$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: b9Y1inyghlv23XFMuaVwB1zKz4THOtjdaE7PamasE2w= Subject key identifier: 65:85:72:A4:DB:A6:04:66:CF:72:49:F8:86:F5:DF:5C:F7:81:2C:82 Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 047D Signing time: Sun 20 Apr 2025 23:40:26 +0000 Manifest this update: Sun 20 Apr 2025 23:40:25 +0000 Manifest next update: Sun 27 Apr 2025 23:40:25 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: dZ9Z2IudZTzzjpdJj1iYgd4mzRTU8tuV5NHUI4JF624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Apr 20 23:40:25 2025 GMT Not After : Apr 27 23:40:25 2025 GMT Subject: CN=680585e9-188e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:50:74:40:49:8e:75:42:9c:aa:c6:e5:94: 91:9a:41:6f:58:fd:13:b5:74:2a:b5:c0:11:b8:87: 2b:fe:73:51:db:3a:67:c1:de:8a:25:6a:42:41:ba: 50:21:46:09:68:92:f2:a9:ce:ca:58:1e:0b:a8:d4: bd:4e:89:d0:ae:be:be:b5:28:c1:38:75:1c:f0:2a: 2d:d7:de:3a:97:aa:d3:df:31:e3:20:68:49:93:5f: 66:9e:6e:39:02:3e:cd:59:b3:09:2f:b2:5b:17:29: 22:d7:e5:09:36:b7:08:85:93:44:ee:03:77:8e:42: 63:22:6a:81:49:38:86:9f:85:7c:b1:da:e2:7c:a0: a9:2c:4f:ea:ba:b1:e8:57:6d:72:2c:8c:fe:16:8c: c5:46:be:b8:02:b2:68:96:04:04:c9:55:61:c8:ae: 16:c4:18:9d:7e:ef:27:ad:60:5b:ec:2b:a1:21:26: 3a:f1:03:6f:3c:36:e7:10:37:0c:d5:53:2c:3b:df: 1b:ae:21:3d:40:63:69:48:9c:78:21:99:56:5a:70: 97:f3:a0:63:c8:f2:e6:06:ed:3f:09:b6:18:67:83: 12:f4:3d:2c:65:c8:c5:07:fe:8d:ce:f8:b8:e6:c9: c8:f9:6e:52:ef:0a:f9:ef:d8:ac:f2:dc:12:16:16: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:72:A4:DB:A6:04:66:CF:72:49:F8:86:F5:DF:5C:F7:81:2C:82 X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:93:2d:a6:c6:ab:af:fb:d5:09:3a:1d:c4:4d:9a:c4:37:a4: 80:ca:80:dd:f4:47:1a:bc:0c:f7:6f:15:80:42:b5:a7:19:dd: d1:27:a1:6c:93:2a:ba:9a:19:da:bb:11:fd:cb:ee:b8:97:c1: 0c:10:09:0c:35:b8:97:a4:3d:8d:c6:82:c8:b9:89:1f:e9:bc: 9c:ae:75:ed:7d:f7:6a:9c:96:13:4c:69:6d:73:69:d8:7a:bd: e9:cb:8f:b5:7b:64:04:9a:4f:23:11:b2:c3:45:a0:0d:d4:94: 1c:1d:be:d4:a8:bf:2b:e3:ca:1d:92:25:7f:9f:56:7f:57:70: 03:4d:f9:a6:85:fb:f3:2a:0b:a0:a3:7f:58:34:1f:95:a8:a9: ad:7f:2c:5b:ae:40:cd:8e:16:90:9a:52:70:67:c6:64:8a:5d: 3d:7c:b2:4b:38:ec:df:e5:fc:cd:ec:91:3c:6b:28:64:26:5f: fc:3d:f9:d5:92:14:2e:74:6c:be:73:41:6b:01:1e:39:b7:47: 2a:fb:e9:97:84:22:9c:8a:38:50:9e:ca:7b:41:f9:1d:47:68: 16:ee:40:da:af:bc:9d:72:0f:fe:b0:18:00:2d:87:7d:4d:ef: a5:4e:29:fe:dc:36:19:0c:39:91:a2:d3:9f:c1:31:fb:5d:75: 71:46:9c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwNDIwMjM0MDI1WhcNMjUwNDI3MjM0MDI1WjAYMRYwFAYD VQQDEw02ODA1ODVlOS0xODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhZQdEBJjnVCnKrG5ZSRmkFvWP0TtXQqtcARuIcr/nNR2zpnwd6KJWpCQbpQ IUYJaJLyqc7KWB4LqNS9TonQrr6+tSjBOHUc8Cot1946l6rT3zHjIGhJk19mnm45 Aj7NWbMJL7JbFyki1+UJNrcIhZNE7gN3jkJjImqBSTiGn4V8sdrifKCpLE/qurHo V21yLIz+FozFRr64ArJolgQEyVVhyK4WxBidfu8nrWBb7CuhISY68QNvPDbnEDcM 1VMsO98briE9QGNpSJx4IZlWWnCX86BjyPLmBu0/CbYYZ4MS9D0sZcjFB/6Nzvi4 5snI+W5S7wr579is8twSFhbY2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWFcqTb pgRmz3JJ+Ib131z3gSyCMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWky2mxquv+9UJOh3ETZrEN6SAyoDd9EcavAz3bxWAQrWnGd3RJ6Fs kyq6mhnauxH9y+64l8EMEAkMNbiXpD2NxoLIuYkf6bycrnXtffdqnJYTTGltc2nY er3py4+1e2QEmk8jEbLDRaAN1JQcHb7UqL8r48odkiV/n1Z/V3ADTfmmhfvzKgug o39YNB+VqKmtfyxbrkDNjhaQmlJwZ8Zkil09fLJLOOzf5fzN7JE8ayhkJl/8PfnV khQudGy+c0FrAR45t0cq++mXhCKcijhQnsp7QfkdR2gW7kDar7ydcg/+sBgALYd9 Te+lTin+3DYZDDmRotOfwTH7XXVxRpzy -----END CERTIFICATE-----Generated at Tue Apr 22 13:49:24 2025 by rpki-client