$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: cYtL+XiR8tuVo6eJKTQaGEc0I1ceiobDhL8k7kBZe+w= Subject key identifier: 79:39:EF:40:E1:3B:76:69:65:47:1E:DD:87:FB:23:56:B4:61:72:7D Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 0111 Signing time: Sat 31 May 2025 04:34:22 +0000 Manifest this update: Sat 31 May 2025 04:34:22 +0000 Manifest next update: Sat 07 Jun 2025 04:34:22 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: GOObh+VXD2HEHzpFlr+WRdzJKnPDi9tujS6lxW5hgpQ=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: May 31 04:34:22 2025 GMT Not After : Jun 7 04:34:22 2025 GMT Subject: CN=683a86ce-ec2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:d6:d2:c8:69:f4:44:08:88:19:c2:4a:d0: 87:fe:a5:82:58:22:a9:29:f4:69:dd:86:05:24:b5: cc:e4:e8:f7:5c:5b:49:92:90:e5:65:94:7d:99:de: a6:1e:cb:3b:25:65:3d:1c:a3:89:9d:f2:cd:dd:63: 30:7b:2d:1a:89:73:68:46:f1:ee:7b:9a:4f:ca:e4: ac:ca:d5:16:3f:46:e9:99:c2:f1:1e:e0:13:fc:70: 23:2c:1a:dd:b9:29:30:f0:11:f8:e5:c5:44:2a:95: 3b:91:d7:db:65:e4:0d:27:22:c7:f1:6a:72:85:43: fd:61:02:c1:4c:e4:19:9e:08:65:b3:12:f0:95:3a: 01:54:34:8b:a4:ac:46:93:4a:23:d1:83:21:22:c8: db:86:e4:14:2f:f4:23:9e:b8:d2:6b:36:a3:af:fc: e8:d1:d7:34:20:e5:ec:a8:27:57:1b:b6:6e:db:1d: 83:48:37:63:f5:52:ce:36:dc:f3:b9:9b:b0:a0:e3: 6b:1c:1d:1f:dc:85:c9:e9:b9:af:24:da:c1:88:9a: e2:25:7b:fb:af:fb:e8:e8:93:2d:c6:90:79:75:14: fd:33:36:3a:25:c2:b9:90:7d:e1:bf:eb:6e:1f:ed: 3f:27:f8:48:8e:d1:71:50:ca:df:90:f9:88:c9:ce: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:39:EF:40:E1:3B:76:69:65:47:1E:DD:87:FB:23:56:B4:61:72:7D X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:bd:cd:90:38:e3:ce:66:38:72:4f:db:10:53:ca:94:ab: 2a:ff:bd:00:f0:db:8b:ba:7d:67:ba:c7:5a:b3:a8:4b:08:eb: 83:53:5f:f0:70:6b:25:f3:5f:2e:0c:56:07:d2:be:0c:39:97: 43:e3:8d:68:24:d7:1a:f5:64:93:48:e6:90:a6:aa:1f:49:a2: 58:01:75:0e:dd:3b:56:5b:d7:ae:43:6c:95:ed:a2:96:18:c6: 63:f2:e6:eb:b8:af:2a:ee:a1:9c:01:76:b4:ae:b9:30:b2:63: 26:5c:a9:75:69:c0:3b:76:5a:c3:eb:7f:2f:e3:1e:3c:9e:e5: e5:67:4b:7a:ea:c8:1a:5f:89:36:0f:9a:72:9d:79:3d:4f:7a: e2:83:ae:32:36:0a:fc:2c:56:08:55:f8:c5:d7:48:e0:42:c5: 82:bf:cb:90:1e:77:4f:09:85:4c:7e:63:1a:8a:fc:b7:4f:24: 15:5a:02:5b:21:e4:38:cf:e2:12:76:2b:a2:64:d3:56:c8:dc: a4:e2:31:c5:9a:a4:0b:e3:12:80:a1:96:e5:fa:09:69:a0:8c: f2:b4:73:f8:5a:fe:11:c8:ab:7d:55:0e:57:4e:83:b1:0b:b6: 72:31:62:24:be:d2:ab:f2:82:1a:b9:7d:7c:eb:f6:28:92:66: d9:d9:b8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwNTMxMDQzNDIyWhcNMjUwNjA3MDQzNDIyWjAYMRYwFAYD VQQDEw02ODNhODZjZS1lYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuHW0shp9EQIiBnCStCH/qWCWCKpKfRp3YYFJLXM5Oj3XFtJkpDlZZR9md6m Hss7JWU9HKOJnfLN3WMwey0aiXNoRvHue5pPyuSsytUWP0bpmcLxHuAT/HAjLBrd uSkw8BH45cVEKpU7kdfbZeQNJyLH8WpyhUP9YQLBTOQZnghlsxLwlToBVDSLpKxG k0oj0YMhIsjbhuQUL/QjnrjSazajr/zo0dc0IOXsqCdXG7Zu2x2DSDdj9VLONtzz uZuwoONrHB0f3IXJ6bmvJNrBiJriJXv7r/vo6JMtxpB5dRT9MzY6JcK5kH3hv+tu H+0/J/hIjtFxUMrfkPmIyc4QtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk570Dh O3ZpZUce3Yf7I1a0YXJ9MB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwC73NkDjjzmY4ck/bEFPKlKsq/70A8NuLun1nusdas6hLCOuDU1/w cGsl818uDFYH0r4MOZdD441oJNca9WSTSOaQpqofSaJYAXUO3TtWW9euQ2yV7aKW GMZj8ubruK8q7qGcAXa0rrkwsmMmXKl1acA7dlrD638v4x48nuXlZ0t66sgaX4k2 D5pynXk9T3rig64yNgr8LFYIVfjF10jgQsWCv8uQHndPCYVMfmMaivy3TyQVWgJb IeQ4z+ISdiuiZNNWyNyk4jHFmqQL4xKAoZbl+glpoIzytHP4Wv4RyKt9VQ5XToOx C7ZyMWIkvtKr8oIauX186/YokmbZ2bgT -----END CERTIFICATE-----Generated at Sat May 31 16:47:52 2025 by rpki-client