$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: Q0RaO8wDXd5K/QrO2D2Y1bKB5OGAZMNe7+kSDuO6Bs8= Subject key identifier: 65:66:BF:FF:B4:26:9A:18:AE:2B:CE:55:45:06:51:F9:59:E5:44:09 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0728 Signing time: Fri 30 May 2025 22:02:16 +0000 Manifest this update: Fri 30 May 2025 22:02:15 +0000 Manifest next update: Fri 06 Jun 2025 22:02:15 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: 8+8kWUShkAGE7lg/obY3NBF8J9ZSjbXmjcJsnWcjNPs=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: May 30 22:02:15 2025 GMT Not After : Jun 6 22:02:15 2025 GMT Subject: CN=683a2ae8-4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:0d:23:6a:e7:6b:3f:fc:a6:94:54:2c:fa: 49:1e:58:bd:7e:be:52:9b:0b:62:2b:41:da:01:f6: a8:cd:f4:f5:19:28:79:31:7e:3b:fe:80:fc:91:c5: 5c:e7:89:cb:4f:ec:a8:6a:b9:ec:70:02:67:0b:47: 62:e4:ff:b9:a8:bb:b2:16:15:18:2d:4c:c5:1b:07: c8:2e:31:94:c4:4f:4e:6b:a5:f8:11:03:b3:9f:67: 9d:09:ff:8b:f2:53:75:6b:10:dc:e2:f3:04:0d:ff: dd:2b:e7:e7:25:e3:92:52:fd:c7:c2:b5:9c:e9:63: c8:90:80:eb:dd:ee:76:3d:5c:72:4d:66:11:c1:1a: cf:6a:9f:9e:35:18:14:bf:c1:a1:8e:00:63:fc:d8: 32:97:0a:27:2c:a3:1b:83:dd:75:13:a1:ef:64:1f: 12:e7:e1:e5:29:29:85:9b:c2:ee:9b:e1:b6:a0:47: 1c:9f:42:37:6d:a5:a9:81:d4:84:38:a6:4b:2e:a8: 24:33:bd:50:79:b9:8c:0c:ac:b6:e6:6c:f0:cb:0c: 59:47:fd:06:24:2f:9a:93:a3:71:de:49:ec:f9:8a: d3:d0:70:55:4d:4e:12:21:38:5b:17:a4:f6:34:60: 0d:bc:6a:0f:ca:53:60:b7:09:f8:54:36:38:09:65: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:BF:FF:B4:26:9A:18:AE:2B:CE:55:45:06:51:F9:59:E5:44:09 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:68:3a:d1:3c:4d:88:39:95:00:c5:02:73:34:4d:bf:74:0a: 00:ad:ed:79:8b:f0:a0:b0:bb:18:f6:1a:b1:c8:e8:03:2f:a0: 31:ea:ca:34:a0:85:ed:f0:d6:9a:c6:9a:8e:82:47:b6:f6:08: e1:fd:28:de:9e:1b:d4:96:04:7c:ed:e9:a4:2a:8b:8e:24:8b: 28:80:e2:f7:e1:c1:02:d5:91:d8:4a:5c:13:47:2e:ed:bb:45: 62:58:25:e7:7d:be:6c:09:0e:40:1e:92:8f:c1:11:82:4a:6a: 5d:27:15:c3:a0:44:68:38:4a:03:c2:f7:45:70:62:67:5b:bb: 32:a8:42:25:9b:ac:e0:02:54:46:70:39:7a:53:9a:f5:b8:c5: 90:cf:7e:cc:86:bc:0a:69:92:2e:82:4e:9d:1f:96:73:cf:30: fe:ea:e3:43:38:b1:2d:78:64:c0:32:79:79:ab:bd:3f:ad:ce: 64:fb:af:10:35:cd:7f:5b:52:bd:a6:3d:06:74:64:91:5a:bb: 1c:03:db:e2:7e:43:90:7b:6a:47:fc:3d:aa:29:90:1d:a5:02: fa:33:59:66:09:4d:6c:10:9a:b8:fa:c7:b7:77:46:bd:42:4d: 42:3f:9e:e5:cc:94:ac:50:ad:2c:b4:3d:79:81:49:ff:24:26: 31:11:1f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwNTMwMjIwMjE1WhcNMjUwNjA2MjIwMjE1WjAYMRYwFAYD VQQDEw02ODNhMmFlOC00MTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkQNI2rnaz/8ppRULPpJHli9fr5SmwtiK0HaAfaozfT1GSh5MX47/oD8kcVc 54nLT+yoarnscAJnC0di5P+5qLuyFhUYLUzFGwfILjGUxE9Oa6X4EQOzn2edCf+L 8lN1axDc4vMEDf/dK+fnJeOSUv3HwrWc6WPIkIDr3e52PVxyTWYRwRrPap+eNRgU v8GhjgBj/NgylwonLKMbg911E6HvZB8S5+HlKSmFm8Lum+G2oEccn0I3baWpgdSE OKZLLqgkM71QebmMDKy25mzwywxZR/0GJC+ak6Nx3kns+YrT0HBVTU4SIThbF6T2 NGANvGoPylNgtwn4VDY4CWVPKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVmv/+0 JpoYrivOVUUGUflZ5UQJMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHaDrRPE2IOZUAxQJzNE2/dAoAre15i/CgsLsY9hqxyOgDL6Ax6so0 oIXt8NaaxpqOgke29gjh/SjenhvUlgR87emkKouOJIsogOL34cEC1ZHYSlwTRy7t u0ViWCXnfb5sCQ5AHpKPwRGCSmpdJxXDoERoOEoDwvdFcGJnW7syqEIlm6zgAlRG cDl6U5r1uMWQz37MhrwKaZIugk6dH5ZzzzD+6uNDOLEteGTAMnl5q70/rc5k+68Q Nc1/W1K9pj0GdGSRWrscA9vifkOQe2pH/D2qKZAdpQL6M1lmCU1sEJq4+se3d0a9 Qk1CP57lzJSsUK0stD15gUn/JCYxER8z -----END CERTIFICATE-----Generated at Sat May 31 16:55:09 2025 by rpki-client