$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: vpFlsP5sTRus1CxBSf6y8ehxFEzRKMGIYqItvhlPlCY= Subject key identifier: EB:0F:13:A3:51:CC:BB:D2:FF:08:38:E0:5F:4B:2F:02:2D:7A:18:26 Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 09EB Signing time: Wed 16 Apr 2025 19:42:36 +0000 Manifest this update: Wed 16 Apr 2025 19:42:35 +0000 Manifest next update: Wed 23 Apr 2025 19:42:35 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: E49AzSPzdYMpCvH4cGdaBe9cXVavD8tgR6UKCXmR7kU=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Apr 16 19:42:35 2025 GMT Not After : Apr 23 19:42:35 2025 GMT Subject: CN=6800082b-c159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:00:a4:c0:f1:ad:db:c7:e1:d7:4e:2d:7e: e7:36:a6:f8:05:c2:c0:25:2a:ad:e3:fb:87:a7:7c: 88:cb:69:d0:1a:d7:cb:81:65:0f:48:34:76:30:15: db:22:51:45:32:f5:15:aa:00:e2:6e:a8:38:02:83: 77:0d:fa:d1:d0:37:ff:65:91:2d:1f:42:d8:b0:6e: f0:0e:00:e0:40:f9:46:19:33:d9:65:c1:15:79:c6: f9:03:bb:0e:2d:d0:29:76:cc:70:9e:51:55:f0:10: 56:73:a2:09:9b:a6:78:d9:cc:f7:0c:0f:ae:10:9c: f1:ee:01:e9:73:f2:59:de:4c:36:46:2d:21:37:a7: db:c1:72:7b:61:10:21:ef:64:93:2c:96:54:23:f6: 49:2f:7f:6b:55:72:91:70:84:e2:14:e7:78:53:df: 6c:33:fb:22:fa:41:f2:1b:5f:ce:a4:3d:95:92:7d: ab:94:6c:97:21:05:85:45:c6:73:6d:e8:bb:4c:72: 51:03:a1:a5:99:ce:32:a8:1b:f8:03:37:a0:d9:ed: 98:28:97:bd:56:9b:f7:d8:62:74:90:78:00:da:0c: e3:bb:2f:c2:a4:72:75:66:88:b4:86:7d:0c:27:77: 3a:e0:d8:69:be:61:d6:04:5c:5c:c4:c9:36:e9:53: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:13:A3:51:CC:BB:D2:FF:08:38:E0:5F:4B:2F:02:2D:7A:18:26 X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:ca:fb:21:83:d1:91:21:24:dd:3a:a8:9e:70:b2:83:91: 8b:8f:d5:4a:39:c5:c7:e9:8e:ea:9c:14:62:a6:65:22:ae:ab: 9d:b4:64:0c:0d:ed:18:5d:5c:55:17:1c:59:c1:69:0f:84:d4: 49:e2:99:4a:47:0f:4c:cb:16:40:20:84:d1:0d:1e:6a:1f:35: 14:52:60:a9:04:eb:84:4f:a7:ff:37:52:be:51:56:74:5e:06: 41:b6:d5:93:7d:54:ab:42:7a:cb:47:13:c0:68:04:04:98:37: a6:74:db:24:e6:49:fa:74:59:97:05:e5:0e:d3:68:4a:90:94: a1:ca:31:b8:19:39:b7:f5:8d:6c:8a:f1:37:80:c3:f1:eb:38: a4:7e:45:1a:15:b4:44:4d:17:ef:ef:f8:07:0a:a7:44:4b:0d: 19:7e:46:df:e0:48:21:7d:31:9f:68:a0:ce:1a:f0:1a:b6:97: 58:48:0f:8d:47:5c:44:ba:74:8d:a6:bc:f5:95:e5:e1:45:be: 25:64:be:5b:5f:75:d8:dd:a7:80:14:34:dc:51:dd:1b:98:bf: b4:b5:90:3f:92:30:83:2a:07:67:61:16:c6:92:c0:21:c8:5c: 8e:1b:ec:5d:34:af:ce:27:63:7c:a6:10:0d:61:4b:ee:7e:07: a0:79:0f:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNDE2MTk0MjM1WhcNMjUwNDIzMTk0MjM1WjAYMRYwFAYD VQQDEw02ODAwMDgyYi1jMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxMApMDxrdvH4ddOLX7nNqb4BcLAJSqt4/uHp3yIy2nQGtfLgWUPSDR2MBXb IlFFMvUVqgDibqg4AoN3DfrR0Df/ZZEtH0LYsG7wDgDgQPlGGTPZZcEVecb5A7sO LdApdsxwnlFV8BBWc6IJm6Z42cz3DA+uEJzx7gHpc/JZ3kw2Ri0hN6fbwXJ7YRAh 72STLJZUI/ZJL39rVXKRcITiFOd4U99sM/si+kHyG1/OpD2Vkn2rlGyXIQWFRcZz bei7THJRA6Glmc4yqBv4Azeg2e2YKJe9Vpv32GJ0kHgA2gzjuy/CpHJ1Zoi0hn0M J3c64NhpvmHWBFxcxMk26VNjIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsPE6NR zLvS/wg44F9LLwItehgmMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaMr7IYPRkSEk3TqonnCyg5GLj9VKOcXH6Y7qnBRipmUirqudtGQM De0YXVxVFxxZwWkPhNRJ4plKRw9MyxZAIITRDR5qHzUUUmCpBOuET6f/N1K+UVZ0 XgZBttWTfVSrQnrLRxPAaAQEmDemdNsk5kn6dFmXBeUO02hKkJShyjG4GTm39Y1s ivE3gMPx6zikfkUaFbRETRfv7/gHCqdESw0Zfkbf4EghfTGfaKDOGvAatpdYSA+N R1xEunSNprz1leXhRb4lZL5bX3XY3aeAFDTcUd0bmL+0tZA/kjCDKgdnYRbGksAh yFyOG+xdNK/OJ2N8phANYUvufgegeQ+S -----END CERTIFICATE-----Generated at Thu Apr 17 18:11:51 2025 by rpki-client