$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: gI9apZ+iXLAiM6gvNd24d6hhytwvCpMh9d6HkCQqvv8= Subject key identifier: 13:C2:05:2A:B1:6C:DE:06:24:C5:46:0D:3F:FA:A8:EA:FD:5E:7C:E1 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 97 Signing time: Fri 25 Apr 2025 05:22:08 +0000 Manifest this update: Fri 25 Apr 2025 05:22:08 +0000 Manifest next update: Fri 02 May 2025 05:22:08 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: yC58UzzFbmzS9L+9ZuuCKP+bdqvkOjIYCKIYNFUWaDk=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Apr 25 05:22:08 2025 GMT Not After : May 2 05:22:08 2025 GMT Subject: CN=680b1c00-b1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:59:00:c7:3e:7b:86:8b:3d:58:4b:e0:6c: 79:d3:79:a1:76:7c:86:08:69:04:d5:96:2f:b4:f5: 03:75:7f:6f:b1:fd:49:6b:57:09:2f:f1:00:9c:f2: 85:10:2b:f6:0b:f6:bf:44:86:36:1d:6b:bb:20:31: f7:0d:66:c0:1d:6f:2b:57:ef:cf:e8:0f:47:40:53: 0d:27:c7:da:9e:e6:04:68:a7:ba:5c:d5:53:fa:09: 6d:c9:20:ce:a8:ca:0b:a7:17:ca:4a:30:5b:03:ac: 1d:3b:1b:33:7f:b1:54:74:c0:9f:54:91:f7:a4:aa: 6f:91:ba:48:1f:0c:f0:b2:d7:f4:73:9a:ab:92:a6: fe:eb:85:c6:a7:be:34:32:2f:5d:c2:07:55:74:d6: 72:1d:51:5e:18:3d:22:7a:88:91:db:32:8d:82:f6: 12:76:3b:76:1d:7d:5d:15:49:15:2c:87:ba:df:60: ca:ec:a7:1a:57:72:a6:6b:8b:1b:11:f5:9e:73:a2: 9f:c8:7f:9a:c2:81:b6:0c:cb:aa:17:55:f3:ec:4f: b5:4c:80:36:10:a2:8d:43:8b:3b:63:9b:33:a2:fa: d3:1a:3a:e2:66:82:4f:61:1e:5e:e5:15:9b:74:57: 43:74:bc:4c:95:c7:ab:a9:14:8c:b1:de:36:78:a4: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:05:2A:B1:6C:DE:06:24:C5:46:0D:3F:FA:A8:EA:FD:5E:7C:E1 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f5:3d:e3:46:63:13:bf:14:ba:2c:61:5b:d3:87:ce:e1:57: 83:00:52:83:87:60:2d:7e:75:21:01:ac:80:b5:50:b1:69:eb: ba:50:ae:35:bb:b8:44:f7:5f:36:24:70:e2:36:8a:73:ea:c4: 76:88:ed:0b:5a:38:54:27:6d:aa:57:43:f4:24:5d:41:50:ae: c2:d2:5b:27:8b:9b:df:79:03:f3:74:7c:9d:77:be:f8:98:05: 23:3d:bb:76:9f:92:b5:82:5a:a8:9a:12:85:87:78:bf:9d:c6: 17:3e:a8:a7:8a:6c:39:5d:1d:12:be:8d:d0:c9:cc:9e:1a:f4: bb:88:e4:e9:14:88:5e:c8:69:1a:07:e6:92:a2:0a:94:57:c1: fd:4c:18:1d:8e:8e:36:ec:d9:55:f5:59:0a:b5:e4:c7:db:a4: 5f:a4:c5:4e:f4:f8:82:a2:c2:4a:33:d1:09:a5:c4:fc:eb:92: e4:a2:1d:45:8e:a5:14:2a:71:de:8d:0a:64:1e:af:91:32:4c: eb:59:3c:bc:da:c6:5c:60:1a:43:84:0d:6b:45:0f:fa:5b:9e: a7:6c:62:04:ff:34:dd:99:32:84:a7:72:f0:1d:47:fe:4c:f0: 2f:58:bb:c3:70:80:35:58:21:5e:bf:03:43:a5:04:58:3c:7d: 10:78:61:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwNDI1MDUyMjA4WhcNMjUwNTAyMDUyMjA4WjAYMRYwFAYD VQQDEw02ODBiMWMwMC1iMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD5ZAMc+e4aLPVhL4Gx503mhdnyGCGkE1ZYvtPUDdX9vsf1Ja1cJL/EAnPKF ECv2C/a/RIY2HWu7IDH3DWbAHW8rV+/P6A9HQFMNJ8fanuYEaKe6XNVT+gltySDO qMoLpxfKSjBbA6wdOxszf7FUdMCfVJH3pKpvkbpIHwzwstf0c5qrkqb+64XGp740 Mi9dwgdVdNZyHVFeGD0ieoiR2zKNgvYSdjt2HX1dFUkVLIe632DK7KcaV3Kma4sb EfWec6KfyH+awoG2DMuqF1Xz7E+1TIA2EKKNQ4s7Y5szovrTGjriZoJPYR5e5RWb dFdDdLxMlcerqRSMsd42eKSABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPCBSqx bN4GJMVGDT/6qOr9XnzhMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA69T3jRmMTvxS6LGFb04fO4VeDAFKDh2AtfnUhAayAtVCxaeu6UK41 u7hE9182JHDiNopz6sR2iO0LWjhUJ22qV0P0JF1BUK7C0lsni5vfeQPzdHydd774 mAUjPbt2n5K1glqomhKFh3i/ncYXPqinimw5XR0Svo3QycyeGvS7iOTpFIheyGka B+aSogqUV8H9TBgdjo427NlV9VkKteTH26RfpMVO9PiCosJKM9EJpcT865Lkoh1F jqUUKnHejQpkHq+RMkzrWTy82sZcYBpDhA1rRQ/6W56nbGIE/zTdmTKEp3LwHUf+ TPAvWLvDcIA1WCFevwNDpQRYPH0QeGGp -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:20 2025 by rpki-client