$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: 6juf8lhLbNRxrfROsGkXoc6FlpH3xfz3e47GZMfd9YE= Subject key identifier: D6:04:D9:18:80:55:52:9B:E9:C7:49:4F:6E:B5:2F:81:76:7A:FC:EF Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0C3B Signing time: Fri 18 Apr 2025 18:32:20 +0000 Manifest this update: Fri 18 Apr 2025 18:32:19 +0000 Manifest next update: Fri 25 Apr 2025 18:32:19 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: AlfekkfqC0vTTNxNHxWcZDjZY/Lo9P+BspdGXxOEYN8=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Apr 18 18:32:19 2025 GMT Not After : Apr 25 18:32:19 2025 GMT Subject: CN=68029ab3-ce35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:e1:23:19:cd:0c:f4:50:6e:1d:8d:16:81: d3:8e:3b:88:62:b7:bd:a3:e4:73:3c:77:46:15:2f: bc:24:c8:9d:91:55:d4:be:44:2a:62:09:2b:80:7d: e2:49:ba:2c:94:af:0b:97:09:1d:68:4e:df:4e:a6: 14:ff:2c:fd:fa:27:a6:8f:c7:7d:8b:c9:09:55:c6: 60:5e:e2:59:ea:d3:10:de:e7:19:de:21:5a:52:d4: e8:9e:e3:7b:a5:43:1a:bd:a2:7f:f9:d2:8d:f3:49: c6:56:04:44:d2:9b:19:dc:21:2e:08:f5:e2:93:ca: b8:91:e0:3d:9e:50:34:3d:c7:0c:5d:e4:07:fa:aa: da:b8:3b:ab:aa:8d:c1:bf:f1:ff:62:4d:d5:f9:5b: c3:d5:28:cc:0e:2f:6c:0a:e2:a3:66:89:9c:d3:da: dd:75:39:fa:93:74:9e:09:68:ad:a6:54:4e:8e:13: e8:1f:68:45:43:0b:ca:c4:a7:9b:9a:6e:ec:2a:f3: 70:90:1c:69:0e:83:f7:47:cb:68:99:de:9d:5e:74: c6:8b:60:fe:40:da:64:7a:1c:ba:72:06:f4:49:21: 84:54:5f:d4:24:e4:0b:4a:43:dc:5d:54:04:d7:4a: 3b:bf:50:7c:b2:32:3e:18:c1:55:5d:07:5b:26:2b: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:04:D9:18:80:55:52:9B:E9:C7:49:4F:6E:B5:2F:81:76:7A:FC:EF X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:2b:59:f6:3f:a9:de:cb:3b:d6:dc:1e:dc:d0:e8:31:8d: 9e:b4:78:ce:e6:41:8c:a6:16:0a:b7:a8:d2:b7:bd:e1:57:e0: 5d:44:11:e9:d9:56:c7:d8:59:b4:84:d0:2c:28:89:14:f9:06: f9:b2:6e:44:da:b8:b1:a3:8f:49:42:cc:d1:0a:41:24:3a:cb: 1e:38:ca:e7:6f:a6:74:95:03:8f:f3:74:be:5d:52:ea:55:1b: 1d:21:ae:7c:4f:3b:2e:8b:bc:3e:fc:65:b6:ba:cd:31:0e:e9: 90:e2:d2:5a:61:96:89:e7:93:47:65:e1:a9:49:a5:06:67:07: 08:ca:7c:0f:40:09:0a:5c:00:46:59:f9:b9:52:c3:ca:82:ca: 48:a2:66:8f:27:ec:5f:7e:67:ef:34:f4:67:cb:21:ea:0c:15: a8:c4:73:9b:c9:ec:e5:d5:16:77:b2:cc:ea:b3:f1:5d:bf:e8: 3a:64:73:58:07:40:8a:e0:12:cd:3a:a5:5f:47:b5:15:32:68: 25:50:c1:03:75:a8:fb:27:61:c9:fb:cb:24:5e:2f:74:45:c8: 23:46:28:86:c5:ea:10:8d:95:59:d6:2f:c5:ce:a2:e6:9e:91: 72:b5:a2:69:5e:b3:9a:99:8c:24:e0:af:ef:5b:a6:84:3b:03: dd:f9:cd:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUwNDE4MTgzMjE5WhcNMjUwNDI1MTgzMjE5WjAYMRYwFAYD VQQDEw02ODAyOWFiMy1jZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbHhIxnNDPRQbh2NFoHTjjuIYre9o+RzPHdGFS+8JMidkVXUvkQqYgkrgH3i SboslK8LlwkdaE7fTqYU/yz9+iemj8d9i8kJVcZgXuJZ6tMQ3ucZ3iFaUtTonuN7 pUMavaJ/+dKN80nGVgRE0psZ3CEuCPXik8q4keA9nlA0PccMXeQH+qrauDurqo3B v/H/Yk3V+VvD1SjMDi9sCuKjZomc09rddTn6k3SeCWitplROjhPoH2hFQwvKxKeb mm7sKvNwkBxpDoP3R8tomd6dXnTGi2D+QNpkehy6cgb0SSGEVF/UJOQLSkPcXVQE 10o7v1B8sjI+GMFVXQdbJivywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYE2RiA VVKb6cdJT261L4F2evzvMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBerytZ9j+p3ss71twe3NDoMY2etHjO5kGMphYKt6jSt73hV+BdRBHp 2VbH2Fm0hNAsKIkU+Qb5sm5E2rixo49JQszRCkEkOsseOMrnb6Z0lQOP83S+XVLq VRsdIa58Tzsui7w+/GW2us0xDumQ4tJaYZaJ55NHZeGpSaUGZwcIynwPQAkKXABG Wfm5UsPKgspIomaPJ+xffmfvNPRnyyHqDBWoxHObyezl1RZ3sszqs/Fdv+g6ZHNY B0CK4BLNOqVfR7UVMmglUMEDdaj7J2HJ+8skXi90RcgjRiiGxeoQjZVZ1i/FzqLm npFytaJpXrOamYwk4K/vW6aEOwPd+c00 -----END CERTIFICATE-----Generated at Fri Apr 18 20:31:31 2025 by rpki-client