$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: ihxUgO8Mt25meCJn9r3Ee2d3VjdEO0nBHoAOop2XmOI= Subject key identifier: 4B:04:E5:36:EB:6A:D0:B3:57:E6:48:85:8C:46:4A:15:A5:82:B3:A0 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 015D Signing time: Sat 31 May 2025 03:40:08 +0000 Manifest this update: Sat 31 May 2025 03:40:08 +0000 Manifest next update: Sat 07 Jun 2025 03:40:08 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: M2nJ430SEvBhi8BJ7d4BIGl5jld7OHDwZmAsijyyir8=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: May 31 03:40:08 2025 GMT Not After : Jun 7 03:40:08 2025 GMT Subject: CN=683a7a18-d7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:62:b6:14:6d:d9:20:2b:14:37:62:39:ae: 00:3e:07:11:6e:a0:82:5c:63:03:a5:df:f3:32:6e: 5c:e1:68:7c:74:1d:b9:fb:99:aa:b8:f2:0a:25:9b: 52:ec:43:8f:bc:9f:10:4b:05:0c:23:44:e7:29:c9: ad:db:8a:d0:83:4b:53:84:eb:4c:2d:b8:d8:e8:53: 63:d7:99:ac:04:f6:8a:b0:7a:ad:f2:f8:bf:ab:dd: 5b:27:78:3a:40:09:6a:4b:57:02:da:9e:c0:70:c0: 39:2a:e3:5a:bd:ee:f2:48:e0:27:73:46:38:09:65: 44:b9:21:2b:ca:58:fe:0e:8c:66:bc:9e:7e:45:07: 31:b2:26:fc:af:3a:da:ba:77:c7:89:c7:62:1c:3c: 74:c1:8c:8b:a8:04:2d:1d:8a:fb:9d:8d:43:c0:66: 7d:8f:1a:26:f7:bf:b1:30:2b:5c:73:48:95:a8:a7: e3:97:be:00:a2:3e:95:79:f1:f9:79:c3:28:b2:11: 27:36:e1:2d:41:19:8e:28:77:af:00:61:b3:65:40: 18:6b:25:dc:8e:87:50:2e:f9:57:b4:20:27:58:be: 67:9f:32:ae:b8:48:9e:fa:65:35:39:72:34:cb:b5: a1:f7:c0:1c:a4:83:8f:d0:fa:37:d2:88:54:73:2a: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:04:E5:36:EB:6A:D0:B3:57:E6:48:85:8C:46:4A:15:A5:82:B3:A0 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:22:16:f3:e1:12:22:20:e0:d3:10:bb:ef:85:d8:62:85: af:5c:eb:9c:51:2c:bb:ca:c7:97:b1:e3:6c:ad:e9:c6:fb:56: d6:eb:d9:0d:16:34:a4:1d:b6:42:56:2f:7a:4b:2b:27:60:35: 8d:87:df:9b:70:a3:ec:86:d6:0e:7e:b7:c9:76:3c:d2:86:6e: 82:a6:be:6e:41:1b:1f:d6:5a:4b:ce:4c:86:24:90:76:7d:cf: 7f:41:72:6d:0d:a8:4b:04:de:91:24:43:d0:6e:0e:22:7b:85: b2:99:14:ab:67:a9:e2:df:83:18:5c:3d:04:2f:5a:9c:f4:77: eb:e6:92:b9:13:b4:d6:16:3f:58:2a:54:06:44:9b:c6:d6:95: b8:4e:bc:ab:70:ab:ee:17:1a:dd:c9:90:ef:9d:7f:9b:2a:e3: 76:19:7a:4f:7f:cb:c7:98:1b:0b:d7:2e:bf:b8:95:aa:6d:d2: 0e:cb:01:e7:2f:99:cd:cf:70:0d:34:31:97:7f:49:08:fd:2f: 8c:cc:73:06:69:de:9e:6f:36:45:85:b8:dd:4c:79:9e:d0:55: b4:45:3a:d7:c4:d5:14:c3:e2:56:76:4d:ea:35:e3:e5:10:c3: ff:dc:57:ec:ca:7b:d2:45:25:4f:b3:e2:68:57:f1:25:e7:ba: 56:f8:1d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNTMxMDM0MDA4WhcNMjUwNjA3MDM0MDA4WjAYMRYwFAYD VQQDEw02ODNhN2ExOC1kN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKlithRt2SArFDdiOa4APgcRbqCCXGMDpd/zMm5c4Wh8dB25+5mquPIKJZtS 7EOPvJ8QSwUMI0TnKcmt24rQg0tThOtMLbjY6FNj15msBPaKsHqt8vi/q91bJ3g6 QAlqS1cC2p7AcMA5KuNave7ySOAnc0Y4CWVEuSErylj+DoxmvJ5+RQcxsib8rzra unfHicdiHDx0wYyLqAQtHYr7nY1DwGZ9jxom97+xMCtcc0iVqKfjl74Aoj6VefH5 ecMoshEnNuEtQRmOKHevAGGzZUAYayXcjodQLvlXtCAnWL5nnzKuuEie+mU1OXI0 y7Wh98AcpIOP0Po30ohUcyrMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsE5Tbr atCzV+ZIhYxGShWlgrOgMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUDiIW8+ESIiDg0xC774XYYoWvXOucUSy7yseXseNsrenG+1bW69kN FjSkHbZCVi96SysnYDWNh9+bcKPshtYOfrfJdjzShm6Cpr5uQRsf1lpLzkyGJJB2 fc9/QXJtDahLBN6RJEPQbg4ie4WymRSrZ6ni34MYXD0EL1qc9Hfr5pK5E7TWFj9Y KlQGRJvG1pW4TryrcKvuFxrdyZDvnX+bKuN2GXpPf8vHmBsL1y6/uJWqbdIOywHn L5nNz3ANNDGXf0kI/S+MzHMGad6ebzZFhbjdTHme0FW0RTrXxNUUw+JWdk3qNePl EMP/3FfsynvSRSVPs+JoV/El57pW+B19 -----END CERTIFICATE-----Generated at Sat May 31 16:40:43 2025 by rpki-client