$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: 74qi96DSIYIMIBxvnFDuja4Xam7pu4g57U1cOIfvl9Y= Subject key identifier: 53:D7:96:90:12:26:2E:AD:48:46:BB:16:7F:FE:5F:01:75:13:1E:10 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0462 Signing time: Sat 31 May 2025 00:20:51 +0000 Manifest this update: Sat 31 May 2025 00:20:50 +0000 Manifest next update: Sat 07 Jun 2025 00:20:50 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: GmhnvJK3Z4pW5RrdzzKVfylNTfXgDnerxQiY6XOHN+I=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: May 31 00:20:50 2025 GMT Not After : Jun 7 00:20:50 2025 GMT Subject: CN=683a4b62-f204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f3:93:20:f4:8b:20:c4:6c:e9:5c:93:8d:3c: f0:39:80:cc:04:f9:11:9a:2b:b1:55:25:42:1d:68: 90:46:d2:62:85:42:b4:e9:44:8a:8c:a8:5a:47:20: 60:54:16:cb:a4:bf:72:dc:61:e7:ca:0a:fb:0b:18: 17:a8:95:86:71:93:d4:64:33:55:70:b6:ab:ae:0f: 9b:d4:f0:ba:eb:df:d0:5a:59:66:82:e1:2f:85:54: cb:0a:44:9a:24:7b:10:67:66:54:b1:a4:14:bd:26: 20:7f:92:e0:6d:17:a8:fd:e5:6b:ef:7f:e0:5b:1f: 3f:e3:44:0d:53:85:21:b4:ec:fd:0a:07:fc:d7:f0: 15:41:b3:be:f4:80:0c:3e:d2:19:d5:85:63:36:59: 0a:5f:16:ae:a1:96:ea:2f:84:95:dd:54:10:04:82: b0:3d:0e:9e:bc:4f:6b:56:26:b8:a6:6e:92:9f:63: bc:2c:d7:cb:99:76:6f:3a:f3:07:45:b0:c9:20:56: 2d:73:22:2e:0a:81:db:a4:e3:56:92:00:8d:6e:5f: 4d:11:bd:7d:8f:da:bf:bb:a4:d5:00:fc:8d:3b:88: 4c:b6:c2:aa:63:ab:7c:59:f3:32:30:46:29:93:22: 90:09:52:0e:e9:6c:e8:b1:77:2e:42:2d:85:50:e2: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:96:90:12:26:2E:AD:48:46:BB:16:7F:FE:5F:01:75:13:1E:10 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c8:dc:0d:1b:b4:5d:fb:63:98:83:98:f9:cc:fd:d9:00:de: 4f:cc:7d:00:e7:20:6e:ea:1f:bc:84:bc:c5:30:5f:ac:0e:a4: 22:c8:71:12:20:91:ce:4a:77:a2:08:ef:01:1d:17:18:99:cd: e1:3d:72:14:f3:37:fd:cd:50:3a:b2:71:52:21:b3:f3:25:a0: a9:bc:d7:a8:0e:81:bd:19:fd:fe:ff:2f:3c:c1:fe:24:e7:4d: ae:7a:82:f5:a6:44:59:fd:ba:20:55:9e:18:0c:16:1b:3b:8b: 80:58:84:3f:02:bd:7b:e1:51:ba:6b:ca:57:dc:2f:36:29:62: 7f:f4:a1:20:41:ef:d6:3e:6f:6e:c1:02:8e:85:85:fe:03:cd: c3:6c:f6:ec:60:4e:ec:02:ba:ae:8f:5b:bd:d5:77:dd:59:0a: e0:3b:0d:cf:95:bb:02:c1:77:57:7c:f3:ab:06:f8:f9:b4:43: 27:f6:4e:d4:93:66:52:bb:56:22:cc:5b:a5:0d:44:07:64:26: 9d:2a:56:47:d5:1a:fa:9d:5a:90:27:e2:66:a9:6c:1d:eb:97: 9b:f6:4f:b5:d4:da:ea:a4:80:13:e4:96:7d:e6:6f:21:5b:68: ef:d7:e5:80:da:f6:1c:9d:e9:28:c7:f9:b1:20:3e:38:f4:8a: 2f:1e:92:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwNTMxMDAyMDUwWhcNMjUwNjA3MDAyMDUwWjAYMRYwFAYD VQQDEw02ODNhNGI2Mi1mMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/OTIPSLIMRs6VyTjTzwOYDMBPkRmiuxVSVCHWiQRtJihUK06USKjKhaRyBg VBbLpL9y3GHnygr7CxgXqJWGcZPUZDNVcLarrg+b1PC669/QWllmguEvhVTLCkSa JHsQZ2ZUsaQUvSYgf5LgbReo/eVr73/gWx8/40QNU4UhtOz9Cgf81/AVQbO+9IAM PtIZ1YVjNlkKXxauoZbqL4SV3VQQBIKwPQ6evE9rVia4pm6Sn2O8LNfLmXZvOvMH RbDJIFYtcyIuCoHbpONWkgCNbl9NEb19j9q/u6TVAPyNO4hMtsKqY6t8WfMyMEYp kyKQCVIO6WzosXcuQi2FUOLPiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPXlpAS Ji6tSEa7Fn/+XwF1Ex4QMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWyNwNG7Rd+2OYg5j5zP3ZAN5PzH0A5yBu6h+8hLzFMF+sDqQiyHES IJHOSneiCO8BHRcYmc3hPXIU8zf9zVA6snFSIbPzJaCpvNeoDoG9Gf3+/y88wf4k 502ueoL1pkRZ/bogVZ4YDBYbO4uAWIQ/Ar174VG6a8pX3C82KWJ/9KEgQe/WPm9u wQKOhYX+A83DbPbsYE7sArquj1u91XfdWQrgOw3PlbsCwXdXfPOrBvj5tEMn9k7U k2ZSu1YizFulDUQHZCadKlZH1Rr6nVqQJ+JmqWwd65eb9k+11NrqpIAT5JZ95m8h W2jv1+WA2vYcnekox/mxID449IovHpK3 -----END CERTIFICATE-----Generated at Sat May 31 17:32:57 2025 by rpki-client