$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft File: j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json) Hash identifier: 02TEJ+egX9jNA3tex2He/dRn0iuWrajXmkZ7hTnqfB8= Subject key identifier: B7:0D:14:A9:4F:20:5C:3A:0C:E4:C9:70:C9:5C:4E:3E:79:53:70:22 Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 Certificate issuer: /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Certificate serial: 1E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft Manifest number: 1F13 Signing time: Thu 24 Apr 2025 16:05:26 +0000 Manifest this update: Thu 24 Apr 2025 16:05:25 +0000 Manifest next update: Thu 01 May 2025 16:05:25 +0000 Files and hashes: 1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: 5hMsE6xuRewsmJZYz1cGcWY2L4IwoPg8TitX4VoHmp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7732 (0x1e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB93, serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Validity Not Before: Apr 24 16:05:25 2025 GMT Not After : May 1 16:05:25 2025 GMT Subject: CN=680a6146-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:62:72:00:fe:95:78:e8:e0:82:6d:f3:e5: 4d:3b:ca:fe:80:3d:c6:d3:fe:1a:d8:f9:fc:a0:4a: 8f:71:4d:ac:98:80:a1:48:79:f2:ac:23:01:a7:18: 73:c2:0f:54:84:bb:a5:d3:52:a9:54:e8:be:e0:be: 8e:72:aa:5c:2d:33:d5:cb:17:b5:1a:80:83:03:2b: 2f:c3:f4:3d:e6:ff:3e:bf:5a:a2:3e:91:6a:89:4e: 1b:56:1b:ca:98:5b:bb:9a:01:d3:e4:00:8f:2e:b3: 0d:22:59:1f:33:2a:c6:cb:c7:44:73:a9:38:ce:1a: 93:ea:1b:bd:97:f7:90:96:00:88:49:05:ba:28:de: 9d:bb:26:35:ad:d9:14:6d:63:af:8d:24:f1:a5:0a: 29:8d:fb:b8:c6:fd:4b:bc:99:be:62:f2:80:c7:bf: 29:c1:e7:a2:13:c0:ec:fb:19:6b:59:33:36:32:53: 5b:e1:37:ef:a9:d1:08:4f:79:43:bd:b0:cd:17:ee: fb:ed:1d:73:d6:37:76:a0:bb:c6:1a:8b:8d:0b:bd: 7a:1b:9f:d8:b4:13:51:e9:d5:07:da:f0:5f:d5:3d: 76:cf:b7:90:02:ac:64:00:c5:5b:de:0f:6e:55:c0: 07:17:33:ba:d9:45:e6:31:4f:a8:03:fe:ab:b1:7d: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:14:A9:4F:20:5C:3A:0C:E4:C9:70:C9:5C:4E:3E:79:53:70:22 X509v3 Authority Key Identifier: keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:03:65:4b:8f:9f:9f:79:ad:23:ce:0d:ff:41:1c:f3:aa:c8: f6:90:39:d3:f4:6b:e4:c5:31:52:75:3f:b7:67:6c:02:8e:41: bc:2e:84:a6:7a:ed:5d:aa:79:99:48:9b:f3:35:eb:e7:b1:10: 9c:be:8b:9d:f1:ad:9d:2d:ad:6c:f5:0a:2a:0b:0a:c5:25:1b: ad:52:b3:b4:44:cd:95:a0:2c:cc:61:f3:f2:7f:4f:9a:c0:a9: f7:39:54:2c:4b:48:0c:fe:d0:e7:dd:3b:79:10:00:fe:4f:8c: ba:2a:1e:e5:5b:0b:3b:87:9d:5c:10:26:bf:50:d0:a8:f0:bf: 30:39:ac:bf:ac:8b:9b:15:2b:64:14:f3:7e:e0:0a:e5:01:b7: de:d4:63:5a:47:1f:1c:a0:9e:e1:17:b5:47:32:65:a1:18:f0: 42:1e:3e:98:43:c3:30:11:80:b6:bd:e0:7b:23:6c:f8:de:d4: f0:e4:7d:8f:be:7d:88:09:1b:7d:66:69:38:a2:12:70:47:48: bc:e2:fa:de:52:23:64:f1:7b:aa:30:6a:51:5d:fb:85:d0:06: b4:c0:6a:1a:52:d8:4a:5b:12:a4:83:60:8a:0e:be:49:a0:d7: 85:9a:1a:ea:77:60:6d:6f:90:65:8c:0e:a8:ab:64:21:17:5a: 7c:f2:36:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCOTMxMTAvBgNVBAUTKDhGQzNGOERFNTIzQUYyOURCMjRBMTU5MEZENDBBMDQ0 NzVBRTBBMjUwHhcNMjUwNDI0MTYwNTI1WhcNMjUwNTAxMTYwNTI1WjAYMRYwFAYD VQQDEw02ODBhNjE0Ni1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvclicgD+lXjo4IJt8+VNO8r+gD3G0/4a2Pn8oEqPcU2smIChSHnyrCMBpxhz wg9UhLul01KpVOi+4L6OcqpcLTPVyxe1GoCDAysvw/Q95v8+v1qiPpFqiU4bVhvK mFu7mgHT5ACPLrMNIlkfMyrGy8dEc6k4zhqT6hu9l/eQlgCISQW6KN6duyY1rdkU bWOvjSTxpQopjfu4xv1LvJm+YvKAx78pweeiE8Ds+xlrWTM2MlNb4TfvqdEIT3lD vbDNF+777R1z1jd2oLvGGouNC716G5/YtBNR6dUH2vBf1T12z7eQAqxkAMVb3g9u VcAHFzO62UXmMU+oA/6rsX2phQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcNFKlP IFw6DOTJcMlcTj55U3AiMB8GA1UdIwQYMBaAFI/D+N5SOvKdskoVkP1AoER1rgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhwMnlTaFdRX1VDZ1JIV3VD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4UDQzbEk2OHAyeVNoV1FfVUNnUkhXdUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhw MnlTaFdRX1VDZ1JIV3VDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzA2VLj5+fea0jzg3/QRzzqsj2kDnT9GvkxTFSdT+3Z2wCjkG8LoSm eu1dqnmZSJvzNevnsRCcvoud8a2dLa1s9QoqCwrFJRutUrO0RM2VoCzMYfPyf0+a wKn3OVQsS0gM/tDn3Tt5EAD+T4y6Kh7lWws7h51cECa/UNCo8L8wOay/rIubFStk FPN+4ArlAbfe1GNaRx8coJ7hF7VHMmWhGPBCHj6YQ8MwEYC2veB7I2z43tTw5H2P vn2ICRt9Zmk4ohJwR0i84vreUiNk8XuqMGpRXfuF0Aa0wGoaUthKWxKkg2CKDr5J oNeFmhrqd2Btb5BljA6oq2QhF1p88jYl -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:00 2025 by rpki-client