$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: 7XJekcso14Bv4poAXNqnr/PhqfEb3Sswnnb6H0TyBGU= Subject key identifier: 76:47:2B:FA:69:33:1E:25:26:F0:6F:FD:3D:F4:1E:28:0A:19:E3:A9 Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0D4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0D3C Signing time: Thu 24 Apr 2025 17:57:53 +0000 Manifest this update: Thu 24 Apr 2025 17:57:52 +0000 Manifest next update: Thu 01 May 2025 17:57:52 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: 1AFHyYSWt46u5LbL3xYXAQuME/xkUulZAwISTVRfJdU=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3402 (0xd4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Apr 24 17:57:52 2025 GMT Not After : May 1 17:57:52 2025 GMT Subject: CN=680a7ba0-18b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:69:86:38:2e:12:de:0c:95:bd:7b:5a:44: ad:79:69:c8:9a:f8:18:65:e2:2f:5d:d7:bd:10:53: 26:c9:d9:54:a5:38:9c:f7:35:e3:3a:8b:d5:ca:b6: d1:38:31:ec:2e:ec:37:c7:9b:23:00:10:86:58:3c: fb:d4:90:78:d6:74:66:14:2c:cc:d4:bb:d8:b6:ef: ea:46:33:dc:e2:84:14:0b:3e:67:9c:26:14:1f:1a: cc:a0:35:4e:93:18:b8:53:d4:05:a4:e7:b5:e7:0b: f4:c8:b2:af:e9:4a:13:33:65:b6:87:f5:c4:c0:67: d0:ed:26:61:8a:65:8f:f3:da:2c:b6:01:38:5d:17: 98:8d:3a:8a:28:50:fd:c1:46:bd:17:6d:b3:15:04: f7:ca:ba:c2:4b:5b:50:d5:1a:26:df:69:8f:e8:75: e8:e5:3f:b0:e1:61:a8:ee:50:5d:1a:26:91:be:90: 4f:d0:70:36:bf:c9:ce:d5:d8:4e:18:30:86:1f:e8: 01:0c:aa:82:c8:eb:91:22:85:f0:36:a6:76:a7:bb: 2b:32:b4:4a:9a:39:b4:91:68:de:5a:78:99:c8:cb: f1:1e:57:bc:a8:58:36:09:f5:66:78:4d:68:c8:19: 9e:4a:c3:08:38:dc:83:c0:d6:29:55:53:ad:ad:77: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:47:2B:FA:69:33:1E:25:26:F0:6F:FD:3D:F4:1E:28:0A:19:E3:A9 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6f:59:77:e3:96:27:3f:c6:e9:6d:11:e9:8f:80:c6:a7:3d: d3:cb:19:40:70:de:73:b2:d1:83:8f:01:1d:28:3c:71:a3:cd: 01:e5:78:ce:af:15:ba:7d:49:02:73:db:91:b8:6f:22:bf:66: 3e:83:d3:6b:bd:a4:df:80:a5:4d:17:0d:8b:8e:29:5d:14:2c: ba:b8:fc:9f:4f:49:55:dc:50:99:9c:97:4c:17:d5:69:19:ad: b9:1a:40:1f:8d:fe:e4:7a:dc:8a:44:9d:a2:13:71:d6:9f:4d: aa:e1:1a:c1:f4:8a:ff:a4:d5:01:be:3f:24:34:4b:58:38:5f: 4f:38:6d:ec:b1:df:a0:f2:33:4f:5d:99:a7:62:47:45:b1:cb: 05:26:06:7b:71:25:b6:25:b9:cb:82:dd:e5:9d:84:03:47:da: 14:71:ee:d5:fa:95:98:30:69:0d:08:e5:7a:a3:06:0b:84:2f: fa:a4:20:a6:c6:3c:82:3c:bf:0c:70:0f:5a:39:c6:22:53:9c: d6:0a:7f:19:91:83:ab:4f:92:23:b0:24:be:64:6e:5e:c6:5d: 3f:33:4a:aa:81:5d:b2:27:54:8b:09:53:8d:bc:bb:f0:35:03: 26:cb:fd:e2:78:a6:39:f6:df:ae:40:04:b0:36:b7:08:5c:0e: 41:d1:f6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjUwNDI0MTc1NzUyWhcNMjUwNTAxMTc1NzUyWjAYMRYwFAYD VQQDEw02ODBhN2JhMC0xOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKZphjguEt4Mlb17WkSteWnImvgYZeIvXde9EFMmydlUpTic9zXjOovVyrbR ODHsLuw3x5sjABCGWDz71JB41nRmFCzM1LvYtu/qRjPc4oQUCz5nnCYUHxrMoDVO kxi4U9QFpOe15wv0yLKv6UoTM2W2h/XEwGfQ7SZhimWP89ostgE4XReYjTqKKFD9 wUa9F22zFQT3yrrCS1tQ1Rom32mP6HXo5T+w4WGo7lBdGiaRvpBP0HA2v8nO1dhO GDCGH+gBDKqCyOuRIoXwNqZ2p7srMrRKmjm0kWjeWniZyMvxHle8qFg2CfVmeE1o yBmeSsMIONyDwNYpVVOtrXfcdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZHK/pp Mx4lJvBv/T30HigKGeOpMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvb1l345YnP8bpbRHpj4DGpz3TyxlAcN5zstGDjwEdKDxxo80B5XjO rxW6fUkCc9uRuG8iv2Y+g9NrvaTfgKVNFw2LjildFCy6uPyfT0lV3FCZnJdMF9Vp Ga25GkAfjf7ketyKRJ2iE3HWn02q4RrB9Ir/pNUBvj8kNEtYOF9POG3ssd+g8jNP XZmnYkdFscsFJgZ7cSW2JbnLgt3lnYQDR9oUce7V+pWYMGkNCOV6owYLhC/6pCCm xjyCPL8McA9aOcYiU5zWCn8ZkYOrT5IjsCS+ZG5exl0/M0qqgV2yJ1SLCVONvLvw NQMmy/3ieKY59t+uQASwNrcIXA5B0fbb -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:37 2025 by rpki-client