$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: hVfnvqZCr2ch45WhkN3r0LyxH3vRvZU3afRCWunKivU= Subject key identifier: 0C:EC:CE:1A:F0:82:1B:30:46:17:71:88:FA:2E:B8:F0:6D:3B:22:AF Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 0762 Signing time: Thu 24 Apr 2025 21:21:44 +0000 Manifest this update: Thu 24 Apr 2025 21:21:43 +0000 Manifest next update: Thu 01 May 2025 21:21:43 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: Oo+sE5kyzW5rnPLECaEXHQ16A9/2CAIz0NDrHlySbG0=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Apr 24 21:21:43 2025 GMT Not After : May 1 21:21:43 2025 GMT Subject: CN=680aab68-f1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:26:0e:6b:20:81:30:86:bc:20:68:9c:e4: 6a:b2:81:dd:2b:c4:54:1a:ca:36:33:07:30:25:26: de:1b:80:55:8a:3a:ed:45:e6:cd:79:e8:2b:79:50: d4:b2:fd:5c:2a:81:e3:e6:0d:21:6b:af:0c:6c:8f: 97:79:50:21:5f:6a:eb:03:ea:15:c4:34:56:09:bf: e2:00:3a:51:5e:94:89:66:03:62:4c:2e:e4:62:02: 9d:d9:c4:b2:91:3e:53:af:33:e2:fb:a5:9c:95:be: 89:80:2b:af:49:82:b1:ca:e2:f2:3f:67:cd:02:e4: 50:d9:a4:75:17:54:fc:85:13:e6:b3:2f:4f:ab:82: 3a:8e:ce:f4:72:84:90:d1:bc:5a:79:2a:ec:1a:de: a1:74:d1:6a:88:b8:66:8e:a2:ee:31:1c:37:88:3a: 9a:8e:c3:cb:95:83:0f:6a:99:c8:ef:d4:b5:7c:16: 85:89:04:7c:1d:a6:7e:93:af:92:d0:bf:95:aa:b6: 08:71:61:b5:d2:db:29:b4:4f:b4:1a:7e:cb:97:36: 46:c7:68:f6:26:25:61:e6:9d:c1:8d:41:e7:69:50: 96:8e:82:97:a4:3a:0d:d8:f0:62:1f:77:34:1b:e1: 3e:44:37:02:7a:cb:8a:f3:af:aa:e8:9f:53:01:f8: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:CE:1A:F0:82:1B:30:46:17:71:88:FA:2E:B8:F0:6D:3B:22:AF X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:55:42:4b:44:2a:2e:49:13:d9:51:8f:e2:16:39:b1:35:9d: 04:49:18:d2:c8:5c:e7:43:91:a7:f6:d9:b1:7c:78:8a:e8:0c: 32:32:c6:f1:53:d2:d2:0a:0b:96:c8:33:2f:7c:98:ca:da:5b: c5:64:ed:85:17:5d:ff:53:c8:24:93:b4:0e:2b:85:2e:0d:0d: 6a:d5:f2:47:f7:1b:68:70:70:42:d0:41:32:31:a6:29:c5:79: 8f:13:37:65:c3:e2:7d:3d:08:1f:a3:cb:8f:09:f9:12:ff:e0: 1f:d7:45:df:b4:a4:97:df:67:ed:4e:1b:3b:cb:a6:58:2c:28: 5d:38:0b:40:24:b4:05:11:2c:99:37:db:6a:91:3f:b4:d3:e1: 0b:7a:c1:f3:18:ea:2e:cd:97:22:44:aa:01:67:d9:52:23:1c: bc:21:62:ff:9a:59:74:0e:a0:85:c7:63:b3:53:a1:66:cc:2d: c0:cb:26:e1:a1:d7:ec:4d:be:23:18:33:77:14:8c:ae:0f:37: 4d:84:b4:aa:73:1f:0b:b2:93:f8:49:60:90:3e:3d:7d:1f:cc: 65:8a:4d:be:aa:b9:f0:c5:db:30:34:2e:ad:d3:19:64:8a:7e: 9c:a7:d6:c4:36:ef:49:96:71:e4:3d:6a:83:68:b2:94:0a:bb: 62:c4:34:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjUwNDI0MjEyMTQzWhcNMjUwNTAxMjEyMTQzWjAYMRYwFAYD VQQDEw02ODBhYWI2OC1mMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlesmDmsggTCGvCBonORqsoHdK8RUGso2MwcwJSbeG4BVijrtRebNeegreVDU sv1cKoHj5g0ha68MbI+XeVAhX2rrA+oVxDRWCb/iADpRXpSJZgNiTC7kYgKd2cSy kT5TrzPi+6Wclb6JgCuvSYKxyuLyP2fNAuRQ2aR1F1T8hRPmsy9Pq4I6js70coSQ 0bxaeSrsGt6hdNFqiLhmjqLuMRw3iDqajsPLlYMPapnI79S1fBaFiQR8HaZ+k6+S 0L+VqrYIcWG10tsptE+0Gn7LlzZGx2j2JiVh5p3BjUHnaVCWjoKXpDoN2PBiH3c0 G+E+RDcCesuK86+q6J9TAfgl5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzszhrw ghswRhdxiPouuPBtOyKvMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLVUJLRCouSRPZUY/iFjmxNZ0ESRjSyFznQ5Gn9tmxfHiK6AwyMsbx U9LSCguWyDMvfJjK2lvFZO2FF13/U8gkk7QOK4UuDQ1q1fJH9xtocHBC0EEyMaYp xXmPEzdlw+J9PQgfo8uPCfkS/+Af10XftKSX32ftThs7y6ZYLChdOAtAJLQFESyZ N9tqkT+00+ELesHzGOouzZciRKoBZ9lSIxy8IWL/mll0DqCFx2OzU6FmzC3Ayybh odfsTb4jGDN3FIyuDzdNhLSqcx8LspP4SWCQPj19H8xlik2+qrnwxdswNC6t0xlk in6cp9bENu9JlnHkPWqDaLKUCrtixDTb -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:02 2025 by rpki-client