$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: j4pPJ6cP6fsgl0ae7eMIYr71+YW8jpdcRie532baB3E= Subject key identifier: 87:A9:71:0E:48:96:72:FA:BA:AC:57:6F:E7:77:86:43:5A:4D:B3:80 Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 04B4 Signing time: Sat 31 May 2025 00:06:07 +0000 Manifest this update: Sat 31 May 2025 00:06:06 +0000 Manifest next update: Sat 07 Jun 2025 00:06:06 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: 5AoOC4dBVwD7BJCZbesI4hyS0qXuv4FcvfHNtzUzbWM=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: May 31 00:06:06 2025 GMT Not After : Jun 7 00:06:06 2025 GMT Subject: CN=683a47ef-d259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:ff:0c:4c:41:36:e6:05:ec:e9:74:6b:49: dc:af:d7:7e:7c:ce:0b:2e:c7:9b:da:76:bd:4f:2b: 3e:df:a3:48:ba:44:61:1c:89:bb:07:81:9e:8d:f3: 5c:03:ce:06:39:0e:17:51:49:05:34:1d:3d:b7:5f: 0b:29:19:e2:02:01:09:70:b9:62:a9:4a:64:57:15: ab:8e:e1:63:8b:46:36:82:26:d2:f6:06:89:52:a4: 62:b5:9e:5c:42:52:a8:7f:47:e8:1e:9b:11:58:20: 8d:1b:be:53:27:6e:15:ea:90:a7:4a:bb:3b:8e:52: 36:87:d4:00:81:47:f7:63:50:9b:d3:d7:5c:9f:0f: 7b:3e:c4:98:2f:79:11:64:4d:8e:71:64:9a:59:88: 4e:e7:d7:8e:95:d1:24:cb:9f:f9:ac:8d:ef:52:10: 3f:db:40:d5:dd:bf:3c:82:44:7c:91:ed:a0:0a:68: 40:4c:e4:82:33:aa:6e:82:58:f4:a7:2c:1d:7c:d8: 93:de:d2:af:e4:f9:35:b4:7d:21:b7:d3:a6:5e:39: 66:38:fe:d9:e1:bd:78:74:04:bb:74:b2:4b:ba:2e: 74:96:69:eb:cf:0b:bf:b6:e1:89:a7:d6:77:93:54: 81:e7:ab:70:d7:6e:16:8e:a3:2a:b6:9b:d6:f9:c9: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:71:0E:48:96:72:FA:BA:AC:57:6F:E7:77:86:43:5A:4D:B3:80 X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d7:04:29:f0:ff:01:ec:ee:83:b9:a1:14:40:c9:7e:27:72: bd:ea:8b:e1:7e:32:a4:d5:c3:7d:6d:e8:e7:07:07:f7:53:d5: 04:d1:be:5a:a2:72:90:7d:fe:1b:6f:1f:17:24:07:f3:da:9d: 7e:62:f3:f0:1a:96:52:2a:a9:a7:96:f3:d0:6d:a3:ff:81:19: ad:63:a2:4c:62:81:7a:49:11:54:0e:a5:76:9b:60:0b:1e:cf: 4e:26:af:20:b7:13:81:b9:77:41:ee:8a:4c:9f:91:ff:a5:83: f5:b8:8e:51:7a:3c:ff:57:7d:58:ae:5f:24:53:c9:7a:b1:a0: 5d:ce:62:5e:df:e1:d4:e2:c0:fb:13:d1:59:ca:c9:2b:33:56: 36:b4:7e:43:b8:e2:3c:1a:b0:1e:f2:e0:56:b5:4d:b1:d1:78: f6:ac:32:a8:5a:7a:1e:3f:0b:69:3a:7b:a2:62:b4:89:39:e5: 7b:9d:da:1e:1c:d7:f6:c6:f1:17:1e:c3:f6:ed:e7:11:02:98: 12:a5:7e:22:c2:f3:61:7a:21:94:bd:1a:c9:78:19:14:2f:37: 6e:56:9d:98:5e:68:e6:89:dd:d2:d6:19:e9:3e:39:e0:81:f4: c7:bc:25:9b:ff:c9:d9:cd:72:58:bf:3a:1a:4c:c3:a1:41:e8: bf:23:ea:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUwNTMxMDAwNjA2WhcNMjUwNjA3MDAwNjA2WjAYMRYwFAYD VQQDEw02ODNhNDdlZi1kMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RH/DExBNuYF7Ol0a0ncr9d+fM4LLseb2na9Tys+36NIukRhHIm7B4GejfNc A84GOQ4XUUkFNB09t18LKRniAgEJcLliqUpkVxWrjuFji0Y2gibS9gaJUqRitZ5c QlKof0foHpsRWCCNG75TJ24V6pCnSrs7jlI2h9QAgUf3Y1Cb09dcnw97PsSYL3kR ZE2OcWSaWYhO59eOldEky5/5rI3vUhA/20DV3b88gkR8ke2gCmhATOSCM6puglj0 pywdfNiT3tKv5Pk1tH0ht9OmXjlmOP7Z4b14dAS7dLJLui50lmnrzwu/tuGJp9Z3 k1SB56tw124WjqMqtpvW+cnsawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIepcQ5I lnL6uqxXb+d3hkNaTbOAMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe1wQp8P8B7O6DuaEUQMl+J3K96ovhfjKk1cN9bejnBwf3U9UE0b5a onKQff4bbx8XJAfz2p1+YvPwGpZSKqmnlvPQbaP/gRmtY6JMYoF6SRFUDqV2m2AL Hs9OJq8gtxOBuXdB7opMn5H/pYP1uI5Rejz/V31Yrl8kU8l6saBdzmJe3+HU4sD7 E9FZyskrM1Y2tH5DuOI8GrAe8uBWtU2x0Xj2rDKoWnoePwtpOnuiYrSJOeV7ndoe HNf2xvEXHsP27ecRApgSpX4iwvNheiGUvRrJeBkULzduVp2YXmjmid3S1hnpPjng gfTHvCWb/8nZzXJYvzoaTMOhQei/I+rL -----END CERTIFICATE-----Generated at Sat May 31 17:08:57 2025 by rpki-client