$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: aWqyQf9Lgrrl2QqbgFqehF2/HQQgMF/szJgO28FP7kI= Subject key identifier: E8:D5:94:0C:79:53:94:E4:6C:CD:F0:09:CB:EB:81:68:8F:29:C0:7E Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 3C Signing time: Fri 25 Apr 2025 06:30:44 +0000 Manifest this update: Fri 25 Apr 2025 06:30:43 +0000 Manifest next update: Fri 02 May 2025 06:30:43 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: tSlDCBAxltU6hmp2kdV/6AZRwbm3GSnZrUQkLkTnKS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Apr 25 06:30:43 2025 GMT Not After : May 2 06:30:43 2025 GMT Subject: CN=680b2c13-6388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:04:c8:19:09:9a:ec:93:45:69:2f:d7:5a: c9:ea:72:7a:a4:88:80:b4:99:55:24:6b:14:6a:45: 4d:61:75:8d:fe:f6:a3:12:f2:37:a6:00:b1:c4:64: 55:91:13:00:b1:b3:37:34:6f:55:94:c7:c5:e3:66: 2f:03:83:05:af:87:d6:03:5d:1a:24:83:8a:5e:76: 80:0f:0a:34:70:29:1d:c9:19:9a:ff:e9:0b:7a:74: 69:18:19:8b:6e:1a:c2:b0:e8:c2:9c:44:f5:41:18: f0:26:e4:3b:df:99:31:68:ef:8b:a7:46:37:55:9f: eb:06:97:fa:da:b5:de:9d:75:78:84:78:b3:82:a1: 42:72:7e:20:b8:1c:a7:e5:6e:c5:bb:e9:1c:9e:58: 15:3f:15:2b:94:d7:c6:1e:49:df:b8:c0:64:67:ff: ce:47:23:73:cb:c0:e3:e0:84:ed:53:aa:60:3f:e6: 8a:a7:d5:b2:23:39:a9:7b:ef:f6:af:81:35:81:a2: 92:82:10:03:15:de:38:54:68:99:be:cd:99:3f:5f: 94:24:5a:79:4f:61:de:14:c4:95:4a:70:02:44:78: 01:ba:2b:3f:e0:21:e3:e1:8a:f0:2b:ed:7d:cd:79: 3f:1c:76:a1:e9:d6:24:98:6a:77:aa:3e:d2:cf:dd: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:94:0C:79:53:94:E4:6C:CD:F0:09:CB:EB:81:68:8F:29:C0:7E X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7d:6c:93:b4:c8:15:b3:43:c4:7d:6e:e1:06:c1:e2:5f:e6: 35:04:56:23:7b:61:3b:66:f5:a4:cb:95:1a:df:b8:b9:71:b8: 8a:fd:27:75:84:27:91:51:5a:78:86:8e:90:ac:48:d5:9a:97: 85:b2:10:74:23:5e:25:b1:2a:f1:54:c1:cd:91:c6:c0:72:10: 8b:91:75:97:94:21:16:99:5b:ff:ff:4b:c8:fd:fb:f0:48:8a: f4:8c:5f:b5:2f:f5:23:77:f4:75:29:fa:c4:15:b8:36:58:74: 70:a1:87:da:6b:68:66:b0:ff:9e:9d:02:59:9a:b7:f4:9e:60: 55:b7:f0:84:1f:83:aa:b4:ab:db:9e:2c:57:99:f6:71:4d:d9: 4d:15:48:1f:fb:16:a7:6a:82:5b:41:7c:18:a0:6e:a2:8b:f3: 3e:8d:ee:97:23:50:84:7e:3f:2d:b3:1b:45:96:50:09:13:c4: 15:79:7d:cf:12:fc:e0:a8:39:4b:e1:cd:e2:e6:9d:5e:c4:06: f3:de:f9:77:f4:4b:d9:94:0f:d3:59:0d:df:63:35:39:bb:5d: ab:32:ef:31:c0:e5:0d:bf:11:c3:f3:34:25:87:39:6a:05:d0: b5:b2:97:ae:f9:d1:4b:e7:11:71:ae:c4:ee:6b:9e:58:e9:c5: 71:56:08:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA0MjUwNjMwNDNaFw0yNTA1MDIwNjMwNDNaMBgxFjAUBgNV BAMTDTY4MGIyYzEzLTYzODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK3gTIGQma7JNFaS/XWsnqcnqkiIC0mVUkaxRqRU1hdY3+9qMS8jemALHEZFWR EwCxszc0b1WUx8XjZi8DgwWvh9YDXRokg4pedoAPCjRwKR3JGZr/6Qt6dGkYGYtu GsKw6MKcRPVBGPAm5DvfmTFo74unRjdVn+sGl/ratd6ddXiEeLOCoUJyfiC4HKfl bsW76RyeWBU/FSuU18YeSd+4wGRn/85HI3PLwOPghO1TqmA/5oqn1bIjOal77/av gTWBopKCEAMV3jhUaJm+zZk/X5QkWnlPYd4UxJVKcAJEeAG6Kz/gIePhivAr7X3N eT8cdqHp1iSYaneqPtLP3aOLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6NWUDHlT lORszfAJy+uBaI8pwH4wHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABR9bJO0yBWzQ8R9buEGweJf5jUEViN7YTtm9aTLlRrfuLlxuIr9J3WE J5FRWniGjpCsSNWal4WyEHQjXiWxKvFUwc2RxsByEIuRdZeUIRaZW///S8j9+/BI ivSMX7Uv9SN39HUp+sQVuDZYdHChh9praGaw/56dAlmat/SeYFW38IQfg6q0q9ue LFeZ9nFN2U0VSB/7FqdqgltBfBigbqKL8z6N7pcjUIR+Py2zG0WWUAkTxBV5fc8S /OCoOUvhzeLmnV7EBvPe+Xf0S9mUD9NZDd9jNTm7Xasy7zHA5Q2/EcPzNCWHOWoF 0LWyl6750UvnEXGuxO5rnljpxXFWCLA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:36 2025 by rpki-client