$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: T47p++V3148O/4GRB5bWvSloe1+p1mZ7SPRR+AvG/RY= Subject key identifier: 03:78:4C:D2:45:48:5E:DC:DC:94:36:5A:D7:7C:26:61:1D:4F:F4:BB Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 1438 Signing time: Fri 30 May 2025 17:06:33 +0000 Manifest this update: Fri 30 May 2025 17:06:32 +0000 Manifest next update: Fri 06 Jun 2025 17:06:32 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: Q8d0ZRv0IWBh+wvHWhfM75unLE2gPaq682/VwwFNl4Q=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 0LjZpONzgJ6xRmwAyv6QVE86pcOrLtlD9gU4D1tfLto=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: z0fyXCO60lkejMfyEE4mQL9l0P7nQ3XY65wfTKmQOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5204 (0x1454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: May 30 17:06:32 2025 GMT Not After : Jun 6 17:06:32 2025 GMT Subject: CN=6839e599-d995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:8d:f4:e7:0e:3d:e0:9a:79:17:73:b4:71: 25:75:70:73:ea:cb:dc:e0:e7:1c:7c:53:da:60:5d: f2:10:71:e4:b8:7f:4d:7d:47:83:b0:a8:a7:7b:f0: 03:7e:bd:6d:ce:3e:50:15:bb:b5:21:78:e8:15:50: 3e:de:c5:4c:f7:82:aa:8f:40:ec:7e:39:d9:cd:d7: 1d:7f:ef:a9:ae:a7:8a:61:a8:67:86:68:cb:6a:4d: 30:ed:f2:5a:86:ec:b5:11:62:8f:e0:41:4f:37:1d: 5a:84:bc:34:b9:06:0d:3b:ab:73:66:3b:13:69:ad: c5:aa:5c:32:4a:b3:ff:1b:b2:67:69:d7:01:6a:02: c7:1e:98:c0:48:df:9e:09:e2:44:ff:d4:15:e8:7f: 9f:73:80:fa:aa:58:f3:4c:ff:5d:c5:1e:ad:54:6d: 07:29:c4:f2:c3:b5:b8:c1:13:da:86:d2:9c:45:ca: 18:e8:36:fe:89:ee:2a:fc:71:28:d3:17:e7:31:88: 18:3a:b3:6e:10:9c:01:f2:7e:a1:8e:87:7c:34:1e: 18:68:be:37:df:66:ac:0b:6b:d3:53:11:4f:9f:d4: be:cf:2b:7d:c7:29:0b:04:ae:94:ff:b9:73:a2:a2: 97:ef:7a:2c:94:78:9d:3d:df:de:b9:e2:c9:03:01: bf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:4C:D2:45:48:5E:DC:DC:94:36:5A:D7:7C:26:61:1D:4F:F4:BB X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1e:3c:d1:5c:7d:0e:18:41:1b:d5:68:f1:d4:f4:16:4d:bc: c5:0d:34:a8:66:61:dc:ea:52:02:6c:43:0f:de:35:4b:72:a3: 86:14:8b:9b:29:51:02:3e:e3:90:71:26:10:5b:0b:6e:72:d3: 4c:a5:cd:cb:3a:c1:04:bd:8e:c2:73:a8:f3:49:76:6f:60:46: e5:11:33:a5:55:32:8d:0c:8f:53:d2:6f:1d:e3:43:a1:59:4a: 3c:a3:71:f9:47:e0:cb:96:10:ea:e1:9e:04:c5:d3:15:e6:c4: 83:d2:63:2a:d9:66:aa:0b:b0:0a:f3:e3:f3:7f:46:5b:ff:76: c3:25:59:5e:7d:91:c3:0b:0f:06:4e:93:66:33:90:f0:ab:50: f6:01:d4:59:d6:48:a4:5b:8c:ad:22:cd:74:aa:9a:f6:95:43: d6:c6:b6:b8:e8:ee:5c:fa:e9:2c:42:cc:61:25:8f:85:0c:a2: 0b:f1:11:12:4d:91:a2:45:c0:2e:cb:0f:cd:08:a6:c0:54:c8: 79:81:fa:54:c5:18:2c:2a:d8:78:8c:e2:c4:82:55:36:87:9e: 50:13:c2:59:85:a3:0e:1a:5b:69:49:7b:32:e6:c0:44:c5:02: 26:bf:b2:48:39:1d:16:df:ae:dc:c4:a8:c0:b3:55:63:97:7c: 2f:de:5a:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNTMwMTcwNjMyWhcNMjUwNjA2MTcwNjMyWjAYMRYwFAYD VQQDEw02ODM5ZTU5OS1kOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JqN9OcOPeCaeRdztHEldXBz6svc4OccfFPaYF3yEHHkuH9NfUeDsKine/AD fr1tzj5QFbu1IXjoFVA+3sVM94Kqj0DsfjnZzdcdf++prqeKYahnhmjLak0w7fJa huy1EWKP4EFPNx1ahLw0uQYNO6tzZjsTaa3FqlwySrP/G7JnadcBagLHHpjASN+e CeJE/9QV6H+fc4D6qljzTP9dxR6tVG0HKcTyw7W4wRPahtKcRcoY6Db+ie4q/HEo 0xfnMYgYOrNuEJwB8n6hjod8NB4YaL4332asC2vTUxFPn9S+zyt9xykLBK6U/7lz oqKX73oslHidPd/eueLJAwG/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN4TNJF SF7c3JQ2Wtd8JmEdT/S7MB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HjzRXH0OGEEb1Wjx1PQWTbzFDTSoZmHc6lICbEMP3jVLcqOGFIub KVECPuOQcSYQWwtuctNMpc3LOsEEvY7Cc6jzSXZvYEblETOlVTKNDI9T0m8d40Oh WUo8o3H5R+DLlhDq4Z4ExdMV5sSD0mMq2WaqC7AK8+Pzf0Zb/3bDJVlefZHDCw8G TpNmM5Dwq1D2AdRZ1kikW4ytIs10qpr2lUPWxra46O5c+uksQsxhJY+FDKIL8RES TZGiRcAuyw/NCKbAVMh5gfpUxRgsKth4jOLEglU2h55QE8JZhaMOGltpSXsy5sBE xQImv7JIOR0W367cxKjAs1Vjl3wv3loy -----END CERTIFICATE-----Generated at Sat May 31 16:52:18 2025 by rpki-client