$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft File: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json) Hash identifier: 5Pvo3irIKVazS51dsNtYmcGaEMyQqpu1y8dy3RlyBFQ= Subject key identifier: 7E:60:23:37:63:5A:41:1E:B4:58:72:DA:A2:8A:FD:D0:DC:75:5A:25 Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft Manifest number: 0346 Signing time: Fri 25 Apr 2025 00:49:59 +0000 Manifest this update: Fri 25 Apr 2025 00:49:58 +0000 Manifest next update: Fri 02 May 2025 00:49:58 +0000 Files and hashes: 1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: BIEOs32acZZVIityWFLMUCjT6ylb3HTf5mWp1cNlfYE=) 2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: YZBCLzG1LRQi5fjPkPYGATjitv5X8ahwOZh2l+uHQzk=) 3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: 4KkZhlwS8BwldE+nm9AJgbyzDDEgaxmp/JCW8JNKT3c=) 4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: 2yiJ1vYQVaVYgn6ZIE4vtmjEfZixmgLzUvn/Jupt42Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5 Validity Not Before: Apr 25 00:49:58 2025 GMT Not After : May 2 00:49:58 2025 GMT Subject: CN=680adc37-8435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:2e:7a:3c:c8:d5:a1:e6:a5:b6:42:ae:00: 95:15:04:46:60:ba:47:4c:9a:03:0e:28:83:49:0f: 2b:ad:f7:b9:b5:cf:41:f0:df:ff:30:97:64:7d:fa: 17:4e:80:e5:05:2d:8e:13:76:e9:e0:8c:9e:74:6c: 0e:fc:73:26:72:8b:5b:ba:13:59:e4:c7:6c:ad:6b: c0:3b:95:71:1e:65:e3:b0:21:86:92:b7:de:d8:6e: 28:c4:52:4f:6d:9e:e5:11:25:d0:d1:9a:9f:06:e2: c1:73:df:ae:fe:5c:32:78:42:9a:79:d6:31:f9:ba: ff:af:d1:cd:b3:08:7c:e0:fc:63:8b:ef:95:2d:b1: c7:cb:c8:30:2f:f5:b0:4a:0e:44:3e:b3:87:74:cf: 03:db:dc:47:73:9d:46:70:3b:3f:1b:2a:f9:11:ff: d8:4e:55:47:47:7e:e2:48:db:39:ed:e3:5f:92:49: 6e:e7:a1:f5:6d:ff:a1:7e:d6:b7:0b:bf:e2:7a:f6: 5e:27:5d:a2:93:5a:f1:2e:44:ec:ff:e3:17:d2:00: d2:3b:9c:c5:85:17:60:ed:b6:58:29:fa:57:3b:a6: 8e:4d:40:2b:78:a5:fa:af:63:68:67:99:f4:c1:ee: d1:b3:f1:7e:52:37:a8:ad:29:1e:9c:fc:b6:1f:18: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:60:23:37:63:5A:41:1E:B4:58:72:DA:A2:8A:FD:D0:DC:75:5A:25 X509v3 Authority Key Identifier: keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6e:09:bc:0c:e1:45:d9:9b:df:3b:fd:e1:58:ee:a3:98:9e: fb:bb:16:c5:72:59:4a:06:30:20:62:55:9b:47:15:40:ec:55: e1:cc:6c:55:32:b2:78:1c:fc:2d:e6:65:49:18:7d:f2:f0:75: 22:f9:94:f5:14:26:1b:2e:a6:f1:24:f6:b1:ee:85:9b:34:6f: e2:3f:8d:bf:5d:1e:c9:c1:6d:fd:ce:b3:ed:20:78:68:f3:c4: 95:e4:10:25:c7:8a:a7:25:b4:23:6f:48:34:85:4f:8b:b0:46: d0:0b:25:91:45:0a:9f:8d:ce:ef:f3:4c:ff:98:f6:82:ea:b7: fc:96:f0:1d:e1:c0:40:23:8a:11:1d:a4:1e:2a:84:cd:69:e6: 5c:dc:7f:7e:5d:89:df:d6:99:19:48:e2:0f:84:b9:b1:57:fc: 97:df:46:05:08:a0:e2:ee:91:4f:c2:d5:36:0a:f5:a8:d0:2c: b5:77:1d:7a:ee:96:83:9c:03:c0:4a:1c:c5:84:11:32:fb:30: e3:a1:7d:d3:5a:fa:4d:3f:07:f5:af:dd:8f:bd:4c:64:d0:c6: 11:42:5b:83:d1:ef:54:94:b4:e3:9c:7f:70:44:da:73:dc:a8: c1:7a:86:a3:14:7b:32:08:56:62:4e:90:3e:e5:7b:d1:e4:f4: 64:1e:b0:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGNDIxMTAvBgNVBAUTKERCQUZGQzBDMDAyRDQzREM0NzM0NkJDNEUxOUZFQjNF QkYzQkI0RDUwHhcNMjUwNDI1MDA0OTU4WhcNMjUwNTAyMDA0OTU4WjAYMRYwFAYD VQQDEw02ODBhZGMzNy04NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr0uejzI1aHmpbZCrgCVFQRGYLpHTJoDDiiDSQ8rrfe5tc9B8N//MJdkffoX ToDlBS2OE3bp4IyedGwO/HMmcotbuhNZ5MdsrWvAO5VxHmXjsCGGkrfe2G4oxFJP bZ7lESXQ0ZqfBuLBc9+u/lwyeEKaedYx+br/r9HNswh84Pxji++VLbHHy8gwL/Ww Sg5EPrOHdM8D29xHc51GcDs/Gyr5Ef/YTlVHR37iSNs57eNfkklu56H1bf+hfta3 C7/ievZeJ12ik1rxLkTs/+MX0gDSO5zFhRdg7bZYKfpXO6aOTUAreKX6r2NoZ5n0 we7Rs/F+UjeorSkenPy2HxhhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5gIzdj WkEetFhy2qKK/dDcdVolMB8GA1UdIwQYMBaAFNuv/AwALUPcRzRrxOGf6z6/O7TV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUY0Mi82MUY2MDFGQ0JB MjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5eEhOR3ZFNFpfclByODd0 TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI2XzhEQUF0UTl4SE5HdkU0Wl9yUHI4N3ROVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUY0Mi82MUY2MDFGQ0JBMjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5 eEhOR3ZFNFpfclByODd0TlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKbgm8DOFF2ZvfO/3hWO6jmJ77uxbFcllKBjAgYlWbRxVA7FXhzGxV MrJ4HPwt5mVJGH3y8HUi+ZT1FCYbLqbxJPax7oWbNG/iP42/XR7JwW39zrPtIHho 88SV5BAlx4qnJbQjb0g0hU+LsEbQCyWRRQqfjc7v80z/mPaC6rf8lvAd4cBAI4oR HaQeKoTNaeZc3H9+XYnf1pkZSOIPhLmxV/yX30YFCKDi7pFPwtU2CvWo0Cy1dx16 7paDnAPAShzFhBEy+zDjoX3TWvpNPwf1r92PvUxk0MYRQluD0e9UlLTjnH9wRNpz 3KjBeoajFHsyCFZiTpA+5XvR5PRkHrAd -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:04 2025 by rpki-client