$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: JNvEiu4YtzWCEyXXqGhMbBBnO6mt5X/HYU+2BPbOa98= Subject key identifier: 54:69:4E:6A:CD:BD:4A:44:1C:DB:4E:05:1D:28:5D:C9:0E:7B:B8:DA Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 06 Signing time: Fri 25 Apr 2025 07:09:49 +0000 Manifest this update: Fri 25 Apr 2025 07:09:49 +0000 Manifest next update: Fri 02 May 2025 07:09:49 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: YltyNbFMWt5F0a4ydsLjxdMgXS/L0qNRUukG29jyDZE=) 2: 3A43EE161B3E11F08ACA8E28C4F9AE02.roa (hash: ut5MbOjLOWJ86rU4TrjNMT9S3CVA8XefSFjTd7svnW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Apr 25 07:09:49 2025 GMT Not After : May 2 07:09:49 2025 GMT Subject: CN=680b353d-6cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:bf:62:3f:c0:92:0f:e2:b6:b0:c1:f5:f4: a0:a3:cf:32:08:31:73:68:80:ad:ea:69:8b:98:1b: cf:cb:1c:bb:53:e0:fa:cd:84:1c:26:e7:23:c3:8e: dc:46:72:9b:a7:56:c2:7c:e2:ba:be:61:31:28:1d: e4:f0:42:cc:c0:8a:95:6f:27:2e:d2:fa:b7:75:46: 68:fd:9c:bd:d3:5d:1d:73:b4:1c:22:bd:25:d4:6f: e8:85:05:f1:3d:21:fe:3a:d5:7f:00:54:26:df:e2: f8:45:18:80:6c:d9:ae:0d:11:70:28:71:86:c4:37: 05:ef:22:3a:b4:5d:82:73:57:2a:e5:66:bb:99:3e: 6f:a1:1a:74:35:3f:3b:81:ce:0a:6a:31:a8:e2:57: e3:6e:f9:9d:31:07:59:e9:32:37:74:f9:1e:00:8c: 39:85:1c:1c:06:60:b0:d8:7d:8c:a7:09:f2:61:02: 8c:98:59:ee:39:78:73:8a:3b:c3:34:6f:cd:1c:df: bd:f3:2f:8a:3f:a2:70:29:3b:45:b3:80:dd:0a:97: dc:15:fe:8c:22:45:34:fe:9d:69:a7:02:8f:4a:9f: 69:dc:46:44:1a:17:3d:0d:6f:21:b7:6f:d2:dd:2f: 00:fd:3a:08:10:a4:ad:49:80:82:fb:50:63:e8:7a: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:69:4E:6A:CD:BD:4A:44:1C:DB:4E:05:1D:28:5D:C9:0E:7B:B8:DA X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a2:24:8c:a5:0c:c5:ec:b2:9b:72:45:86:1a:20:57:d9:cf: 2e:3e:4d:8d:c2:46:8d:db:ca:ff:3d:ec:ec:d8:eb:ec:08:69: ed:42:ba:38:ae:d5:94:bc:af:26:1d:ca:e2:41:32:04:5e:08: 3e:ac:a3:19:53:9a:82:04:e4:81:df:14:13:6a:56:de:c8:83: 52:9d:3f:34:59:b2:cf:74:d6:91:1b:c6:a9:5b:94:94:4b:a9: a7:ce:39:ed:cc:26:e6:08:82:a7:f2:e1:62:66:04:02:b8:0b: c0:5b:d6:45:8b:91:ac:84:56:a3:36:57:d4:70:93:4c:6b:85: e3:30:c7:05:fb:66:dd:05:00:5f:d5:ef:68:e7:ca:3f:89:7c: e3:74:f6:12:6b:94:57:b9:4d:76:47:b4:25:87:11:e7:f3:e8: a3:4e:97:64:2e:c6:17:7f:a9:41:b0:c7:8d:d6:30:7a:75:7f: ac:99:14:50:e2:55:fc:d8:17:b9:d3:4b:ac:ca:04:66:9c:8f: bf:40:ab:70:04:31:fd:5e:7c:52:0c:5b:8c:89:bd:6e:20:12: bc:fe:d9:a4:ae:4e:8f:71:7c:72:40:ea:ec:2b:e3:96:ac:2e: 31:05:86:71:3a:97:47:7d:f8:51:f8:79:f1:a1:1f:43:5b:0b: 52:04:fc:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTA0MjUwNzA5NDlaFw0yNTA1MDIwNzA5NDlaMBgxFjAUBgNV BAMTDTY4MGIzNTNkLTZjZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtqb9iP8CSD+K2sMH19KCjzzIIMXNogK3qaYuYG8/LHLtT4PrNhBwm5yPDjtxG cpunVsJ84rq+YTEoHeTwQszAipVvJy7S+rd1Rmj9nL3TXR1ztBwivSXUb+iFBfE9 If461X8AVCbf4vhFGIBs2a4NEXAocYbENwXvIjq0XYJzVyrlZruZPm+hGnQ1PzuB zgpqMajiV+Nu+Z0xB1npMjd0+R4AjDmFHBwGYLDYfYynCfJhAoyYWe45eHOKO8M0 b80c373zL4o/onApO0WzgN0Kl9wV/owiRTT+nWmnAo9Kn2ncRkQaFz0NbyG3b9Ld LwD9OggQpK1JgIL7UGPoenWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVGlOas29 SkQc204FHShdyQ57uNowHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqiJIylDMXssptyRYYaIFfZzy4+TY3CRo3byv897OzY6+wIae1Cujiu 1ZS8ryYdyuJBMgReCD6soxlTmoIE5IHfFBNqVt7Ig1KdPzRZss901pEbxqlblJRL qafOOe3MJuYIgqfy4WJmBAK4C8Bb1kWLkayEVqM2V9Rwk0xrheMwxwX7Zt0FAF/V 72jnyj+JfON09hJrlFe5TXZHtCWHEefz6KNOl2Quxhd/qUGwx43WMHp1f6yZFFDi VfzYF7nTS6zKBGacj79Aq3AEMf1efFIMW4yJvW4gErz+2aSuTo9xfHJA6uwr45as LjEFhnE6l0d9+FH4efGhH0NbC1IE/Mo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:21 2025 by rpki-client