$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: zus/ubnoC8u58wU6PTQJssl22n6nUWFBliJyXbfMmnc= Subject key identifier: BB:3F:BF:07:46:47:8F:1D:E1:91:80:43:02:0C:FB:E6:32:02:37:AF Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0446 Signing time: Thu 03 Apr 2025 00:14:30 +0000 Manifest this update: Thu 03 Apr 2025 00:14:29 +0000 Manifest next update: Thu 10 Apr 2025 00:14:29 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: 4+ySuG3DPjS7JNojk1Sa56FHzSR3Ca6RWVBk603s1sA=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089 Validity Not Before: Apr 3 00:14:29 2025 GMT Not After : Apr 10 00:14:29 2025 GMT Subject: CN=67edd2e5-c688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:32:66:3c:be:93:49:72:5e:2f:9c:4d:5f: 87:c1:d2:99:c0:35:23:a0:35:3c:9a:02:1e:0b:07: bc:46:e2:3e:4a:d8:78:4f:a3:53:99:3a:98:38:45: 64:fd:e0:90:b8:34:d9:54:43:ce:56:78:c4:d9:1a: 44:ec:a2:4d:cb:1b:e9:ec:27:0f:32:a1:ec:05:eb: 0e:e8:61:20:b9:66:12:8a:79:a2:65:0b:40:a1:7d: 7d:88:85:4e:ef:40:e5:15:34:3f:2e:d3:69:86:d7: 37:04:db:19:90:30:bd:6d:9c:79:1a:59:b1:bc:23: 4b:aa:28:41:7b:77:da:77:15:9b:10:88:49:66:12: fb:f6:65:bc:05:78:5f:2b:fc:a4:81:8c:78:84:cb: 8c:71:b2:63:dd:ce:58:2f:af:39:62:6f:1e:6f:ed: 49:af:51:ca:1c:bb:0a:00:fd:c2:25:9f:ed:04:50: 87:5d:f3:c2:2b:0d:33:7b:75:8c:34:b0:d5:30:01: 10:e1:e3:81:cd:fe:b4:26:c1:53:0b:c1:ac:3f:7c: 27:24:6f:e5:09:3e:fd:69:6a:72:e7:42:dd:41:a8: bc:63:b8:ca:d7:f9:b6:ca:09:63:ac:ba:88:c4:a8: ec:1d:00:59:7f:55:da:fb:e0:e7:02:f7:88:01:c3: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3F:BF:07:46:47:8F:1D:E1:91:80:43:02:0C:FB:E6:32:02:37:AF X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:48:1b:5c:5a:7a:ea:f1:2d:76:c0:b6:5b:e2:66:e5:d4:4a: ff:58:8d:0a:59:66:d1:46:71:4c:c0:1b:85:54:26:fa:e1:29: 64:b4:7c:24:65:84:16:66:2e:3b:dc:27:c2:9a:8f:5a:67:12: b4:1d:ff:c7:71:04:07:a0:21:d6:bf:38:f9:98:fb:b2:30:0e: c5:c9:c4:33:46:21:e8:46:88:fc:4a:b1:f4:c1:bb:da:38:f0: 94:2c:c3:63:46:80:6a:9c:2e:c8:de:ec:83:a1:41:e3:45:32: 5d:02:fc:f3:f8:2c:b2:1b:b0:c2:80:ec:56:6d:48:ab:3c:88: 9c:20:63:33:91:95:b5:fa:50:5c:bc:8b:e0:12:16:81:36:8d: f2:7b:6c:6a:02:d3:e2:b5:14:5d:9f:86:ca:73:de:ae:25:94: c7:2c:31:36:2d:ff:70:d4:2d:91:8b:02:bc:38:33:92:27:dd: 07:19:62:9b:6f:1f:55:5d:83:ac:43:f3:81:8a:b1:05:a3:4d: c4:ba:9d:6e:67:d0:f3:c1:4b:6d:1b:57:b5:7a:43:3c:88:2b: f7:e4:b9:54:4d:c6:61:e1:09:39:27:a0:85:5f:fe:fd:82:9e: 82:d9:2a:46:4e:0a:0b:7e:80:a6:9a:1e:df:e7:85:d6:65:cf: ec:da:c3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwNDAzMDAxNDI5WhcNMjUwNDEwMDAxNDI5WjAYMRYwFAYD VQQDEw02N2VkZDJlNS1jNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyMyZjy+k0lyXi+cTV+HwdKZwDUjoDU8mgIeCwe8RuI+Sth4T6NTmTqYOEVk /eCQuDTZVEPOVnjE2RpE7KJNyxvp7CcPMqHsBesO6GEguWYSinmiZQtAoX19iIVO 70DlFTQ/LtNphtc3BNsZkDC9bZx5GlmxvCNLqihBe3fadxWbEIhJZhL79mW8BXhf K/ykgYx4hMuMcbJj3c5YL685Ym8eb+1Jr1HKHLsKAP3CJZ/tBFCHXfPCKw0ze3WM NLDVMAEQ4eOBzf60JsFTC8GsP3wnJG/lCT79aWpy50LdQai8Y7jK1/m2ygljrLqI xKjsHQBZf1Xa++DnAveIAcOg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLs/vwdG R48d4ZGAQwIM++YyAjevMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSBtcWnrq8S12wLZb4mbl1Er/WI0KWWbRRnFMwBuFVCb64SlktHwk ZYQWZi473CfCmo9aZxK0Hf/HcQQHoCHWvzj5mPuyMA7FycQzRiHoRoj8SrH0wbva OPCULMNjRoBqnC7I3uyDoUHjRTJdAvzz+CyyG7DCgOxWbUirPIicIGMzkZW1+lBc vIvgEhaBNo3ye2xqAtPitRRdn4bKc96uJZTHLDE2Lf9w1C2RiwK8ODOSJ90HGWKb bx9VXYOsQ/OBirEFo03Eup1uZ9DzwUttG1e1ekM8iCv35LlUTcZh4Qk5J6CFX/79 gp6C2SpGTgoLfoCmmh7f54XWZc/s2sMd -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:19 2025 by rpki-client