$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: q5ZBD/IM3zNNhL/UNTMqvqi0/EKtHMsBPLrDyKwrAOo= Subject key identifier: 0E:27:EE:B1:BB:BC:92:86:9F:CC:5A:1E:B2:38:F3:E5:23:AD:5C:21 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0129 Signing time: Sat 31 May 2025 04:16:42 +0000 Manifest this update: Sat 31 May 2025 04:16:42 +0000 Manifest next update: Sat 07 Jun 2025 04:16:42 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: 5T92uR+FJpG9mKMqZqC4mqYfn/3OgxObPWjysQbdvTs=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: SshOC3gU6HUaIU7OUJCNAnBTxBahFjxoE/rfFGZssow=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: GCUYfktdJtM3w3x/AngT0svZ6AfcPm8+X/17pTPoOCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: May 31 04:16:42 2025 GMT Not After : Jun 7 04:16:42 2025 GMT Subject: CN=683a82aa-07b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:a7:be:8d:ac:75:9c:cc:b5:df:c7:df:4c: ac:39:46:37:e4:c0:d0:75:1f:ec:7b:d3:08:98:aa: 05:cb:1e:41:03:46:c1:42:9a:99:3e:c6:e1:ff:51: f1:3f:3e:dd:59:0f:e7:6f:87:dc:eb:8f:2a:8d:1e: 73:a9:6b:30:8b:e8:5b:3f:5f:64:91:27:de:10:dd: 4b:b3:bc:08:3e:29:a3:39:7a:79:81:c7:fc:a4:c7: 90:2a:fa:a8:a8:e6:40:e1:50:7d:a2:1f:08:ca:30: 5b:19:16:24:e9:e5:32:c7:2e:45:b2:62:b3:dd:1a: 65:42:4b:75:34:d5:55:12:a3:7d:68:57:3c:f7:f3: a6:74:95:07:47:9e:55:e9:11:9e:a9:60:7c:c0:7b: 08:01:0f:ac:46:9d:e4:38:8b:50:1c:66:c6:f3:1f: 76:3a:20:4a:1d:15:a0:02:78:90:72:93:61:07:0f: 05:8f:5f:f5:f0:af:8b:84:2c:3c:64:49:b7:e6:63: 99:6e:b1:d4:d1:6a:82:ce:ec:bd:25:9f:28:ec:e3: ec:57:5d:43:48:d1:36:da:5d:51:74:42:5d:9a:95: a4:c2:a2:ad:32:e3:4c:6f:be:8b:a7:41:c8:03:05: e8:0d:cc:64:3e:0f:cc:2d:07:d9:dc:9c:05:2e:c9: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:27:EE:B1:BB:BC:92:86:9F:CC:5A:1E:B2:38:F3:E5:23:AD:5C:21 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4a:36:59:08:06:c5:a6:06:6a:f7:f3:d5:f0:86:f1:79:a4: 82:3b:91:bc:8f:d3:5b:ba:d2:64:86:49:c3:4e:da:bf:d4:23: 08:65:fa:37:e8:9c:c0:35:3d:4a:44:a3:0e:ea:70:82:17:f1: c7:a4:7c:d1:c3:88:c7:34:7c:f7:8e:35:a7:a0:9e:49:8f:fd: 73:9a:a5:39:dc:a7:bf:73:92:c3:a0:84:b0:8d:4a:ca:50:72: 1f:f9:e0:a3:35:76:17:3c:0b:76:a0:d4:51:8a:92:35:cd:ff: ab:44:43:d6:f8:5f:a1:f4:99:82:27:0f:c4:fb:02:e2:58:46: 94:a4:28:b4:7e:0c:b0:a7:05:9e:c2:49:5c:ee:40:63:16:92: 29:05:d3:12:8c:42:12:2d:9f:06:9c:c1:9a:2f:e1:be:98:93: 5c:8c:2c:97:c2:f4:65:0f:34:9a:f9:8c:f9:f9:fb:08:c2:61: b8:85:ad:e9:99:f8:b9:64:5c:18:fe:96:e6:6c:be:51:65:29: ac:e6:b5:bd:4a:48:95:d2:96:38:c6:53:35:96:ff:97:91:e9: ff:3a:ec:86:c1:90:04:1c:b8:96:a6:36:d6:16:18:58:3f:20: 68:2b:a6:cd:a5:5f:d5:8b:76:c6:51:f1:96:30:ac:bd:04:f5: 1f:43:81:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjUwNTMxMDQxNjQyWhcNMjUwNjA3MDQxNjQyWjAYMRYwFAYD VQQDEw02ODNhODJhYS0wN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBOnvo2sdZzMtd/H30ysOUY35MDQdR/se9MImKoFyx5BA0bBQpqZPsbh/1Hx Pz7dWQ/nb4fc648qjR5zqWswi+hbP19kkSfeEN1Ls7wIPimjOXp5gcf8pMeQKvqo qOZA4VB9oh8IyjBbGRYk6eUyxy5FsmKz3RplQkt1NNVVEqN9aFc89/OmdJUHR55V 6RGeqWB8wHsIAQ+sRp3kOItQHGbG8x92OiBKHRWgAniQcpNhBw8Fj1/18K+LhCw8 ZEm35mOZbrHU0WqCzuy9JZ8o7OPsV11DSNE22l1RdEJdmpWkwqKtMuNMb76Lp0HI AwXoDcxkPg/MLQfZ3JwFLsnfQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4n7rG7 vJKGn8xaHrI48+UjrVwhMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSjZZCAbFpgZq9/PV8IbxeaSCO5G8j9NbutJkhknDTtq/1CMIZfo3 6JzANT1KRKMO6nCCF/HHpHzRw4jHNHz3jjWnoJ5Jj/1zmqU53Ke/c5LDoISwjUrK UHIf+eCjNXYXPAt2oNRRipI1zf+rREPW+F+h9JmCJw/E+wLiWEaUpCi0fgywpwWe wklc7kBjFpIpBdMSjEISLZ8GnMGaL+G+mJNcjCyXwvRlDzSa+Yz5+fsIwmG4ha3p mfi5ZFwY/pbmbL5RZSms5rW9SkiV0pY4xlM1lv+Xken/OuyGwZAEHLiWpjbWFhhY PyBoK6bNpV/Vi3bGUfGWMKy9BPUfQ4HH -----END CERTIFICATE-----Generated at Sat May 31 16:35:48 2025 by rpki-client