55:bc:21:a7:f2:7e:1e:ba:ac:5b:e5:28: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:C9:7C:D0:81:41:CB:A7:4B:12:FC:75:5E:E7:0F:CF:B7:C9:24 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b4:1e:a9:8b:32:94:67:85:34:17:6e:3f:df:73:c7:00:e9: 97:73:e5:6b:14:1f:da:6f:7b:90:0a:22:da:8a:b1:ca:70:43: fe:d3:a3:7a:6d:12:a9:d7:60:d0:08:28:87:e2:f3:45:76:ee: 3d:ef:0c:8b:2e:b7:be:04:cc:63:d5:fc:d1:28:6d:0f:54:7a: 7e:f2:c9:03:e1:8c:26:55:60:5b:17:54:51:ff:9a:6d:2d:b8: 92:25:09:24:8e:1d:00:2b:8e:12:31:40:bb:07:08:1c:0f:37: 8a:52:ed:ff:31:92:ac:b2:87:1d:d7:c6:37:cf:f4:98:1d:a4: 21:2d:c7:5f:82:d2:85:fc:51:b9:d7:53:11:1f:bc:c6:db:be: fc:0b:28:39:ee:80:ff:d8:ba:a0:8e:80:b6:48:b5:c8:c5:04: 42:26:a8:3c:ec:ca:07:5e:f2:14:d7:a1:da:93:3a:93:fb:89: 31:ff:3e:77:23:9a:35:8e:2d:7b:b6:e6:c8:9b:44:d3:a6:38: 9b:db:98:22:b4:9b:cf:2b:9f:de:aa:8c:93:54:cd:ba:b1:90: 9a:a6:ac:e7:1a:e4:50:27:35:f8:ff:2b:4c:d0:a3:f6:c2:5d: b0:2d:78:5b:42:be:e8:7d:b4:2d:d8:9a:d7:2e:e4:f2:4a:e1: ae:81:37:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwNDA1MDUyNDI4WhcNMjUwNDEyMDUyNDI4WjAYMRYwFAYD VQQDEw02N2YwYmU4ZC1lYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Q1055CFklgHzl6ks+qZSAyQ9j3JxzvtxAYEM2n0pTMcDIcdgI1N+Jhg5XdH aCTTIJro6OgAg1eTiYfuewQiW+m4do0fklchXQ6P9Hz7MAqZf+K4ls+vchPACLQP d1JGGknSWtAhQX3fwpy/KAqFzOhI9Cj5XxuSrPieTdt+SqmquynuzGvEQfoW+Gj3 Mop9/O2Ksv0PY2a1D8Oi9Z1TSLR01cGgiE/jAe5l7OqCuY4gqMbvOVgdfxEPWJQ+ M6UEWDtlUQiTZ3gZIeLkZFcu0l3wRwuGNle6Q/6i3yXHIxHUJppaS9ez8bUmKjA1 +czuILtVvCGn8n4euqxb5SiQ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuWyXzQ gUHLp0sS/HVe5w/Pt8kkMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHtB6pizKUZ4U0F24/33PHAOmXc+VrFB/ab3uQCiLairHKcEP+06N6 bRKp12DQCCiH4vNFdu497wyLLre+BMxj1fzRKG0PVHp+8skD4YwmVWBbF1RR/5pt LbiSJQkkjh0AK44SMUC7BwgcDzeKUu3/MZKssocd18Y3z/SYHaQhLcdfgtKF/FG5 11MRH7zG2778Cyg57oD/2LqgjoC2SLXIxQRCJqg87MoHXvIU16HakzqT+4kx/z53 I5o1ji17tubIm0TTpjib25gitJvPK5/eqoyTVM26sZCapqznGuRQJzX4/ytM0KP2 wl2wLXhbQr7ofbQt2JrXLuTySuGugTcN -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:15 2025 by rpki-client