$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: bHeGzVPcJVp1N/7uvpGY5L1PEpU++m0fiGpT3pA/5pw= Subject key identifier: A2:47:F8:38:98:36:0B:C6:BC:D2:E5:AC:CF:FC:2A:2E:DC:44:E9:87 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 1478 Signing time: Fri 30 May 2025 18:44:54 +0000 Manifest this update: Fri 30 May 2025 18:44:53 +0000 Manifest next update: Fri 06 Jun 2025 18:44:53 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: tW7E6+ha+IxLCFGZcdbZM+O/yNN/lol4TgzUOEVDaL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: May 30 18:44:53 2025 GMT Not After : Jun 6 18:44:53 2025 GMT Subject: CN=6839fca6-68f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:9a:bf:c2:d5:83:d4:9b:3c:ec:10:51:db: 2d:4f:ad:d0:94:40:e4:42:92:42:46:91:76:1e:ef: 17:bd:b9:fd:26:ef:f9:ac:42:af:f4:31:9d:b3:e9: 51:9e:24:7b:fd:96:9f:dd:15:ff:78:a3:a8:a3:b3: a9:dc:dc:46:59:82:00:76:e1:1d:1a:13:a6:aa:ba: 1a:23:10:11:05:ee:eb:e5:b5:94:32:e5:80:00:70: 52:06:ee:72:e6:5b:67:b0:4c:ba:0f:70:8e:c8:cf: 1f:a5:f7:77:87:3b:6b:0a:8f:8b:a3:59:7f:bd:01: a0:6c:61:30:f0:7c:58:47:b9:0d:7b:8e:f6:b2:8f: e3:f9:e7:cc:5d:96:e2:6c:07:7e:4e:ce:33:2c:34: 6e:16:c7:b2:92:46:a6:f0:ea:17:81:6f:f6:06:43: 25:8d:ec:41:39:7d:b8:46:1a:39:17:9a:db:bb:8f: 8a:95:12:d7:90:e2:3b:fe:98:82:87:18:cf:ad:b7: 93:71:12:7e:64:8d:5f:a2:43:b6:24:f5:3f:2a:13: c1:83:3d:d9:e9:32:bb:7a:dd:12:6f:77:46:9e:d7: 80:bb:8a:a5:e7:3e:a4:39:5b:84:2c:9f:64:1d:f0: 53:cf:f4:85:23:19:54:83:01:56:46:4d:ee:df:d8: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:47:F8:38:98:36:0B:C6:BC:D2:E5:AC:CF:FC:2A:2E:DC:44:E9:87 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:97:68:3f:11:f0:80:8c:4b:23:6d:a6:8c:31:09:98:6f:5a: 98:cb:f7:01:0b:78:80:df:d3:f3:6c:df:84:48:60:58:5a:c1: 2b:53:08:e8:93:03:62:6b:9d:82:14:23:18:76:1c:62:9e:5d: 29:e7:12:cb:5b:5e:1f:67:d9:e1:2f:01:64:c5:c2:6a:48:72: d5:ff:81:49:15:f2:34:ec:12:b1:6f:e0:ac:d3:66:83:5c:d3: a3:d3:a2:bd:69:1d:d5:67:d8:a9:00:ad:3d:38:99:9e:43:e4: b4:70:57:8e:54:a1:c4:38:48:47:38:d5:5d:d3:4f:74:fc:06: 98:f5:d0:26:73:43:36:9a:60:af:3f:00:99:a1:09:13:47:ae: 10:88:c6:16:dd:68:64:af:f5:9e:36:f0:6f:9f:5a:44:97:a7: 00:09:7d:4e:bb:5b:87:78:0f:b4:49:07:1a:c0:3a:ff:5a:78: 0b:a1:e5:92:3e:b7:a4:a3:db:74:84:c5:21:6a:58:74:f4:a6: bb:f5:15:a9:8a:f6:28:bc:6a:37:8e:d8:2b:40:cc:de:32:ec: 2c:1a:86:9d:5a:6c:2b:5a:a7:c9:dd:2d:28:cd:9c:7c:d2:c7: e0:4a:10:32:8c:46:0c:ed:cf:22:d2:0d:fa:f9:ef:51:b3:11: e3:61:78:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwNTMwMTg0NDUzWhcNMjUwNjA2MTg0NDUzWjAYMRYwFAYD VQQDEw02ODM5ZmNhNi02OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAuav8LVg9SbPOwQUdstT63QlEDkQpJCRpF2Hu8Xvbn9Ju/5rEKv9DGds+lR niR7/Zaf3RX/eKOoo7Op3NxGWYIAduEdGhOmqroaIxARBe7r5bWUMuWAAHBSBu5y 5ltnsEy6D3COyM8fpfd3hztrCo+Lo1l/vQGgbGEw8HxYR7kNe472so/j+efMXZbi bAd+Ts4zLDRuFseykkam8OoXgW/2BkMljexBOX24Rho5F5rbu4+KlRLXkOI7/piC hxjPrbeTcRJ+ZI1fokO2JPU/KhPBgz3Z6TK7et0Sb3dGnteAu4ql5z6kOVuELJ9k HfBTz/SFIxlUgwFWRk3u39h9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJH+DiY NgvGvNLlrM/8Ki7cROmHMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhl2g/EfCAjEsjbaaMMQmYb1qYy/cBC3iA39PzbN+ESGBYWsErUwjo kwNia52CFCMYdhxinl0p5xLLW14fZ9nhLwFkxcJqSHLV/4FJFfI07BKxb+Cs02aD XNOj06K9aR3VZ9ipAK09OJmeQ+S0cFeOVKHEOEhHONVd0090/AaY9dAmc0M2mmCv PwCZoQkTR64QiMYW3Whkr/WeNvBvn1pEl6cACX1Ou1uHeA+0SQcawDr/WngLoeWS Preko9t0hMUhalh09Ka79RWpivYovGo3jtgrQMzeMuwsGoadWmwrWqfJ3S0ozZx8 0sfgShAyjEYM7c8i0g36+e9RsxHjYXir -----END CERTIFICATE-----Generated at Sat May 31 17:42:45 2025 by rpki-client