$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: 0KtpDv1mqdk/PjbNZz4bACxv48pO6lPuoeqhTJquEck= Subject key identifier: 96:BF:98:A2:0C:1F:EE:A1:A4:78:FC:AB:00:84:D9:AA:B8:35:25:05 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 02A1 Signing time: Sat 31 May 2025 01:42:01 +0000 Manifest this update: Sat 31 May 2025 01:42:01 +0000 Manifest next update: Sat 07 Jun 2025 01:42:01 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: YbEb9uxqw0yEPtAQNNUB1+2bEnHTpuNCW+K8JJXxIOQ=) 2: D2E9BA7EFD1911EC9E748466C4F9AE02.roa (hash: 3mXWOSXoGGGoIw3Jc45rTgdUlsOtzRtgn3W5YkMOraE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: May 31 01:42:01 2025 GMT Not After : Jun 7 01:42:01 2025 GMT Subject: CN=683a5e69-dbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:1f:00:fc:79:54:2e:96:da:95:01:8b:51: c6:20:9f:89:88:bf:3c:f2:12:79:6b:18:1c:c8:da: f0:3a:82:6e:e0:7d:f0:7f:d8:24:ee:19:2a:50:24: b0:82:d8:07:a4:4a:b6:98:e8:0e:07:6d:54:47:a0: dc:0f:dd:2a:ca:50:13:c2:42:a4:23:f1:84:53:2a: e0:ba:10:64:5a:cd:f3:0a:02:d1:ff:ad:42:d0:59: d6:e3:fb:a1:f3:6e:ae:88:52:b1:63:38:a3:c7:a0: ed:54:7f:24:8a:fa:bc:6e:09:56:3c:14:5d:57:c2: ed:8f:2d:01:91:0f:4f:05:7a:53:93:fb:bf:95:c3: b5:85:1a:4d:e4:f4:93:85:90:2f:df:13:6e:20:73: 64:3f:fb:e3:ec:42:e6:6d:94:1f:09:81:89:3e:8f: 3f:be:70:85:c3:97:6c:cc:c9:2b:9a:cb:c4:aa:df: 49:88:73:ad:08:17:b7:1e:19:52:bf:3c:6c:60:fc: 62:eb:12:cf:7e:b3:49:c9:08:e2:2c:2b:f6:a5:47: 7f:d9:13:49:ce:e9:3c:a6:9a:8c:03:c0:70:32:a1: 15:48:8e:47:dd:dd:f5:43:d5:ab:14:08:93:b6:47: 02:79:e6:0d:52:8b:ff:15:a4:9b:1a:8a:10:ab:1d: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:98:A2:0C:1F:EE:A1:A4:78:FC:AB:00:84:D9:AA:B8:35:25:05 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:be:bd:46:d3:16:23:94:c0:9c:eb:b0:38:45:70:8b:52:26: 0c:6a:03:c6:c3:f6:d5:b7:3d:ba:51:28:0c:3b:3b:18:15:7e: bb:98:b7:29:92:43:d4:ca:f2:89:90:e1:9e:ce:5f:13:80:a2: 9d:db:7c:e8:7c:64:32:18:f2:39:2f:56:b7:0f:73:5a:dc:19: 7e:cb:fd:5a:30:72:e7:a6:9b:39:c5:42:3f:ab:45:09:8d:f1: 67:ec:86:88:91:fd:24:28:15:21:af:08:9a:85:79:0e:25:4d: 0e:e4:05:69:68:67:be:80:d5:ae:96:68:20:6b:f5:04:a0:18: 68:84:6d:69:c2:42:17:ba:71:8a:e7:33:f5:c3:8c:35:02:48: ea:16:4b:53:bf:29:cc:2f:d4:03:08:c3:00:1f:aa:fa:f5:10: bf:3f:d1:2b:f3:4a:0e:4d:6c:00:4e:78:74:b9:fe:57:78:80: 2c:a1:63:b3:1b:e5:ab:86:d0:d4:05:af:05:0e:64:91:83:b5: 13:42:9f:53:9d:27:5e:cf:25:52:a3:b6:6e:a1:aa:da:ef:ec: 78:3c:0f:82:cc:a8:f4:1f:19:fa:e2:2f:60:e9:0c:35:6f:ed: 99:87:f6:fd:3c:4d:3b:1c:07:e4:b6:57:e5:60:b1:53:e2:75: b0:fc:1f:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUwNTMxMDE0MjAxWhcNMjUwNjA3MDE0MjAxWjAYMRYwFAYD VQQDEw02ODNhNWU2OS1kYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN0fAPx5VC6W2pUBi1HGIJ+JiL888hJ5axgcyNrwOoJu4H3wf9gk7hkqUCSw gtgHpEq2mOgOB21UR6DcD90qylATwkKkI/GEUyrguhBkWs3zCgLR/61C0FnW4/uh 826uiFKxYzijx6DtVH8kivq8bglWPBRdV8Ltjy0BkQ9PBXpTk/u/lcO1hRpN5PST hZAv3xNuIHNkP/vj7ELmbZQfCYGJPo8/vnCFw5dszMkrmsvEqt9JiHOtCBe3HhlS vzxsYPxi6xLPfrNJyQjiLCv2pUd/2RNJzuk8ppqMA8BwMqEVSI5H3d31Q9WrFAiT tkcCeeYNUov/FaSbGooQqx3yOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa/mKIM H+6hpHj8qwCE2aq4NSUFMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFvr1G0xYjlMCc67A4RXCLUiYMagPGw/bVtz26USgMOzsYFX67mLcp kkPUyvKJkOGezl8TgKKd23zofGQyGPI5L1a3D3Na3Bl+y/1aMHLnpps5xUI/q0UJ jfFn7IaIkf0kKBUhrwiahXkOJU0O5AVpaGe+gNWulmgga/UEoBhohG1pwkIXunGK 5zP1w4w1AkjqFktTvynML9QDCMMAH6r69RC/P9Er80oOTWwATnh0uf5XeIAsoWOz G+WrhtDUBa8FDmSRg7UTQp9TnSdezyVSo7Zuoara7+x4PA+CzKj0Hxn64i9g6Qw1 b+2Zh/b9PE07HAfktlflYLFT4nWw/B/X -----END CERTIFICATE-----Generated at Sat May 31 17:11:27 2025 by rpki-client