$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 9adqwKmfHFmMsQoRi4rC+nmYuUI0IH1d944i0A9onJ4= Subject key identifier: 90:2A:AF:6B:9E:71:9C:70:F5:11:16:11:F9:FA:95:6F:12:86:ED:60 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0133 Signing time: Fri 25 Apr 2025 03:38:26 +0000 Manifest this update: Fri 25 Apr 2025 03:38:25 +0000 Manifest next update: Fri 02 May 2025 03:38:25 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: RDlJpCUMl/ZZ7hjm4Q+r4yZmCubkqLrZJh3F7bEJDB8=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Apr 25 03:38:25 2025 GMT Not After : May 2 03:38:25 2025 GMT Subject: CN=680b03b1-231d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:02:38:9f:a2:43:e4:a7:58:62:ff:68:dd: 16:5c:f3:e5:ee:66:d5:52:02:79:9a:73:3a:c3:9d: fa:6b:f2:4b:43:58:23:25:eb:92:14:0b:9b:ca:9c: ce:72:aa:a4:0f:56:e4:ca:5a:b0:99:f3:11:88:87: 43:df:c9:95:db:d2:09:88:be:56:f5:35:13:81:04: 0d:e6:80:39:44:df:7d:23:aa:d1:a3:43:03:dc:d8: 71:d7:c1:d9:66:c8:0e:c0:65:e7:47:ae:89:99:cc: 34:e9:88:d7:a8:9f:d9:1b:b3:67:9e:45:d9:ee:e1: e5:b5:bf:a0:73:51:0f:ef:34:52:09:82:f3:9f:be: db:8b:6f:8c:0c:32:98:2b:8f:a4:8b:35:6f:08:47: da:71:1f:6d:2f:48:6f:b3:07:62:ca:e4:f2:98:93: 41:66:ad:cf:8f:71:33:6b:23:97:a9:d1:38:7b:0b: 80:5e:44:bb:30:0e:4b:6e:88:3e:6a:4e:5d:86:34: 37:8b:47:6b:c4:8f:7d:ce:15:a4:16:f4:f0:38:49: 0f:a0:c4:ba:fa:9b:88:f2:0a:75:42:db:f2:64:a1: 61:32:d4:61:9d:09:bb:75:50:cf:67:f6:72:4f:b1: bc:b9:3f:6d:fa:06:a8:da:e8:7d:e5:69:c9:b2:08: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:AF:6B:9E:71:9C:70:F5:11:16:11:F9:FA:95:6F:12:86:ED:60 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:22:8e:7e:d1:51:22:8b:01:dc:8d:a2:16:e4:59:d2:e2:36: 5d:82:04:a0:e3:a8:93:1c:91:bc:04:ec:f4:43:5a:04:75:64: 20:1f:99:15:7b:28:38:b9:1a:41:86:36:8c:70:5a:77:50:82: 13:c3:6a:43:81:c6:fa:0b:f6:f8:34:af:2e:ef:cb:66:9e:c9: e6:04:ab:12:b3:5f:f2:af:a0:64:8d:77:21:51:53:c1:5a:ff: aa:9e:e1:7c:32:09:98:25:66:a5:b3:aa:6d:8b:76:1d:d9:47: 1a:cd:54:20:e7:a6:a8:b5:f0:6f:0f:f7:06:c0:d6:cf:df:fa: 66:61:ff:f0:3d:06:b7:68:0d:e4:d6:47:0e:5d:6b:d4:96:67: fc:7a:3b:63:d6:60:f5:e3:d4:5c:1c:78:d5:f4:6f:40:a3:0e: 62:fe:95:b5:c6:d0:cd:81:30:90:e0:62:d2:1a:19:0d:58:c6: 9a:18:12:8f:2b:6f:cf:a0:3e:e0:cc:73:80:ed:27:e6:e7:72: 11:3e:e3:67:53:52:4a:d2:0e:55:9e:97:9a:12:75:76:3c:c9: df:69:1f:fd:6e:25:5a:1b:bd:4f:01:4a:df:54:af:c0:cb:0e: f8:a2:43:a1:7a:2b:8f:08:04:32:7f:9c:8f:9d:56:32:0e:77: 59:dd:dd:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwNDI1MDMzODI1WhcNMjUwNTAyMDMzODI1WjAYMRYwFAYD VQQDEw02ODBiMDNiMS0yMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn10COJ+iQ+SnWGL/aN0WXPPl7mbVUgJ5mnM6w536a/JLQ1gjJeuSFAubypzO cqqkD1bkylqwmfMRiIdD38mV29IJiL5W9TUTgQQN5oA5RN99I6rRo0MD3Nhx18HZ ZsgOwGXnR66Jmcw06YjXqJ/ZG7NnnkXZ7uHltb+gc1EP7zRSCYLzn77bi2+MDDKY K4+kizVvCEfacR9tL0hvswdiyuTymJNBZq3Pj3EzayOXqdE4ewuAXkS7MA5Lbog+ ak5dhjQ3i0drxI99zhWkFvTwOEkPoMS6+puI8gp1QtvyZKFhMtRhnQm7dVDPZ/Zy T7G8uT9t+gao2uh95WnJsgizDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAqr2ue cZxw9REWEfn6lW8Shu1gMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcIo5+0VEiiwHcjaIW5FnS4jZdggSg46iTHJG8BOz0Q1oEdWQgH5kV eyg4uRpBhjaMcFp3UIITw2pDgcb6C/b4NK8u78tmnsnmBKsSs1/yr6BkjXchUVPB Wv+qnuF8MgmYJWals6pti3Yd2UcazVQg56aotfBvD/cGwNbP3/pmYf/wPQa3aA3k 1kcOXWvUlmf8ejtj1mD149RcHHjV9G9Aow5i/pW1xtDNgTCQ4GLSGhkNWMaaGBKP K2/PoD7gzHOA7Sfm53IRPuNnU1JK0g5VnpeaEnV2PMnfaR/9biVaG71PAUrfVK/A yw74okOheiuPCAQyf5yPnVYyDndZ3d1G -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:18 2025 by rpki-client