$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: Ic9KX1iEsPNPs3yuECm05jHnUQRZjTayj7+ewgQQCoo= Subject key identifier: 0E:D7:8D:61:35:21:5D:6C:57:CC:C9:82:19:61:51:BC:8E:46:78:11 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 010E Signing time: Sat 05 Apr 2025 04:17:55 +0000 Manifest this update: Sat 05 Apr 2025 04:17:54 +0000 Manifest next update: Sat 12 Apr 2025 04:17:54 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: C9z5UJi7HGG4AxZY53yeWahNfDxobkiECrkq/6+uHrI=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: SshOC3gU6HUaIU7OUJCNAnBTxBahFjxoE/rfFGZssow=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: GCUYfktdJtM3w3x/AngT0svZ6AfcPm8+X/17pTPoOCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B Validity Not Before: Apr 5 04:17:54 2025 GMT Not After : Apr 12 04:17:54 2025 GMT Subject: CN=67f0aef3-283f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:66:02:63:7f:6b:32:de:db:12:9e:1a:53: cb:0b:03:e9:11:fd:d6:f8:52:a8:e1:a5:1b:c0:06: 62:53:c2:ae:d1:7d:73:79:e2:89:98:76:7f:94:f8: e0:c0:ce:15:fe:d9:76:99:40:cb:9d:74:f2:0f:16: 8f:c6:cc:b6:b7:d7:66:ee:bd:ac:aa:ef:97:63:64: a9:a2:0c:f9:56:2e:2e:85:c7:2b:7f:e1:bd:da:06: 72:10:50:1c:0d:27:e2:29:13:11:31:d7:e1:86:62: 07:43:a1:5f:10:e6:7f:45:59:69:86:fb:80:28:a8: c1:ea:6e:9f:54:da:64:ef:4c:19:0a:56:5d:07:d1: 27:fc:57:79:72:5d:06:13:e0:a2:87:63:f6:b3:83: 4c:3e:0a:a2:f5:21:a3:27:2e:b9:ef:2d:bb:94:54: b2:22:cf:46:e4:bf:42:66:e1:89:ef:16:0f:51:1c: 8d:39:3c:f9:9c:f8:69:20:f0:26:16:00:f6:c1:3d: c5:84:92:d4:83:35:85:07:a7:3c:86:f0:df:16:0f: 43:ff:c9:8e:9e:41:87:41:ca:69:4c:41:0e:7f:c3: 0a:5a:ed:dd:e4:e9:a5:ac:dc:5f:38:00:66:a5:7a: 8b:f9:37:32:51:c3:f0:4a:1e:a9:52:b2:d8:5b:e4: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D7:8D:61:35:21:5D:6C:57:CC:C9:82:19:61:51:BC:8E:46:78:11 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e8:bb:9e:86:20:7e:39:27:85:3b:6f:87:23:2b:05:72:55: 57:35:08:0e:11:0f:51:33:fb:99:ec:8b:b7:95:63:34:5c:87: 49:00:6c:c7:f8:02:35:df:10:ae:43:57:49:ba:04:94:9f:36: 00:a4:c9:68:ce:8f:55:58:16:73:35:4f:17:3e:5a:77:20:06: 59:8f:a8:a3:0f:c1:77:78:c9:10:09:b7:3f:fe:52:17:3d:2a: 95:c1:bd:31:5c:46:13:09:41:88:c5:36:ae:3b:f1:8a:80:0e: f5:96:23:e7:92:dc:16:9f:7e:33:91:89:7a:d3:a4:d3:93:3a: 24:f1:c7:29:ee:ab:a1:1e:16:2b:ea:55:68:a2:0a:6c:02:56: f5:75:be:ba:b4:82:82:6c:74:f9:7a:5b:23:55:15:c8:8b:d3: fd:1c:19:d6:b2:6b:f2:5f:d1:c9:20:2f:b7:40:4d:81:f6:fc: 4d:6d:c0:a9:29:31:67:54:8a:05:65:e7:6e:37:ce:c1:92:43: 49:dd:da:86:71:98:a3:08:6d:c7:a7:39:a3:7a:1a:fc:bc:a9: d5:4e:ac:0f:6b:43:44:aa:c2:d8:01:38:8a:10:f1:39:2f:37: 4c:0f:b3:cc:26:7d:ce:00:22:40:6a:d7:b9:17:b1:55:a5:09: 90:69:75:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjUwNDA1MDQxNzU0WhcNMjUwNDEyMDQxNzU0WjAYMRYwFAYD VQQDEw02N2YwYWVmMy0yODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkBmAmN/azLe2xKeGlPLCwPpEf3W+FKo4aUbwAZiU8Ku0X1zeeKJmHZ/lPjg wM4V/tl2mUDLnXTyDxaPxsy2t9dm7r2squ+XY2Spogz5Vi4uhccrf+G92gZyEFAc DSfiKRMRMdfhhmIHQ6FfEOZ/RVlphvuAKKjB6m6fVNpk70wZClZdB9En/Fd5cl0G E+Cih2P2s4NMPgqi9SGjJy657y27lFSyIs9G5L9CZuGJ7xYPURyNOTz5nPhpIPAm FgD2wT3FhJLUgzWFB6c8hvDfFg9D/8mOnkGHQcppTEEOf8MKWu3d5OmlrNxfOABm pXqL+TcyUcPwSh6pUrLYW+TKvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7XjWE1 IV1sV8zJghlhUbyORngRMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA86LuehiB+OSeFO2+HIysFclVXNQgOEQ9RM/uZ7Iu3lWM0XIdJAGzH +AI13xCuQ1dJugSUnzYApMlozo9VWBZzNU8XPlp3IAZZj6ijD8F3eMkQCbc//lIX PSqVwb0xXEYTCUGIxTauO/GKgA71liPnktwWn34zkYl606TTkzok8ccp7quhHhYr 6lVoogpsAlb1db66tIKCbHT5elsjVRXIi9P9HBnWsmvyX9HJIC+3QE2B9vxNbcCp KTFnVIoFZeduN87BkkNJ3dqGcZijCG3Hpzmjehr8vKnVTqwPa0NEqsLYATiKEPE5 LzdMD7PMJn3OACJAate5F7FVpQmQaXXy -----END CERTIFICATE-----Generated at Sun Apr 6 19:20:48 2025 by rpki-client