$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: 9OXPRO5T45lpzhA6in/AKWvVObTs2eEoIt9yOqdDNvY= Subject key identifier: BD:D1:56:C6:A2:81:4E:A4:6D:5B:B2:81:51:82:CB:87:18:4B:52:B5 Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:34:11 +0000 Manifest this update: Fri 25 Apr 2025 06:34:11 +0000 Manifest next update: Fri 02 May 2025 06:34:11 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: Eoak+3H04vXBXHfMij9CdRkBW0bAOnEaedB3DVIJRyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Apr 25 06:34:11 2025 GMT Not After : May 2 06:34:11 2025 GMT Subject: CN=680b2ce3-c319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:a4:e8:10:4b:72:ee:35:18:54:06:29:92: 5b:65:1a:79:0f:e0:c1:36:d0:11:2d:87:a7:4f:fb: b1:91:71:7b:79:d4:50:ca:af:3b:dc:4a:ec:5e:f1: f0:69:fe:79:e9:a3:56:10:e5:43:fe:d3:4d:aa:2f: d9:07:55:e5:97:19:55:aa:fd:e6:62:71:7b:f7:24: 1a:41:b1:37:94:54:82:86:49:08:be:e7:69:a9:1c: 57:2f:3d:8c:8e:fb:e9:a1:0c:d7:21:b3:50:c7:d3: ab:c1:8c:72:53:f4:c7:4a:ab:ed:c7:21:aa:8e:28: 4f:54:17:c2:62:fe:2e:98:8f:31:47:71:ff:cc:0a: b5:17:04:dc:7f:d0:48:39:c9:bd:f3:94:6f:c1:28: 1a:21:79:85:95:e7:ed:19:e4:4c:02:08:6a:67:44: c5:5c:9b:b2:ab:bb:84:d1:4e:9d:5e:25:f9:e2:d9: 6d:ac:94:b5:1a:b9:ba:77:a8:ef:e2:9a:c8:1a:aa: 49:2d:c3:d8:5a:77:95:82:27:37:07:61:a7:ad:99: 2e:fb:d2:fc:17:e1:0b:41:3d:1e:e6:09:f9:8e:1c: 33:94:c0:2b:c0:af:07:3d:c9:ed:10:3b:76:72:16: d0:ea:ea:4b:06:23:8c:e5:bb:77:fd:20:42:d4:5f: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D1:56:C6:A2:81:4E:A4:6D:5B:B2:81:51:82:CB:87:18:4B:52:B5 X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:84:2c:70:3e:21:44:bd:ba:ad:80:7a:b0:63:4d:05:76:db: 5d:7d:9a:69:e9:a2:7f:fc:d9:2b:17:c0:86:39:3d:20:bf:3b: 39:11:10:c3:64:45:7f:6d:43:c6:f2:5a:9b:44:26:a6:22:89: 31:f4:bb:96:37:e1:e8:f3:23:5a:07:a6:14:ff:9c:81:9a:b7: 27:22:e9:82:85:06:f8:ea:10:be:97:d6:1e:35:4a:d7:79:e2: 64:2a:9f:23:58:27:5b:b2:43:58:03:7c:8d:a9:fd:58:fc:78: a1:e9:ca:62:d4:33:d7:38:c0:fa:93:05:4d:f0:e5:3b:5f:21: 6b:55:14:7a:b0:f3:7c:5d:a3:c7:76:33:03:55:92:ea:95:df: 86:27:96:33:36:a8:13:81:1a:cf:fc:72:88:1e:d3:49:89:00: 52:c0:0c:4c:30:7d:16:ef:44:f6:f7:92:8a:e2:95:67:c3:ed: 99:0a:0f:aa:f5:5e:10:90:29:ae:3b:33:e1:ea:4e:e3:80:40: 18:28:39:e9:16:08:2e:f0:e2:ef:4d:50:1f:c1:12:f2:c7:c8: 18:3d:5b:c4:03:5d:84:2e:4e:3c:9e:2c:88:00:ed:3d:2f:85: c3:f5:6f:1a:ff:8b:9f:86:bb:48:12:98:67:23:32:2c:41:63: 0a:bd:18:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTA0MjUwNjM0MTFaFw0yNTA1MDIwNjM0MTFaMBgxFjAUBgNV BAMTDTY4MGIyY2UzLWMzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIHqToEEty7jUYVAYpkltlGnkP4ME20BEth6dP+7GRcXt51FDKrzvcSuxe8fBp /nnpo1YQ5UP+002qL9kHVeWXGVWq/eZicXv3JBpBsTeUVIKGSQi+52mpHFcvPYyO ++mhDNchs1DH06vBjHJT9MdKq+3HIaqOKE9UF8Ji/i6YjzFHcf/MCrUXBNx/0Eg5 yb3zlG/BKBoheYWV5+0Z5EwCCGpnRMVcm7Kru4TRTp1eJfni2W2slLUaubp3qO/i msgaqkktw9had5WCJzcHYaetmS770vwX4QtBPR7mCfmOHDOUwCvArwc9ye0QO3Zy FtDq6ksGI4zlu3f9IELUX7kDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvdFWxqKB TqRtW7KBUYLLhxhLUrUwHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALyELHA+IUS9uq2AerBjTQV22119mmnpon/82SsXwIY5PSC/OzkREMNk RX9tQ8byWptEJqYiiTH0u5Y34ejzI1oHphT/nIGatyci6YKFBvjqEL6X1h41Std5 4mQqnyNYJ1uyQ1gDfI2p/Vj8eKHpymLUM9c4wPqTBU3w5TtfIWtVFHqw83xdo8d2 MwNVkuqV34YnljM2qBOBGs/8coge00mJAFLADEwwfRbvRPb3korilWfD7ZkKD6r1 XhCQKa47M+HqTuOAQBgoOekWCC7w4u9NUB/BEvLHyBg9W8QDXYQuTjyeLIgA7T0v hcP1bxr/i5+Gu0gSmGcjMixBYwq9GLA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:33 2025 by rpki-client