$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: MlYaZnVANDQCXJZhq8y7BGUbAUTMH8yy2041ZDrmBiM= Subject key identifier: D4:B5:F8:9D:32:50:08:EE:76:5B:F8:3C:B6:EE:3B:E3:CB:B9:9A:2C Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0A6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 133C Signing time: Fri 30 May 2025 19:50:09 +0000 Manifest this update: Fri 30 May 2025 19:50:09 +0000 Manifest next update: Fri 06 Jun 2025 19:50:09 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: wyf9fgwIKO6KF2gmGZgCTshc4f2fi5ldC1L3cuiZHmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2666 (0xa6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: May 30 19:50:09 2025 GMT Not After : Jun 6 19:50:09 2025 GMT Subject: CN=683a0bf1-1bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:3d:a2:5c:e2:cc:7c:72:fe:15:6c:58:ef: bd:92:a4:d4:e1:35:f1:fd:9e:df:08:ab:2c:7b:92: 63:e4:cc:cf:20:7f:62:1d:19:2f:b2:78:9b:9e:00: 74:20:c2:30:90:03:17:55:77:a1:d6:a6:c6:e9:31: 8c:a6:cd:a6:3c:af:74:d5:03:f4:f8:4e:30:10:ac: 51:5a:96:a9:b1:1a:e5:2b:44:9a:32:32:17:03:c5: d1:81:df:b2:b1:7e:20:a5:ff:e2:01:c0:ff:29:80: 03:01:41:0c:be:e7:35:27:a1:49:64:a3:3e:ba:7f: bc:63:dd:17:19:6a:00:03:a6:1f:d3:bf:e1:98:20: 11:60:82:89:aa:f2:a2:aa:ef:ae:43:5e:bc:a4:af: fc:71:eb:b6:50:ce:9c:76:aa:b2:bc:91:43:58:bb: 3f:8a:bb:b7:d4:cf:4f:2e:d5:08:47:4d:31:f2:64: 8e:14:7f:df:bf:c0:2b:06:bd:6e:05:f5:a5:df:4f: aa:b0:bd:f4:c2:82:dd:de:9d:76:09:b7:63:c6:c8: b6:37:c3:95:44:92:61:ec:f5:c1:9c:8e:ae:f0:9a: 6a:a3:68:02:33:5d:c2:40:fe:3a:df:e1:c9:e4:0c: f2:82:b8:37:95:e5:d5:55:f1:8b:e9:66:04:9d:30: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B5:F8:9D:32:50:08:EE:76:5B:F8:3C:B6:EE:3B:E3:CB:B9:9A:2C X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9a:12:89:9d:11:8d:65:0b:fb:7d:6c:9f:e7:84:cd:78:20: 41:40:9d:7c:7a:b8:b9:5b:0e:63:d8:9d:f3:29:9c:d9:81:7f: 45:c3:ae:8d:01:af:69:da:07:d9:cd:3f:0b:94:23:cf:55:47: 42:0d:42:ef:d9:73:68:45:8b:78:8a:c2:d7:6d:51:5d:93:06: 2e:6b:25:d4:ce:97:2c:4d:68:7a:98:09:b6:15:f3:9d:6c:bc: 82:19:f0:c4:40:15:65:6f:96:d0:00:31:4e:a1:88:bc:56:fe: b0:83:d3:51:35:ea:75:8f:05:62:a0:1f:f5:a3:fc:f4:91:fa: 13:b6:1a:cd:bd:d3:24:7a:7a:c6:d2:5b:9e:28:ad:be:21:0e: 5e:e7:97:3c:2d:52:57:d5:7a:6d:04:92:7c:88:e2:66:13:02: a3:d8:4e:b7:ab:cd:78:c2:74:26:1c:79:d7:f3:d4:ec:f1:33: cd:10:f9:f9:1d:11:fc:d8:92:d4:6b:a5:52:11:e4:42:a0:98: 94:c6:37:e6:f6:6c:b0:a0:20:3f:dc:71:43:59:2d:bc:6a:12: 0f:01:62:a7:ed:2c:9c:69:07:e6:2a:34:29:3c:b0:d7:76:3f: 2a:dc:e0:c9:8c:6a:89:d2:98:e6:ca:b7:5b:ea:e7:74:0a:74: bf:80:6b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUwNTMwMTk1MDA5WhcNMjUwNjA2MTk1MDA5WjAYMRYwFAYD VQQDEw02ODNhMGJmMS0xYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeM9olzizHxy/hVsWO+9kqTU4TXx/Z7fCKsse5Jj5MzPIH9iHRkvsnibngB0 IMIwkAMXVXeh1qbG6TGMps2mPK901QP0+E4wEKxRWpapsRrlK0SaMjIXA8XRgd+y sX4gpf/iAcD/KYADAUEMvuc1J6FJZKM+un+8Y90XGWoAA6Yf07/hmCARYIKJqvKi qu+uQ168pK/8ceu2UM6cdqqyvJFDWLs/iru31M9PLtUIR00x8mSOFH/fv8ArBr1u BfWl30+qsL30woLd3p12Cbdjxsi2N8OVRJJh7PXBnI6u8Jpqo2gCM13CQP463+HJ 5Azygrg3leXVVfGL6WYEnTCLyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS1+J0y UAjudlv4PLbuO+PLuZosMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsmhKJnRGNZQv7fWyf54TNeCBBQJ18eri5Ww5j2J3zKZzZgX9Fw66N Aa9p2gfZzT8LlCPPVUdCDULv2XNoRYt4isLXbVFdkwYuayXUzpcsTWh6mAm2FfOd bLyCGfDEQBVlb5bQADFOoYi8Vv6wg9NRNep1jwVioB/1o/z0kfoTthrNvdMkenrG 0lueKK2+IQ5e55c8LVJX1XptBJJ8iOJmEwKj2E63q814wnQmHHnX89Ts8TPNEPn5 HRH82JLUa6VSEeRCoJiUxjfm9mywoCA/3HFDWS28ahIPAWKn7SycaQfmKjQpPLDX dj8q3ODJjGqJ0pjmyrdb6ud0CnS/gGvC -----END CERTIFICATE-----Generated at Sat May 31 16:42:02 2025 by rpki-client