$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: yx+yiUJkm/AHkbEtfPFZ0SYEQAXisUpCGVOmaj766nM= Subject key identifier: 5E:41:4C:EA:59:98:16:DF:76:99:D7:10:5B:68:D2:8D:F3:EC:D5:9B Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 14 Signing time: Thu 03 Apr 2025 07:35:24 +0000 Manifest this update: Thu 03 Apr 2025 07:35:23 +0000 Manifest next update: Thu 10 Apr 2025 07:35:23 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: uPYdpCbLevr8BnTVVUma+ur8CIj/KmQKX5fe2wjMgHM=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769 Validity Not Before: Apr 3 07:35:23 2025 GMT Not After : Apr 10 07:35:23 2025 GMT Subject: CN=67ee3a3c-a48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:a2:55:e0:25:ac:8b:80:3f:a3:2a:10:d1: 02:e8:0f:12:ff:ed:84:df:e9:e6:72:1f:e2:e2:fb: 51:6c:76:16:36:bd:a3:45:13:02:80:b8:d5:b3:0e: bb:34:64:e6:50:d7:3c:45:9e:12:07:cb:48:84:92: dc:ce:5f:7f:5b:7e:27:07:a0:c8:c8:ce:e8:d0:f1: 3b:af:0a:7b:8c:dc:5d:45:0d:18:93:fd:4c:49:84: 4a:6a:c9:f2:db:c8:fb:06:55:dd:6c:97:a9:00:28: 03:03:14:4d:23:65:8e:92:bb:f0:ce:5e:7e:f0:c0: 7a:a9:b8:2b:f4:8a:ba:65:bf:cf:ce:a3:6f:8c:63: 88:fd:4f:e6:f2:4d:3f:4e:e4:8c:08:81:94:b2:0e: b3:34:83:de:4a:4d:2b:db:f8:a4:ba:81:e4:f4:33: 77:eb:06:32:9d:49:d9:7c:1e:b2:85:74:8e:3d:ce: c5:20:7d:9e:8f:a6:5e:a7:3c:e8:46:f5:ee:6b:30: a3:8f:8b:09:16:b0:fb:80:ca:45:31:fe:1e:b3:d8: d4:ee:1e:1a:ca:36:b9:f5:ad:c8:3f:f1:06:dd:ab: be:e9:fd:96:b9:e6:92:46:2c:e3:67:22:5a:ab:97: b5:46:df:e3:a3:fb:ab:c1:0e:76:bb:fc:e1:56:4c: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:4C:EA:59:98:16:DF:76:99:D7:10:5B:68:D2:8D:F3:EC:D5:9B X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:6d:8d:15:9d:69:1a:a4:51:3a:bd:a9:08:2f:e3:81:28: a9:26:97:a3:70:32:a8:9a:e6:54:77:fc:ef:a1:d4:b8:0f:86: fb:5e:41:d7:44:72:e2:d8:5d:5d:6f:eb:11:42:cc:e8:41:a1: d6:2a:59:62:14:38:4a:a0:f8:d9:3f:5f:0a:15:11:33:24:21: bd:c4:0b:f3:36:13:b5:a3:a9:3a:c8:89:8f:52:96:43:68:2a: 8f:e7:0f:31:d0:e5:1d:e2:7e:dd:b5:50:fa:52:a9:62:05:28: a8:62:9e:72:07:a8:45:a7:63:21:e1:ed:2f:97:05:0f:95:73: 9c:c1:22:11:d2:a5:ed:73:7c:3e:5f:dc:f9:b5:b8:21:7d:30: a8:07:c6:ee:ac:1c:9f:d0:71:b2:dd:1b:d1:87:ae:37:40:fa: 1c:5a:24:90:82:4c:cb:c3:26:36:cb:23:6a:5c:e7:26:21:9a: 9d:3d:e1:31:5d:cd:c7:cb:77:be:30:fb:bc:be:08:b7:72:59: 6f:32:76:49:f4:a4:34:e1:ad:45:10:06:34:6a:49:6a:76:13: dc:95:c8:8e:d8:2b:4e:7b:eb:c7:05:86:57:58:f5:21:76:e5: ea:c2:25:58:ad:51:06:16:fd:1f:93:e0:67:66:68:54:6b:dd: 20:c4:b3:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA0MDMwNzM1MjNaFw0yNTA0MTAwNzM1MjNaMBgxFjAUBgNV BAMTDTY3ZWUzYTNjLWE0OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/6JV4CWsi4A/oyoQ0QLoDxL/7YTf6eZyH+Li+1FsdhY2vaNFEwKAuNWzDrs0 ZOZQ1zxFnhIHy0iEktzOX39bficHoMjIzujQ8TuvCnuM3F1FDRiT/UxJhEpqyfLb yPsGVd1sl6kAKAMDFE0jZY6Su/DOXn7wwHqpuCv0irplv8/Oo2+MY4j9T+byTT9O 5IwIgZSyDrM0g95KTSvb+KS6geT0M3frBjKdSdl8HrKFdI49zsUgfZ6Ppl6nPOhG 9e5rMKOPiwkWsPuAykUx/h6z2NTuHhrKNrn1rcg/8Qbdq77p/Za55pJGLONnIlqr l7VG3+Oj+6vBDna7/OFWTFtzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXkFM6lmY Ft92mdcQW2jSjfPs1ZswHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+dbY0VnWkapFE6vakIL+OBKKkml6NwMqia5lR3/O+h1LgPhvteQddE cuLYXV1v6xFCzOhBodYqWWIUOEqg+Nk/XwoVETMkIb3EC/M2E7WjqTrIiY9SlkNo Ko/nDzHQ5R3ift21UPpSqWIFKKhinnIHqEWnYyHh7S+XBQ+Vc5zBIhHSpe1zfD5f 3Pm1uCF9MKgHxu6sHJ/QcbLdG9GHrjdA+hxaJJCCTMvDJjbLI2pc5yYhmp094TFd zcfLd74w+7y+CLdyWW8ydkn0pDThrUUQBjRqSWp2E9yVyI7YK05768cFhldY9SF2 5erCJVitUQYW/R+T4GdmaFRr3SDEs/I= -----END CERTIFICATE-----Generated at Sat Apr 5 08:58:34 2025 by rpki-client