$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: K6P/f+8buNZHh+U32IhAOlKT02GE7mh9GHlT9IY91MM= Subject key identifier: 99:04:03:5D:04:EA:09:1D:4E:55:A8:0A:20:13:EA:6A:2C:22:C7:77 Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 035C Signing time: Sat 31 May 2025 01:09:48 +0000 Manifest this update: Sat 31 May 2025 01:09:48 +0000 Manifest next update: Sat 07 Jun 2025 01:09:48 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: zO8OPpQsD4sA5a/6dPIdAo0Wg+yv4eqeo06r/8rtPsE=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: WXC/B6Dbe8kPnOwbgfCf/9me935cYsiOJufkenUuGQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: May 31 01:09:48 2025 GMT Not After : Jun 7 01:09:48 2025 GMT Subject: CN=683a56dc-c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:3e:2a:18:83:62:b2:7f:78:3f:c8:00:78: 44:9d:d3:d6:dd:ff:30:d7:75:18:1e:6e:92:e2:87: a6:cd:a0:d3:0f:4e:00:8b:f8:9e:52:96:7a:e4:79: bf:a1:dd:ad:3a:ae:c2:07:da:2a:8d:ef:f5:9b:b6: 8b:45:21:e2:31:1f:c5:aa:bf:63:44:7f:48:d4:45: d9:50:95:6c:fc:19:41:67:77:c5:8a:b9:50:db:b5: 91:bd:89:0c:3d:86:b4:ef:88:e3:96:f7:ab:36:52: 85:82:63:a2:02:94:0d:84:38:0f:ad:6f:08:f3:dc: c2:77:4e:12:a1:20:11:0c:b8:18:90:d0:88:91:78: ff:7e:fb:ba:61:9e:47:cc:5c:da:5d:1e:64:4f:2d: 11:c2:f1:eb:04:3c:b4:e3:0c:70:c1:f9:70:2c:d5: 9b:00:f0:a7:10:64:c0:f1:67:91:f6:d6:07:a4:9d: 33:c6:ca:d5:81:f2:0b:24:42:b6:30:56:d1:f1:c4: fa:a8:80:11:c9:35:0d:5f:ee:5c:f3:34:20:25:22: ed:3c:fe:88:49:f8:9f:d7:23:bd:4e:35:bf:db:28: 97:57:18:6a:8e:36:39:c1:1c:92:5a:86:26:bb:09: f2:69:a5:5f:2d:6a:d7:fb:ca:9a:3c:a3:a5:df:02: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:03:5D:04:EA:09:1D:4E:55:A8:0A:20:13:EA:6A:2C:22:C7:77 X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:54:e6:b1:d9:ae:ae:1d:29:44:5c:ec:19:42:98:17:c7: 10:a6:5f:82:45:ce:b7:22:d9:8f:c0:98:07:2e:0f:76:15:d4: 2d:d3:e5:66:a7:58:be:34:3c:f1:0a:ff:89:a7:9c:b7:7b:a5: ba:98:90:b6:43:21:c1:d3:06:97:9a:f9:36:46:bd:4c:0e:e8: ad:fa:c1:8a:fa:d5:5e:32:ab:1d:8c:5b:ad:c9:78:a3:c4:e8: 34:dc:f5:ee:8c:9d:6a:69:84:33:d5:ce:6b:e3:e2:fb:03:11: 0a:21:29:53:a3:78:56:c9:2e:25:cd:cc:de:b8:d3:a1:a4:44: fb:de:47:80:de:80:a0:01:c7:19:58:60:97:67:85:73:5f:83: 2e:89:e4:56:51:92:d0:d9:ad:18:48:ef:c2:32:28:dd:db:41: dd:63:59:4b:da:a1:00:f2:02:c4:a5:e2:78:b2:cb:f7:7f:ea: f2:e0:a8:5c:ca:f1:39:9c:cf:f4:ff:a8:7e:a9:6e:0b:c3:62: b0:cf:c2:bd:4f:dc:74:64:72:96:bd:0f:e9:0e:f9:9c:9a:87: cc:12:78:28:c1:6f:b0:b6:3d:80:1d:a6:98:cb:a0:af:15:b7: 33:d7:b2:89:ae:75:d0:80:47:e1:c6:ea:ba:5e:de:a5:49:32: d9:08:da:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjUwNTMxMDEwOTQ4WhcNMjUwNjA3MDEwOTQ4WjAYMRYwFAYD VQQDEw02ODNhNTZkYy1jMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAno0+KhiDYrJ/eD/IAHhEndPW3f8w13UYHm6S4oemzaDTD04Ai/ieUpZ65Hm/ od2tOq7CB9oqje/1m7aLRSHiMR/Fqr9jRH9I1EXZUJVs/BlBZ3fFirlQ27WRvYkM PYa074jjlverNlKFgmOiApQNhDgPrW8I89zCd04SoSARDLgYkNCIkXj/fvu6YZ5H zFzaXR5kTy0RwvHrBDy04wxwwflwLNWbAPCnEGTA8WeR9tYHpJ0zxsrVgfILJEK2 MFbR8cT6qIARyTUNX+5c8zQgJSLtPP6ISfif1yO9TjW/2yiXVxhqjjY5wRySWoYm uwnyaaVfLWrX+8qaPKOl3wIdXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkEA10E 6gkdTlWoCiAT6mosIsd3MB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgsVTmsdmurh0pRFzsGUKYF8cQpl+CRc63ItmPwJgHLg92FdQt0+Vm p1i+NDzxCv+Jp5y3e6W6mJC2QyHB0waXmvk2Rr1MDuit+sGK+tVeMqsdjFutyXij xOg03PXujJ1qaYQz1c5r4+L7AxEKISlTo3hWyS4lzczeuNOhpET73keA3oCgAccZ WGCXZ4VzX4MuieRWUZLQ2a0YSO/CMijd20HdY1lL2qEA8gLEpeJ4ssv3f+ry4Khc yvE5nM/0/6h+qW4Lw2Kwz8K9T9x0ZHKWvQ/pDvmcmofMEngowW+wtj2AHaaYy6Cv Fbcz17KJrnXQgEfhxuq6Xt6lSTLZCNoH -----END CERTIFICATE-----Generated at Sat May 31 16:32:12 2025 by rpki-client