$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: u3VEWvmt/OfynaQ/gSEL5SddC20tIkIMkrKKOckg/BE= Subject key identifier: 12:8D:F2:C3:38:24:7D:B8:94:39:78:7E:D8:27:1B:9A:E2:94:B8:88 Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 09A8 Signing time: Thu 24 Apr 2025 19:54:20 +0000 Manifest this update: Thu 24 Apr 2025 19:54:20 +0000 Manifest next update: Thu 01 May 2025 19:54:20 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: WD+UxvNLuCCYPLRPswqfIiwYttK1larKd84ofvN8DmM=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Apr 24 19:54:20 2025 GMT Not After : May 1 19:54:20 2025 GMT Subject: CN=680a96ec-94a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:83:3b:38:d5:e6:3c:e5:b2:76:8d:02:a6: 6f:88:d3:e4:80:1a:a4:cd:c2:15:98:41:67:b8:74: f3:04:f7:0d:98:17:e4:8b:9a:01:73:b7:e7:5e:a0: 2d:88:a9:06:5c:70:39:65:58:b9:13:a4:c3:dc:36: 17:59:a4:59:4f:ea:43:37:f2:0e:06:1b:02:0a:1b: c8:06:ff:b5:fc:4e:dd:d8:bf:a6:ab:91:af:a9:b1: f3:d0:57:d1:73:cc:0f:cf:a1:bf:a5:73:5a:e6:be: 5d:77:77:c9:f0:d0:f1:32:d4:45:31:3c:25:19:fd: fb:4f:5c:46:a3:15:f1:a6:96:de:ce:e8:a3:c5:18: 11:e2:86:f5:f2:62:80:07:07:67:e4:a5:cc:6f:39: 42:8e:1e:3a:36:ef:b2:a9:41:fe:63:ab:f6:d2:f7: d1:a9:35:19:05:56:f3:3c:a1:d4:56:2b:a2:1c:06: 9d:80:cf:0c:93:49:9b:2c:90:14:18:bf:c2:c1:c2: d5:23:32:3e:f5:4f:8d:76:e0:d5:e6:47:9f:c2:6a: ea:3e:01:28:8c:55:16:06:93:30:ad:ae:63:a9:5b: 10:9d:f8:0c:39:a4:76:7c:39:e3:5d:a9:f6:9a:c5: 93:4e:00:59:8b:fc:22:8f:59:5a:9a:b1:0a:40:d0: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:F2:C3:38:24:7D:B8:94:39:78:7E:D8:27:1B:9A:E2:94:B8:88 X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f5:86:dc:55:66:0f:3c:7d:aa:40:45:69:63:13:46:a2:2f: 49:8b:73:a2:f9:12:eb:db:f9:af:d0:a3:62:4d:2d:65:5c:44: 33:6a:b7:10:e7:27:fc:60:6f:87:64:e7:92:ca:13:68:fa:8c: 01:d9:f1:7b:02:ce:7f:ef:b8:d0:0d:52:2b:dd:a7:5b:b6:51: 2d:fd:bf:9f:2b:8d:e3:a9:bc:a6:f9:f5:d7:c2:4b:e0:fc:bd: 0d:80:0d:1e:1a:a4:bd:a1:fd:c1:cb:dd:1a:91:6b:60:08:cd: 8e:a0:e6:1b:37:e0:6d:7d:4a:a4:e3:07:f9:0a:cb:d1:41:f8: 5c:52:a5:09:0b:ae:90:b8:57:7c:24:47:f7:61:b8:69:92:cf: fe:00:b0:84:f3:32:cb:33:e1:32:9d:04:c0:03:2c:0f:f5:88: 5b:46:f6:43:66:71:2a:77:09:bf:b8:5f:5b:6d:2d:a5:0c:e1: 27:a2:91:45:2a:b6:01:09:9c:73:80:c6:06:02:96:ad:0d:dd: 46:e0:42:6b:ab:be:e1:92:8f:55:a1:be:61:b2:a2:f5:87:fb: 44:3f:73:cb:91:07:b7:a3:79:00:4c:ec:9a:94:14:54:13:96: 88:73:36:89:6f:b9:6c:38:be:01:59:94:f1:7f:47:5d:34:96: 7b:b3:de:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjUwNDI0MTk1NDIwWhcNMjUwNTAxMTk1NDIwWjAYMRYwFAYD VQQDEw02ODBhOTZlYy05NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JWDOzjV5jzlsnaNAqZviNPkgBqkzcIVmEFnuHTzBPcNmBfki5oBc7fnXqAt iKkGXHA5ZVi5E6TD3DYXWaRZT+pDN/IOBhsCChvIBv+1/E7d2L+mq5GvqbHz0FfR c8wPz6G/pXNa5r5dd3fJ8NDxMtRFMTwlGf37T1xGoxXxppbezuijxRgR4ob18mKA Bwdn5KXMbzlCjh46Nu+yqUH+Y6v20vfRqTUZBVbzPKHUViuiHAadgM8Mk0mbLJAU GL/CwcLVIzI+9U+NduDV5kefwmrqPgEojFUWBpMwra5jqVsQnfgMOaR2fDnjXan2 msWTTgBZi/wij1lamrEKQNAriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKN8sM4 JH24lDl4ftgnG5rilLiIMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA49YbcVWYPPH2qQEVpYxNGoi9Ji3Oi+RLr2/mv0KNiTS1lXEQzarcQ 5yf8YG+HZOeSyhNo+owB2fF7As5/77jQDVIr3adbtlEt/b+fK43jqbym+fXXwkvg /L0NgA0eGqS9of3By90akWtgCM2OoOYbN+BtfUqk4wf5CsvRQfhcUqUJC66QuFd8 JEf3Ybhpks/+ALCE8zLLM+EynQTAAywP9YhbRvZDZnEqdwm/uF9bbS2lDOEnopFF KrYBCZxzgMYGApatDd1G4EJrq77hko9Vob5hsqL1h/tEP3PLkQe3o3kATOyalBRU E5aIczaJb7lsOL4BWZTxf0ddNJZ7s94R -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:29 2025 by rpki-client