$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: 1JBjlRtpdMZRt9q2NCX2hHg8Amt6Hdo7dllG5yGsC5M= Subject key identifier: 3D:DF:6E:74:4C:20:AF:B0:BE:0B:86:55:A6:EF:CB:F2:86:44:5E:BB Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 01F8 Signing time: Sat 31 May 2025 02:16:51 +0000 Manifest this update: Sat 31 May 2025 02:16:50 +0000 Manifest next update: Sat 07 Jun 2025 02:16:50 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: eImtT2IXmkcgZu4waNPt0ozM4ExAipdP1XGHIHj+MWc=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: May 31 02:16:50 2025 GMT Not After : Jun 7 02:16:50 2025 GMT Subject: CN=683a6693-333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:de:bd:8a:de:97:c8:e1:05:b7:38:83:e3: 7d:2b:c8:22:a4:fb:7e:44:07:1f:ed:76:38:21:69: f2:64:b4:b1:8e:5b:11:e8:ea:37:d4:19:c2:ad:73: 4c:cc:d8:5a:1e:49:87:00:14:36:dc:69:f8:f4:88: 61:73:76:75:5b:d6:a4:1d:ac:7c:ce:a2:04:1b:4a: b4:9a:30:0d:31:d6:15:29:36:b2:17:a6:eb:7e:73: 05:c7:03:1a:87:3f:b4:3f:96:b9:6f:95:52:d7:87: 7c:91:ec:fe:ec:ca:16:ed:1f:d1:a4:ba:22:36:3c: d6:24:c4:dd:a4:7a:c6:ea:9e:7f:bc:d7:10:5c:7d: c8:91:bd:5e:5c:46:38:6a:4a:16:31:70:44:c0:85: b1:9d:5c:c0:b3:be:d9:e8:dc:75:88:ae:cd:2c:56: 75:5e:c2:34:64:e4:a8:67:bd:b9:0e:77:66:bf:1c: f4:0e:47:e1:39:83:89:21:b4:d5:df:db:6a:6e:e8: 58:d3:a0:00:e1:ca:ac:ae:8c:47:54:35:71:e2:49: f3:d3:9a:81:c4:45:37:12:b0:9c:db:f8:8d:79:9b: 95:c6:27:39:c7:60:2c:7f:05:26:7d:0c:69:45:41: cd:90:cb:48:1f:87:43:aa:12:42:74:9c:c4:09:27: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:6E:74:4C:20:AF:B0:BE:0B:86:55:A6:EF:CB:F2:86:44:5E:BB X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:38:3d:da:ae:3e:dc:75:07:99:a2:b4:10:f5:61:51:34:b6: eb:2e:7b:ca:23:20:13:79:0b:4c:b6:91:4e:65:87:88:0b:db: f7:13:62:b0:93:5a:1d:ad:be:c3:59:8f:63:f8:7c:98:27:00: 16:ed:e8:ab:93:f6:5d:6c:7b:14:39:94:69:a0:68:3f:80:1c: c3:10:80:dd:8c:04:72:38:11:92:6b:c7:f8:f3:e0:57:aa:28: df:44:a3:9a:ce:15:16:26:bb:0f:a7:62:75:a5:91:7a:9a:04: 7d:8a:7e:10:e9:7b:3f:80:30:75:ed:a1:94:54:ff:32:aa:ff: 78:a1:44:fc:2c:c7:5e:66:19:78:a9:f0:bb:2c:58:64:15:2e: 39:8d:f4:ca:a7:f8:fb:3b:a0:b4:6a:1a:00:26:9e:73:41:3d: 35:97:31:b7:ad:8f:de:8c:3d:dd:9e:4a:a6:fe:ab:a0:fd:6b: 4a:d5:be:d3:49:51:b6:8a:05:6a:8e:af:35:25:ec:5c:40:d4: 58:1b:2c:c8:29:0d:d1:c7:4c:8c:1b:b2:90:06:8e:f6:40:80: e5:ee:4c:8e:de:2b:53:f7:78:a9:cb:35:36:c0:ba:63:eb:18: c7:02:47:ad:92:15:d8:c5:a3:da:c3:10:a4:7c:f5:b7:a0:f6: 5b:c6:7d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUwNTMxMDIxNjUwWhcNMjUwNjA3MDIxNjUwWjAYMRYwFAYD VQQDEw02ODNhNjY5My0zMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIbevYrel8jhBbc4g+N9K8gipPt+RAcf7XY4IWnyZLSxjlsR6Oo31BnCrXNM zNhaHkmHABQ23Gn49Ihhc3Z1W9akHax8zqIEG0q0mjANMdYVKTayF6brfnMFxwMa hz+0P5a5b5VS14d8kez+7MoW7R/RpLoiNjzWJMTdpHrG6p5/vNcQXH3Ikb1eXEY4 akoWMXBEwIWxnVzAs77Z6Nx1iK7NLFZ1XsI0ZOSoZ725Dndmvxz0DkfhOYOJIbTV 39tqbuhY06AA4cqsroxHVDVx4knz05qBxEU3ErCc2/iNeZuVxic5x2AsfwUmfQxp RUHNkMtIH4dDqhJCdJzECSdrTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3fbnRM IK+wvguGVabvy/KGRF67MB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhOD3arj7cdQeZorQQ9WFRNLbrLnvKIyATeQtMtpFOZYeIC9v3E2Kw k1odrb7DWY9j+HyYJwAW7eirk/ZdbHsUOZRpoGg/gBzDEIDdjARyOBGSa8f48+BX qijfRKOazhUWJrsPp2J1pZF6mgR9in4Q6Xs/gDB17aGUVP8yqv94oUT8LMdeZhl4 qfC7LFhkFS45jfTKp/j7O6C0ahoAJp5zQT01lzG3rY/ejD3dnkqm/qug/WtK1b7T SVG2igVqjq81JexcQNRYGyzIKQ3Rx0yMG7KQBo72QIDl7kyO3itT93ipyzU2wLpj 6xjHAketkhXYxaPawxCkfPW3oPZbxn2H -----END CERTIFICATE-----Generated at Sat May 31 17:39:13 2025 by rpki-client