$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: W9p9cG07GW/QPUXEeFlUSo8YupgV3cAhBC91wpsWc4k= Subject key identifier: 7B:14:F5:57:14:2F:46:FE:B1:DF:23:7A:99:6C:26:CD:46:00:C7:64 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F41 Signing time: Thu 24 Apr 2025 17:37:14 +0000 Manifest this update: Thu 24 Apr 2025 17:37:13 +0000 Manifest next update: Thu 01 May 2025 17:37:13 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: 4nW7edP09UHyvGwDEuza2DW4lf0Bu/oEADmb0LmguHE=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Apr 24 17:37:13 2025 GMT Not After : May 1 17:37:13 2025 GMT Subject: CN=680a76ca-fdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:c6:1e:62:ec:e5:5e:db:46:1c:2d:a1:92: e6:5a:9d:b0:a8:4c:50:e0:54:c6:33:1a:85:f8:ae: 44:b9:cc:fc:15:dd:6a:6b:01:51:15:bf:5c:63:5d: 4d:34:3b:21:2f:b2:81:e1:7e:f1:e4:3b:59:a4:67: a3:81:2f:71:53:cd:e6:5d:ac:6c:b3:93:3f:40:61: d0:b3:85:7d:44:a8:03:a5:41:f0:80:30:38:34:80: dc:62:9e:9b:0d:2b:c3:97:75:f3:82:cf:80:9c:65: c6:e4:8b:59:34:a1:9a:df:ca:6d:ea:9e:57:92:1b: 4b:e4:f7:8f:4d:5d:e7:e7:0d:e5:92:09:ac:e5:d2: 0d:a8:5b:12:99:d4:8a:2a:12:93:03:d4:b0:6c:4d: 12:1f:bd:b8:25:4c:cc:da:24:b7:16:a8:66:f3:3e: f4:71:84:24:0f:1d:24:68:b9:06:21:64:65:a5:b3: 22:bc:1a:b8:1d:2b:1b:2b:4a:b2:9f:91:f8:48:ce: 75:d6:0c:ee:5b:25:97:12:37:8b:c3:12:de:15:33: d6:01:05:84:fc:84:26:33:60:48:e2:03:f4:c1:cb: 51:8a:42:b2:6c:53:6a:8e:b3:01:ec:76:6f:ec:c8: 60:ac:27:f2:36:b6:e5:f1:50:b8:a8:41:a3:fa:c4: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:14:F5:57:14:2F:46:FE:B1:DF:23:7A:99:6C:26:CD:46:00:C7:64 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:03:16:90:0d:ab:ef:11:c3:e0:ae:09:78:79:0b:59:99:f5: 8c:30:d0:72:02:4b:4b:81:50:d2:8d:44:9d:2b:98:c0:16:8f: 9c:79:ff:4f:5f:f4:d0:3b:06:9c:2d:80:de:fa:1b:81:81:62: 06:f4:69:a6:39:3e:ae:e2:78:ec:5f:14:da:48:dc:4e:51:95: 9e:2a:3b:6b:4d:0a:0f:96:21:3d:fc:5a:1c:ee:a6:68:bb:9c: 7b:2b:51:69:59:f8:6c:13:4e:b6:cc:d7:7c:1a:5b:50:49:af: a2:fa:ec:44:12:ce:b3:ad:38:56:2b:fa:39:d0:d6:f5:94:2e: 75:ee:a9:c9:e2:91:63:e3:7b:03:c7:90:57:80:00:b3:ee:d7: de:1e:80:26:f9:db:be:19:63:c6:e5:b9:b0:97:9d:52:dd:f4: c3:49:c4:1d:53:19:58:32:e9:52:0d:3e:a5:fd:34:9a:97:97: 6c:b1:33:d2:c8:54:91:a8:ad:b3:98:03:a8:6d:d8:66:6b:5e: 5a:46:48:cc:24:d3:30:05:8e:c2:bb:5a:5d:fb:4d:d7:ef:ea: 4f:07:b3:44:39:98:fd:33:2f:e2:3d:49:99:c3:4a:36:a1:c7: e4:4f:69:8c:d5:2b:69:fd:1a:ff:8e:a3:00:20:5a:f0:b9:4b: e1:54:cd:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwNDI0MTczNzEzWhcNMjUwNTAxMTczNzEzWjAYMRYwFAYD VQQDEw02ODBhNzZjYS1mZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkunGHmLs5V7bRhwtoZLmWp2wqExQ4FTGMxqF+K5Eucz8Fd1qawFRFb9cY11N NDshL7KB4X7x5DtZpGejgS9xU83mXaxss5M/QGHQs4V9RKgDpUHwgDA4NIDcYp6b DSvDl3Xzgs+AnGXG5ItZNKGa38pt6p5XkhtL5PePTV3n5w3lkgms5dINqFsSmdSK KhKTA9SwbE0SH724JUzM2iS3Fqhm8z70cYQkDx0kaLkGIWRlpbMivBq4HSsbK0qy n5H4SM511gzuWyWXEjeLwxLeFTPWAQWE/IQmM2BI4gP0wctRikKybFNqjrMB7HZv 7MhgrCfyNrbl8VC4qEGj+sR2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsU9VcU L0b+sd8jeplsJs1GAMdkMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAxaQDavvEcPgrgl4eQtZmfWMMNByAktLgVDSjUSdK5jAFo+cef9P X/TQOwacLYDe+huBgWIG9GmmOT6u4njsXxTaSNxOUZWeKjtrTQoPliE9/Foc7qZo u5x7K1FpWfhsE062zNd8GltQSa+i+uxEEs6zrThWK/o50Nb1lC517qnJ4pFj43sD x5BXgACz7tfeHoAm+du+GWPG5bmwl51S3fTDScQdUxlYMulSDT6l/TSal5dssTPS yFSRqK2zmAOobdhma15aRkjMJNMwBY7Cu1pd+03X7+pPB7NEOZj9My/iPUmZw0o2 ocfkT2mM1Stp/Rr/jqMAIFrwuUvhVM0Q -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:09 2025 by rpki-client