$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: QTVK8qdFteHus7Q670x9loBqIZmxyC1t91reYDj8qtM= Subject key identifier: 06:5E:5F:5A:4C:91:2E:35:05:A8:92:D1:90:C6:CB:F7:15:B6:36:B3 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 0532 Signing time: Fri 30 May 2025 23:42:16 +0000 Manifest this update: Fri 30 May 2025 23:42:15 +0000 Manifest next update: Fri 06 Jun 2025 23:42:15 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: 7aOM8EWx9na/WOsx9+acIga/6YHM3VQwx4LTAoh7FfU=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: CQpWK2+G2LnLlpiGc5AJJ6xJWy2B0MtLT56Nh25qbzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: May 30 23:42:15 2025 GMT Not After : Jun 6 23:42:15 2025 GMT Subject: CN=683a4257-2f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:83:37:ab:df:f9:f4:03:35:cd:e4:0d:13: 17:2a:c7:57:0b:73:8e:38:04:d5:0e:ae:46:67:bb: ec:1f:49:1c:f2:0d:df:ac:bf:48:57:c1:47:cc:7d: 95:dc:41:c5:9f:ef:cc:0c:f0:7f:56:7c:e8:bc:11: 0c:b7:d3:cd:a8:67:98:6c:dc:a8:6d:40:64:08:ab: 52:87:d6:de:c1:b7:76:27:36:48:6a:5a:b2:d2:dc: c0:4d:ea:d9:be:f3:50:0e:eb:d1:c9:cf:9b:ed:7d: c0:ea:07:57:f6:f8:76:38:4d:d4:87:d0:0b:01:a5: fa:be:0b:8b:ec:f1:f7:1d:79:32:8d:f4:b9:7a:1a: 4a:fe:1d:a8:42:59:88:9e:3a:a4:59:23:6d:17:0c: 3c:60:35:e6:b8:a9:b1:84:5a:57:8f:37:9f:4b:b3: dc:51:8a:7f:64:c9:c1:8c:0d:7b:85:b6:e0:f1:1b: c5:ae:ea:bd:4e:90:6d:71:a4:d1:d7:61:a0:d2:0c: 9d:a7:c8:93:0b:8a:fc:83:5e:a3:d7:74:00:7d:f9: de:5a:84:bb:07:fd:c8:5e:e8:77:4d:92:93:d2:58: b4:53:73:ce:07:87:f6:7c:36:1e:fb:4b:80:a6:95: 06:49:45:61:90:b8:02:09:d2:95:6e:d7:26:c3:fc: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:5F:5A:4C:91:2E:35:05:A8:92:D1:90:C6:CB:F7:15:B6:36:B3 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:03:bf:8b:8e:c2:e5:b1:8b:4a:39:11:c5:7e:35:8a:25:76: 7e:d0:fb:26:e5:60:45:e4:2c:ff:68:f8:07:b5:9e:0c:ae:12: 03:57:b5:1f:f5:f0:1b:46:4a:f3:af:f5:d4:25:1c:91:bf:35: f9:03:13:41:37:4f:6c:0a:39:6a:42:36:84:63:0f:92:d7:52: 0a:f3:70:f2:4d:39:b7:be:34:3a:3d:41:d5:a2:fc:08:8e:41: ca:ba:49:0c:de:0e:c7:86:ad:0e:80:b3:98:c1:16:69:3a:e1: 34:ee:e6:1b:42:bb:bf:57:7b:bd:c1:2d:f0:a6:4e:c0:ec:dc: c2:fb:48:5f:a1:11:98:73:98:3e:7b:f4:4d:f3:dc:a3:09:68: 01:5e:ea:cd:24:8b:f2:c3:f7:44:fe:a6:f5:58:1b:8a:50:f1: 63:60:7f:b9:bd:0e:f4:19:2c:08:9c:2f:15:d8:5d:ab:a1:03: 75:0d:86:11:12:26:1f:6f:3a:fc:3b:8a:26:b2:45:4b:72:d0: 5b:3c:77:11:e6:da:f4:b4:12:87:b0:ee:ca:4c:bf:30:47:8f: 92:9c:51:d4:17:4b:67:ed:8a:ac:4b:16:5a:e5:1e:b7:86:55: bf:37:d2:ab:97:76:24:42:6f:05:c9:81:82:2c:c0:51:c5:10: e1:2a:27:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwNTMwMjM0MjE1WhcNMjUwNjA2MjM0MjE1WjAYMRYwFAYD VQQDEw02ODNhNDI1Ny0yZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucSDN6vf+fQDNc3kDRMXKsdXC3OOOATVDq5GZ7vsH0kc8g3frL9IV8FHzH2V 3EHFn+/MDPB/VnzovBEMt9PNqGeYbNyobUBkCKtSh9bewbd2JzZIalqy0tzATerZ vvNQDuvRyc+b7X3A6gdX9vh2OE3Uh9ALAaX6vguL7PH3HXkyjfS5ehpK/h2oQlmI njqkWSNtFww8YDXmuKmxhFpXjzefS7PcUYp/ZMnBjA17hbbg8RvFruq9TpBtcaTR 12Gg0gydp8iTC4r8g16j13QAffneWoS7B/3IXuh3TZKT0li0U3POB4f2fDYe+0uA ppUGSUVhkLgCCdKVbtcmw/wx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZeX1pM kS41BaiS0ZDGy/cVtjazMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjA7+LjsLlsYtKORHFfjWKJXZ+0Psm5WBF5Cz/aPgHtZ4MrhIDV7Uf 9fAbRkrzr/XUJRyRvzX5AxNBN09sCjlqQjaEYw+S11IK83DyTTm3vjQ6PUHVovwI jkHKukkM3g7Hhq0OgLOYwRZpOuE07uYbQru/V3u9wS3wpk7A7NzC+0hfoRGYc5g+ e/RN89yjCWgBXurNJIvyw/dE/qb1WBuKUPFjYH+5vQ70GSwInC8V2F2roQN1DYYR EiYfbzr8O4omskVLctBbPHcR5tr0tBKHsO7KTL8wR4+SnFHUF0tn7YqsSxZa5R63 hlW/N9Krl3YkQm8FyYGCLMBRxRDhKieO -----END CERTIFICATE-----Generated at Sat May 31 17:11:24 2025 by rpki-client