$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: vkwqUaNIX6HjwCkAsIeSLGnJ3H6jm+E39mAR4psZgs0= Subject key identifier: BF:14:F9:A1:35:28:80:A5:4E:63:AB:86:66:7D:F9:E5:CD:41:A4:44 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01BF Signing time: Sat 29 Mar 2025 02:39:02 +0000 Manifest this update: Sat 29 Mar 2025 02:39:01 +0000 Manifest next update: Sat 05 Apr 2025 02:39:01 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: JEAC7P4qsLXL3SQ0w4G+64AEAyhEEAkl9UK4uSSdS8w=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C Validity Not Before: Mar 29 02:39:01 2025 GMT Not After : Apr 5 02:39:01 2025 GMT Subject: CN=67e75d46-1ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:c8:b6:45:8c:a4:e3:78:c4:d7:79:79:73: 77:39:cb:24:dd:01:37:28:89:8e:3f:ac:fe:68:63: 37:28:41:5f:e1:29:4b:c4:1e:59:6c:b9:08:49:46: 55:33:36:21:26:28:82:18:a1:d4:4d:ff:54:40:5d: 2d:8e:17:67:af:af:a0:4d:a9:74:bc:36:35:82:47: ed:c3:58:a1:21:f4:6e:d9:45:eb:f3:3a:7b:97:a8: 52:d5:de:c6:ef:b8:10:41:5e:1e:c4:ba:4f:30:ca: 7e:9f:bd:27:06:0f:d0:d3:7a:65:68:52:6b:6f:52: b5:54:66:05:36:38:7f:64:af:94:51:10:5a:42:0c: 18:20:99:66:96:d5:e1:f8:cd:49:21:dc:ef:1a:51: ab:64:12:d8:51:f5:05:47:90:a3:67:34:25:35:0c: 18:78:dc:44:6f:4e:46:46:c5:b1:64:4c:22:28:00: 79:30:f8:6f:12:b3:12:66:79:61:65:e6:62:fd:de: e3:8d:9e:be:80:f9:b5:56:fd:e4:ec:66:63:b3:40: 5e:fd:1a:25:14:40:09:68:b1:f5:98:b5:31:66:d5: 65:15:b7:79:14:a7:8b:09:47:38:69:aa:d5:5b:66: d2:91:c7:6c:93:03:a8:27:64:99:c6:86:04:6a:28: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:14:F9:A1:35:28:80:A5:4E:63:AB:86:66:7D:F9:E5:CD:41:A4:44 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:31:ab:c1:09:cc:8b:e1:ab:fb:e5:3b:45:0a:8a:9f:a0:41: e7:ee:0b:70:fc:53:e9:3c:27:0c:fc:a6:04:85:6b:18:43:27: 22:fe:89:b4:87:c9:0b:6e:0d:1b:af:e5:ff:dc:2e:94:3b:4d: b8:e4:b1:69:de:11:ce:25:a1:95:6d:ae:d3:a1:75:c8:7b:a3: 2c:e7:4a:8c:ce:56:6e:bb:8d:db:a1:bf:10:ca:95:ed:71:a1: 67:aa:0d:75:5c:8a:79:06:48:af:1b:94:64:34:51:0c:6a:08: 5e:1f:df:29:53:4b:ba:71:a4:74:38:28:3b:48:84:f0:d8:6a: 16:4f:5a:a5:93:b2:ee:1a:41:ca:dc:97:43:40:92:18:e5:de: fe:7b:97:7c:2c:b9:f1:6d:c5:b6:a5:db:9e:88:3f:25:2e:55: 48:fb:0d:05:ef:51:5e:09:1d:80:9b:a6:a6:a0:58:1f:7c:4d: 2d:a1:84:f8:11:9f:fa:e0:7c:2c:3d:64:49:43:97:3c:dd:d3: 26:98:02:7e:7c:ce:c7:13:14:4a:d1:9f:8f:db:98:d3:5d:83: 6d:b3:1d:fd:f7:28:5b:4b:b5:aa:4a:04:2b:5c:03:d7:e8:a6: d1:03:88:e7:f3:7e:c1:49:b1:11:3d:85:aa:49:01:53:05:ac: de:e3:05:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwMzI5MDIzOTAxWhcNMjUwNDA1MDIzOTAxWjAYMRYwFAYD VQQDEw02N2U3NWQ0Ni0xZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXXItkWMpON4xNd5eXN3Ocsk3QE3KImOP6z+aGM3KEFf4SlLxB5ZbLkISUZV MzYhJiiCGKHUTf9UQF0tjhdnr6+gTal0vDY1gkftw1ihIfRu2UXr8zp7l6hS1d7G 77gQQV4exLpPMMp+n70nBg/Q03plaFJrb1K1VGYFNjh/ZK+UURBaQgwYIJlmltXh +M1JIdzvGlGrZBLYUfUFR5CjZzQlNQwYeNxEb05GRsWxZEwiKAB5MPhvErMSZnlh ZeZi/d7jjZ6+gPm1Vv3k7GZjs0Be/RolFEAJaLH1mLUxZtVlFbd5FKeLCUc4aarV W2bSkcdskwOoJ2SZxoYEaigSWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8U+aE1 KIClTmOrhmZ9+eXNQaREMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXMavBCcyL4av75TtFCoqfoEHn7gtw/FPpPCcM/KYEhWsYQyci/om0 h8kLbg0br+X/3C6UO0245LFp3hHOJaGVba7ToXXIe6Ms50qMzlZuu43bob8QypXt caFnqg11XIp5BkivG5RkNFEMagheH98pU0u6caR0OCg7SITw2GoWT1qlk7LuGkHK 3JdDQJIY5d7+e5d8LLnxbcW2pdueiD8lLlVI+w0F71FeCR2Am6amoFgffE0toYT4 EZ/64HwsPWRJQ5c83dMmmAJ+fM7HExRK0Z+P25jTXYNtsx399yhbS7WqSgQrXAPX 6KbRA4jn837BSbERPYWqSQFTBaze4wUP -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:27 2025 by rpki-client