$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: 79kdpy5NYY+E32BIk/RvEBohqrihvg05Fc1FLhQLRpM= Subject key identifier: 8D:45:65:9F:87:FF:48:C9:14:E9:24:54:51:49:39:EE:65:08:4C:72 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 073A Signing time: Fri 30 May 2025 21:58:21 +0000 Manifest this update: Fri 30 May 2025 21:58:21 +0000 Manifest next update: Fri 06 Jun 2025 21:58:21 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: /pyfyvShgMJI0/kmVBtzb77knAgLVBZNzfSLXhjNuDY=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: SdQIXAZgLAYC0wC8aVzYt0Gf/I3END/T1//qc7xaDnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: May 30 21:58:21 2025 GMT Not After : Jun 6 21:58:21 2025 GMT Subject: CN=683a29fd-1b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:ac:f0:98:a8:99:89:c2:e2:a3:66:97:8d: b1:e4:7b:6d:93:9a:20:ad:c2:64:ee:24:6e:60:f1: 92:19:c2:52:54:ce:50:68:a4:cc:5a:64:ee:d1:16: 53:88:16:cb:ad:aa:d6:71:6d:a3:a3:7f:57:31:9d: 6a:9f:ac:dd:fb:46:41:42:16:07:d1:59:99:dd:2e: 82:28:79:c8:05:75:90:ad:ef:f4:e1:3a:fb:ff:d0: 04:ce:97:0e:af:74:64:a8:17:60:8e:c3:bd:1f:5d: 21:b4:83:71:dd:93:c3:02:99:99:9b:17:7c:d3:3f: 3e:46:9b:65:6e:ed:f4:5f:1d:81:16:5b:52:26:94: c9:dc:5d:6f:36:0b:af:25:76:97:42:fa:44:8e:99: a7:fe:cd:b0:4d:e9:ba:2c:d3:6c:86:b7:10:8f:88: fe:b2:30:03:f7:7a:f3:c8:9b:7e:c0:d0:7f:a4:c2: f3:63:0f:4c:35:ae:70:92:ad:20:09:0e:40:ac:cb: 16:10:26:bd:96:15:7e:7b:3f:0c:56:6c:6f:47:7d: db:02:a1:82:29:64:82:8d:68:b5:7c:12:7f:d5:16: e9:57:da:c2:e5:11:02:86:6a:cd:11:0e:61:6f:24: 4d:a9:81:16:ed:92:77:b1:d9:9c:f6:e6:ca:3e:fe: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:45:65:9F:87:FF:48:C9:14:E9:24:54:51:49:39:EE:65:08:4C:72 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9f:64:2b:43:78:68:93:bd:d0:d3:2f:70:6f:97:be:a6:9a: 1c:1f:c4:5b:37:5e:11:20:f0:c4:47:24:9c:77:52:ac:34:21: 87:7d:8e:c1:3b:5f:d5:df:d8:5e:6c:49:84:76:b9:93:e8:9a: 5e:6d:8b:e0:8e:9f:94:be:72:7d:6d:29:15:cf:14:30:07:fc: e6:4b:3b:79:d7:e9:48:91:2c:d9:b9:6d:97:ea:8d:ed:e7:87: ab:47:65:65:4f:71:75:12:38:c6:f5:fe:b1:15:2a:44:78:54: 52:98:94:e7:6f:38:75:f7:4e:21:c5:c8:b1:23:32:05:98:c2: 84:3c:60:7c:48:2d:26:6c:7f:cf:97:77:b7:39:6b:13:65:51: c3:8e:2f:b9:28:26:85:e5:61:45:ba:fb:42:b9:c9:7f:ea:34: c6:7d:02:df:46:5b:9e:a2:23:46:36:29:00:b6:19:df:bd:ac: e8:8d:39:a7:7f:86:08:85:a3:26:e0:eb:b9:35:0b:b8:2d:95: c5:31:aa:fa:97:92:97:c8:a5:5a:d2:0f:bc:57:1e:b6:d6:c2: 96:d2:d1:20:fb:3e:b6:42:cc:29:5a:79:5b:76:5a:40:b8:2c: f4:00:d5:e5:17:b5:f6:e2:ae:0e:d3:70:c1:f0:8b:b5:32:d5: 91:31:5e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwNTMwMjE1ODIxWhcNMjUwNjA2MjE1ODIxWjAYMRYwFAYD VQQDEw02ODNhMjlmZC0xYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lus8JiomYnC4qNml42x5Httk5ogrcJk7iRuYPGSGcJSVM5QaKTMWmTu0RZT iBbLrarWcW2jo39XMZ1qn6zd+0ZBQhYH0VmZ3S6CKHnIBXWQre/04Tr7/9AEzpcO r3RkqBdgjsO9H10htINx3ZPDApmZmxd80z8+Rptlbu30Xx2BFltSJpTJ3F1vNguv JXaXQvpEjpmn/s2wTem6LNNshrcQj4j+sjAD93rzyJt+wNB/pMLzYw9MNa5wkq0g CQ5ArMsWECa9lhV+ez8MVmxvR33bAqGCKWSCjWi1fBJ/1RbpV9rC5REChmrNEQ5h byRNqYEW7ZJ3sdmc9ubKPv7WkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1FZZ+H /0jJFOkkVFFJOe5lCExyMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5n2QrQ3hok73Q0y9wb5e+ppocH8RbN14RIPDERyScd1KsNCGHfY7B O1/V39hebEmEdrmT6JpebYvgjp+UvnJ9bSkVzxQwB/zmSzt51+lIkSzZuW2X6o3t 54erR2VlT3F1EjjG9f6xFSpEeFRSmJTnbzh1904hxcixIzIFmMKEPGB8SC0mbH/P l3e3OWsTZVHDji+5KCaF5WFFuvtCucl/6jTGfQLfRlueoiNGNikAthnfvazojTmn f4YIhaMm4Ou5NQu4LZXFMar6l5KXyKVa0g+8Vx621sKW0tEg+z62QswpWnlbdlpA uCz0ANXlF7X24q4O03DB8Iu1MtWRMV47 -----END CERTIFICATE-----Generated at Sat May 31 16:42:57 2025 by rpki-client