$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: Vggq3n2LmwJbutErumkwXnc6E/cQnhJU2SOZPJpjI0Q= Subject key identifier: 68:D3:17:DA:DB:52:C3:9C:8E:8B:13:1D:04:59:03:17:39:C2:1D:EE Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 070C Signing time: Wed 02 Apr 2025 21:54:28 +0000 Manifest this update: Wed 02 Apr 2025 21:54:27 +0000 Manifest next update: Wed 09 Apr 2025 21:54:27 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: R6/A+wAHUw4qVLhgx0WRp5P3BOR7nqXmuwp029RMLu8=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3 Validity Not Before: Apr 2 21:54:27 2025 GMT Not After : Apr 9 21:54:27 2025 GMT Subject: CN=67edb214-b8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:a7:1b:5f:88:eb:25:ac:16:50:6a:db:7e: b4:25:2a:8d:63:92:11:76:6c:3f:a4:4e:71:32:c6: 22:cc:14:a7:7f:9c:c9:93:d5:c7:ab:30:aa:cf:db: ac:c3:c4:62:54:da:ce:dd:89:a5:4e:b6:28:f5:13: fa:37:f1:ba:27:02:44:7e:b5:83:8c:bc:0f:3a:2e: 72:a9:7c:d3:24:7f:2e:35:0b:e9:27:98:75:b9:88: 44:16:a8:72:b6:7d:ed:78:ed:01:aa:f2:14:78:5f: f9:3a:09:25:4d:c2:52:72:0c:c5:14:60:8c:27:81: f2:63:ff:d9:ff:22:b3:f9:44:59:f5:d5:36:42:a3: d8:90:db:8a:32:b4:0b:f8:a5:dc:6c:03:45:c4:90: df:6b:0e:e5:2f:03:fe:43:2b:19:ce:da:3a:f6:75: a3:f1:52:46:31:aa:86:6e:a9:b4:88:bb:d8:8b:3c: 85:b9:e5:cd:ed:db:76:10:4e:c3:9c:c6:92:a9:14: 4f:cf:4e:50:45:1d:42:5f:71:01:45:48:9b:b8:5c: a6:9a:fc:ae:d5:1f:6d:7e:e6:1c:b2:e8:13:8d:ec: d4:47:ea:19:fa:b8:c7:52:08:3c:40:9f:e6:ab:c2: 22:45:6d:67:67:b4:a5:ae:90:fd:c1:e9:4a:eb:ee: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D3:17:DA:DB:52:C3:9C:8E:8B:13:1D:04:59:03:17:39:C2:1D:EE X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:47:79:9b:69:b9:07:56:43:40:4a:09:55:13:75:18:00:6b: 2b:42:64:7e:db:fe:be:b5:f5:d7:50:09:ac:51:6b:1f:73:9d: cf:a7:e8:9e:8e:fb:d3:2b:e0:8f:eb:e4:e9:b1:ad:fd:57:1d: ca:b0:00:de:83:21:f5:d4:68:20:e2:43:8a:95:e5:15:06:24: c5:01:f2:b0:e9:cc:fc:3f:6e:a1:ac:f0:e3:e4:87:fc:74:fe: 55:c2:09:5a:cd:8d:f8:29:24:2c:77:28:be:77:13:d4:d6:17: d3:63:6d:8b:b4:5b:e4:1e:71:b5:2c:38:6d:2f:7d:ed:ef:36: 13:ff:73:2a:90:25:0f:a8:3e:ae:32:a4:1d:41:f1:0f:27:60: b7:fc:41:e7:4a:c1:21:2f:d0:fe:ef:32:ce:ac:81:81:b4:20: 04:e5:26:34:f3:78:7b:3f:fc:b8:4b:f4:15:14:24:d4:42:dc: 40:c9:c0:a0:96:56:8e:6d:a6:37:46:e2:a3:53:d9:0e:84:0a: c9:ee:8e:83:57:9f:d7:1b:d0:bc:b0:98:78:81:78:8d:14:41: 41:93:ae:0f:69:8b:c1:37:b3:68:2e:a2:aa:13:4d:c9:4f:bd: 3b:6a:10:0d:ba:fc:9a:d2:d3:d3:a4:c7:cb:a5:18:26:c8:d2: 9d:4e:2a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwNDAyMjE1NDI3WhcNMjUwNDA5MjE1NDI3WjAYMRYwFAYD VQQDEw02N2VkYjIxNC1iOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kqnG1+I6yWsFlBq2360JSqNY5IRdmw/pE5xMsYizBSnf5zJk9XHqzCqz9us w8RiVNrO3YmlTrYo9RP6N/G6JwJEfrWDjLwPOi5yqXzTJH8uNQvpJ5h1uYhEFqhy tn3teO0BqvIUeF/5OgklTcJScgzFFGCMJ4HyY//Z/yKz+URZ9dU2QqPYkNuKMrQL +KXcbANFxJDfaw7lLwP+QysZzto69nWj8VJGMaqGbqm0iLvYizyFueXN7dt2EE7D nMaSqRRPz05QRR1CX3EBRUibuFymmvyu1R9tfuYcsugTjezUR+oZ+rjHUgg8QJ/m q8IiRW1nZ7SlrpD9welK6+4//wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjTF9rb UsOcjosTHQRZAxc5wh3uMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsR3mbabkHVkNASglVE3UYAGsrQmR+2/6+tfXXUAmsUWsfc53Pp+ie jvvTK+CP6+Tpsa39Vx3KsADegyH11Ggg4kOKleUVBiTFAfKw6cz8P26hrPDj5If8 dP5VwglazY34KSQsdyi+dxPU1hfTY22LtFvkHnG1LDhtL33t7zYT/3MqkCUPqD6u MqQdQfEPJ2C3/EHnSsEhL9D+7zLOrIGBtCAE5SY083h7P/y4S/QVFCTUQtxAycCg llaObaY3RuKjU9kOhArJ7o6DV5/XG9C8sJh4gXiNFEFBk64PaYvBN7NoLqKqE03J T707ahANuvya0tPTpMfLpRgmyNKdTir8 -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:29 2025 by rpki-client