$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: yMHRS8mCQkkWy1Ifz/yTlAOQPfSdtvfKfNAkfwaO0gk= Subject key identifier: 9C:81:29:A4:05:BF:7E:8D:37:FD:E0:0E:62:BE:8D:D9:9B:51:ED:E0 Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 31EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 31EB Signing time: Sat 31 May 2025 15:24:28 +0000 Manifest this update: Sat 31 May 2025 15:24:27 +0000 Manifest next update: Sat 07 Jun 2025 15:24:27 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: 5vXGND1D4Do5C58MnYIuTcJAUFwQDsZfu2HLW/ZnSsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12779 (0x31eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: May 31 15:24:27 2025 GMT Not After : Jun 7 15:24:27 2025 GMT Subject: CN=683b1f2b-0cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:a9:8a:c0:a6:e3:ee:7c:32:50:cf:cd:39: 1a:64:53:7e:ae:d6:79:74:8b:b9:55:b3:85:69:c5: 21:f6:9a:2f:3c:9c:c4:f7:ff:21:17:91:d6:0a:b1: 0b:6d:ff:be:4e:7e:90:28:d6:ea:73:1b:79:e7:82: 9c:10:09:f0:70:00:b1:f6:37:46:4f:fa:09:83:d7: 3b:a9:fe:c1:97:8a:2d:3d:da:f1:71:ce:8b:4a:4d: c0:56:e3:bc:a1:f2:5c:1c:1b:18:f6:73:27:91:1c: e0:59:fd:70:d1:a5:91:92:7b:11:fa:97:9b:22:da: 04:7a:08:39:02:de:dc:42:44:8a:72:62:83:2c:27: c0:fd:1c:22:0e:56:2c:d0:99:aa:aa:2c:ab:46:93: 82:83:92:3a:fe:5d:cf:7f:26:5f:60:21:a7:0d:0a: 71:e0:c7:fc:8a:ca:fb:e8:16:33:17:86:02:c0:c9: e2:53:09:60:9c:bc:db:8a:0d:af:f7:b2:c3:7e:d2: cb:9f:ed:8f:14:82:15:65:5f:19:b3:52:b3:a6:05: ea:17:1f:3e:0f:10:2e:6a:e6:b2:03:74:cf:06:84: 51:e1:5f:f7:5b:07:cc:77:1f:50:9f:06:3d:ca:d3: e0:e7:8b:11:5f:66:78:b2:97:9b:08:37:9f:b0:fe: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:29:A4:05:BF:7E:8D:37:FD:E0:0E:62:BE:8D:D9:9B:51:ED:E0 X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f0:4d:11:07:ea:c9:3c:47:0e:48:ea:12:51:13:5b:16:8d: 8b:7d:36:c9:87:b8:77:75:b6:ae:0f:62:2c:c9:1d:49:cd:ae: 21:83:de:84:01:24:9c:d6:85:a9:58:ef:5e:30:8a:a0:cf:13: e1:12:ab:17:65:58:03:81:13:13:97:30:01:82:1d:9a:e5:6b: db:08:df:dc:bd:8b:84:5f:6a:7f:f4:41:5b:d4:b2:5c:6b:cc: 88:5c:0f:7c:51:e8:6e:8e:35:27:2f:0a:d3:f4:e8:1c:9a:3f: 82:97:ab:36:be:14:65:46:0e:da:9b:7b:39:f7:f0:27:e6:41: 7c:fb:89:fb:8f:28:90:91:3d:da:da:28:ef:96:ad:a9:0f:29: 65:46:df:b9:5f:04:60:71:17:f9:26:ef:a6:e5:f9:9d:35:cf: b0:99:18:36:50:3c:79:a1:12:3e:58:ae:00:18:b4:60:6d:1f: 49:82:e4:d2:0a:33:98:ec:41:b1:2d:88:f0:ce:9d:7c:f9:02: d7:bc:c1:1b:2c:6f:3b:a3:eb:00:72:8c:17:66:21:dd:7b:dd: f4:3a:6e:41:f7:58:81:f1:f0:fb:98:c1:ca:53:01:4d:86:06: 36:30:31:cf:3e:3f:c3:78:ea:99:38:32:a6:b9:44:e3:1f:20: d4:ab:0f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUwNTMxMTUyNDI3WhcNMjUwNjA3MTUyNDI3WjAYMRYwFAYD VQQDEw02ODNiMWYyYi0wY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wmpisCm4+58MlDPzTkaZFN+rtZ5dIu5VbOFacUh9povPJzE9/8hF5HWCrEL bf++Tn6QKNbqcxt554KcEAnwcACx9jdGT/oJg9c7qf7Bl4otPdrxcc6LSk3AVuO8 ofJcHBsY9nMnkRzgWf1w0aWRknsR+pebItoEegg5At7cQkSKcmKDLCfA/RwiDlYs 0JmqqiyrRpOCg5I6/l3PfyZfYCGnDQpx4Mf8isr76BYzF4YCwMniUwlgnLzbig2v 97LDftLLn+2PFIIVZV8Zs1KzpgXqFx8+DxAuauayA3TPBoRR4V/3WwfMdx9QnwY9 ytPg54sRX2Z4spebCDefsP7cgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyBKaQF v36NN/3gDmK+jdmbUe3gMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC38E0RB+rJPEcOSOoSURNbFo2LfTbJh7h3dbauD2IsyR1Jza4hg96E ASSc1oWpWO9eMIqgzxPhEqsXZVgDgRMTlzABgh2a5WvbCN/cvYuEX2p/9EFb1LJc a8yIXA98UehujjUnLwrT9Ogcmj+Cl6s2vhRlRg7am3s59/An5kF8+4n7jyiQkT3a 2ijvlq2pDyllRt+5XwRgcRf5Ju+m5fmdNc+wmRg2UDx5oRI+WK4AGLRgbR9JguTS CjOY7EGxLYjwzp18+QLXvMEbLG87o+sAcowXZiHde930Om5B91iB8fD7mMHKUwFN hgY2MDHPPj/DeOqZODKmuUTjHyDUqw+f -----END CERTIFICATE-----Generated at Sat May 31 17:30:19 2025 by rpki-client