$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: HDONl1Zo1NbsC5bfV+BYt2inGvJ7HTWNpm1RPRGd2yE= Subject key identifier: 6C:01:A1:62:DF:F4:76:7B:EB:60:AA:F3:11:47:9D:E6:34:6B:BD:F1 Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 09ED Signing time: Fri 30 May 2025 20:04:26 +0000 Manifest this update: Fri 30 May 2025 20:04:26 +0000 Manifest next update: Fri 06 Jun 2025 20:04:26 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: Tqbg7rDnm8mFJe3cdowGUatpg7q/i53312cwtyZSGYs=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749, serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: May 30 20:04:26 2025 GMT Not After : Jun 6 20:04:26 2025 GMT Subject: CN=683a0f4a-de0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:8b:fb:ea:71:3b:ff:04:99:d1:6a:1a:47: 9d:8a:a7:9e:c3:96:1a:3e:30:c5:ff:b1:f4:f7:60: fa:12:67:25:92:9e:2f:b1:dc:5f:07:f6:48:af:19: b6:4e:62:3b:c9:1c:87:45:c9:8c:32:32:34:44:7d: a4:02:1f:77:ad:90:54:0e:04:fd:ea:7d:56:2e:46: 66:d1:02:1a:10:c9:d4:ce:2e:39:db:3f:a4:97:5d: 5c:c6:34:51:81:59:6a:7f:ed:b4:31:a0:ff:a4:94: ce:d4:56:dd:b6:06:b6:40:78:3b:8f:17:f1:4e:89: 04:98:a5:96:14:71:3e:c1:b9:2b:c8:a2:0a:25:e5: c4:68:af:a0:2b:e8:7a:71:69:77:68:80:3a:63:3b: f0:a7:ab:20:e8:55:47:4a:a2:39:a7:2c:c2:ba:c6: 57:ed:75:7f:a8:d0:5d:f6:42:3b:4c:1d:0d:de:45: bc:2b:55:ed:58:19:e2:99:1c:d7:20:77:56:1a:97: 32:64:60:52:9d:25:8e:8a:5a:06:4a:0c:95:77:3b: 54:c4:e6:9b:dc:4c:f1:a6:b0:94:b3:81:ef:97:da: ad:63:cd:74:bc:82:3a:30:65:0e:76:93:c4:0f:99: ec:d9:26:b5:a9:53:d0:c0:88:1b:42:82:07:ae:e5: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:A1:62:DF:F4:76:7B:EB:60:AA:F3:11:47:9D:E6:34:6B:BD:F1 X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:90:f2:f9:80:26:a8:3a:35:76:18:e4:08:49:0e:7c:4e:13: 77:d5:2a:9c:f0:b3:3c:56:f5:00:be:67:a8:64:37:35:70:03: fd:45:7c:38:e1:31:81:78:cf:c7:6b:11:b6:a6:a0:8e:5b:aa: d9:e2:dd:af:48:30:67:e8:0f:1f:65:1d:b0:c8:97:70:1d:51: 5a:48:f6:be:a3:b0:33:91:39:d9:d9:46:6f:c8:f6:7f:55:9e: 07:0f:b6:31:f8:83:f8:2d:82:e0:80:a0:4c:e8:be:4e:49:57: dc:19:c2:73:dc:ab:21:b6:13:c0:aa:7f:c4:fb:a5:e4:9e:19: ae:91:7b:81:9a:32:0d:55:c2:cb:14:3e:f0:a0:e2:88:92:d1: d1:be:d7:cf:72:90:8a:a0:85:10:db:e5:b2:76:45:db:14:16: 50:c1:8a:05:06:4f:ee:a1:c9:8f:50:2c:e2:e1:3e:08:22:2f: 0c:ed:1c:58:e5:77:d6:29:8a:ba:20:63:88:4c:13:90:78:ad: 53:29:6e:98:24:8f:9b:60:bb:23:38:79:e6:72:22:9a:12:46: 85:ea:12:a3:e0:15:3f:be:cb:c0:3f:12:58:c5:65:dc:ae:2d: f3:d9:03:45:3f:84:b6:ef:ce:e3:4f:66:dd:77:9c:43:bf:fa: a6:c8:92:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjUwNTMwMjAwNDI2WhcNMjUwNjA2MjAwNDI2WjAYMRYwFAYD VQQDEw02ODNhMGY0YS1kZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyeL++pxO/8EmdFqGkediqeew5YaPjDF/7H092D6Emclkp4vsdxfB/ZIrxm2 TmI7yRyHRcmMMjI0RH2kAh93rZBUDgT96n1WLkZm0QIaEMnUzi452z+kl11cxjRR gVlqf+20MaD/pJTO1Fbdtga2QHg7jxfxTokEmKWWFHE+wbkryKIKJeXEaK+gK+h6 cWl3aIA6Yzvwp6sg6FVHSqI5pyzCusZX7XV/qNBd9kI7TB0N3kW8K1XtWBnimRzX IHdWGpcyZGBSnSWOiloGSgyVdztUxOab3EzxprCUs4Hvl9qtY810vII6MGUOdpPE D5ns2Sa1qVPQwIgbQoIHruUzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwBoWLf 9HZ762Cq8xFHneY0a73xMB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnkPL5gCaoOjV2GOQISQ58ThN31Sqc8LM8VvUAvmeoZDc1cAP9RXw4 4TGBeM/HaxG2pqCOW6rZ4t2vSDBn6A8fZR2wyJdwHVFaSPa+o7AzkTnZ2UZvyPZ/ VZ4HD7Yx+IP4LYLggKBM6L5OSVfcGcJz3KshthPAqn/E+6XknhmukXuBmjINVcLL FD7woOKIktHRvtfPcpCKoIUQ2+WydkXbFBZQwYoFBk/uocmPUCzi4T4IIi8M7RxY 5XfWKYq6IGOITBOQeK1TKW6YJI+bYLsjOHnmciKaEkaF6hKj4BU/vsvAPxJYxWXc ri3z2QNFP4S2787jT2bdd5xDv/qmyJJP -----END CERTIFICATE-----Generated at Sat May 31 17:30:19 2025 by rpki-client