$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: VbaVH0BsMOz+qZHHS5wTBKtKuPd5lNk6hE7ttLymCyI= Subject key identifier: 83:4C:FE:B1:9A:66:8C:D0:94:3D:F0:BB:EE:68:41:80:C3:23:0C:BB Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: DE Signing time: Sat 31 May 2025 05:08:42 +0000 Manifest this update: Sat 31 May 2025 05:08:42 +0000 Manifest next update: Sat 07 Jun 2025 05:08:42 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: YTm3CxQQWRegv6YEj7hlD6q5Ebs3tB3yykgCdvVhffM=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: May 31 05:08:42 2025 GMT Not After : Jun 7 05:08:42 2025 GMT Subject: CN=683a8eda-eb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:a5:5c:13:43:e0:9c:08:28:38:a5:e4:a6: 19:d0:1b:a3:c4:30:71:8d:18:06:9a:9e:af:e1:1d: 9c:72:c4:7a:63:6d:50:a0:ce:cf:59:18:80:20:da: 4a:ce:03:01:3c:33:d4:68:19:fb:cd:84:e8:34:e3: 03:9a:7c:98:88:24:e3:06:0f:0e:bb:26:a1:a6:a4: e0:e2:51:6b:a9:03:b4:4a:50:72:2b:3c:a2:22:3a: 27:b3:b7:d1:6d:f9:ce:c4:55:d6:ca:17:e9:90:c3: f3:3e:44:0f:2c:75:24:0f:3d:51:8d:a4:31:00:b7: 2b:31:78:4c:b3:9a:17:a0:de:20:33:b8:b0:16:1f: 91:15:6c:18:3b:20:61:ba:99:1d:f3:9a:88:16:2f: 3a:3f:8e:51:af:87:5f:7f:55:c6:25:dd:14:ab:f3: d5:20:82:ce:60:2b:1c:ff:e1:de:b6:13:40:f2:19: e9:11:fe:1b:42:10:a8:3a:37:d8:a7:2c:df:9c:ce: 61:03:cc:c6:5e:53:08:89:98:54:f2:64:31:3b:f8: 11:94:49:12:6b:f1:92:ed:13:a5:3b:83:a5:eb:ce: cf:8d:e7:6d:bc:21:02:24:e3:d5:83:d3:e2:99:12: 6c:d2:5e:ac:51:21:50:44:e0:69:33:e7:ac:0f:2f: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:FE:B1:9A:66:8C:D0:94:3D:F0:BB:EE:68:41:80:C3:23:0C:BB X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:e4:9b:58:9e:a7:bc:66:be:a4:0f:df:10:72:fb:78:ad: da:e4:5c:8a:2f:88:ee:4a:a7:11:e8:5d:fc:a3:8b:57:92:74: 63:74:cd:ba:56:1f:25:69:f3:04:38:82:39:21:18:c6:d4:13: 8c:c2:2d:a1:5e:69:fe:d6:f3:eb:45:7b:42:22:04:0b:8a:2a: 16:51:90:11:40:82:6c:e9:59:28:7b:f2:2e:ee:ae:39:20:83: 14:82:54:f4:15:b7:d4:58:3a:93:3a:04:6a:e7:2f:3e:ce:72: 62:7a:1e:be:62:ba:1d:af:1a:48:46:19:4e:ea:3c:a5:18:ae: 6d:50:47:d4:5c:9b:61:e6:38:c9:e5:30:e4:07:e2:c2:aa:13: c4:33:ae:3f:32:5d:7c:14:47:cc:06:4b:c2:15:79:dd:bd:0b: 29:e8:08:d6:fd:95:ea:ad:71:52:e2:42:fc:21:6a:45:28:de: 25:f9:3e:2c:a3:ce:3d:24:d5:4c:de:6c:0b:4f:36:20:ed:07: bb:c1:2a:3e:91:f1:3c:3a:1d:e5:d6:28:ca:c7:d3:e7:9b:20: 26:37:a9:c6:59:50:90:4a:52:c6:ed:f3:b0:fd:f2:cd:47:f6: df:a7:57:e1:38:0e:91:88:36:17:7f:3e:f2:b0:ba:be:2e:31: 85:43:4a:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUwNTMxMDUwODQyWhcNMjUwNjA3MDUwODQyWjAYMRYwFAYD VQQDEw02ODNhOGVkYS1lYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJKlXBND4JwIKDil5KYZ0BujxDBxjRgGmp6v4R2ccsR6Y21QoM7PWRiAINpK zgMBPDPUaBn7zYToNOMDmnyYiCTjBg8OuyahpqTg4lFrqQO0SlByKzyiIjons7fR bfnOxFXWyhfpkMPzPkQPLHUkDz1RjaQxALcrMXhMs5oXoN4gM7iwFh+RFWwYOyBh upkd85qIFi86P45Rr4dff1XGJd0Uq/PVIILOYCsc/+HethNA8hnpEf4bQhCoOjfY pyzfnM5hA8zGXlMIiZhU8mQxO/gRlEkSa/GS7ROlO4Ol687PjedtvCECJOPVg9Pi mRJs0l6sUSFQROBpM+esDy/BdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINM/rGa ZozQlD3wu+5oQYDDIwy7MB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAroeSbWJ6nvGa+pA/fEHL7eK3a5FyKL4juSqcR6F38o4tXknRjdM26 Vh8lafMEOII5IRjG1BOMwi2hXmn+1vPrRXtCIgQLiioWUZARQIJs6Vkoe/Iu7q45 IIMUglT0FbfUWDqTOgRq5y8+znJieh6+YrodrxpIRhlO6jylGK5tUEfUXJth5jjJ 5TDkB+LCqhPEM64/Ml18FEfMBkvCFXndvQsp6AjW/ZXqrXFS4kL8IWpFKN4l+T4s o849JNVM3mwLTzYg7Qe7wSo+kfE8Oh3l1ijKx9PnmyAmN6nGWVCQSlLG7fOw/fLN R/bfp1fhOA6RiDYXfz7ysLq+LjGFQ0pb -----END CERTIFICATE-----Generated at Sat May 31 16:44:51 2025 by rpki-client