$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft File: s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json) Hash identifier: u9ZvmGGYQaNlc3CcouU7/yu5ejMfmMy0K3H48yBCqT0= Subject key identifier: D8:15:A1:BD:0C:20:14:A4:D6:CF:E9:12:6D:78:35:7D:73:4C:BB:85 Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB Certificate issuer: /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:05:59 +0000 Manifest this update: Fri 25 Apr 2025 02:05:58 +0000 Manifest next update: Fri 02 May 2025 02:05:58 +0000 Files and hashes: 1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: 7npX9roAvGtFV9YFSV5LNnKwKSKdP8+orXfDm/SiXTg=) 2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: JHSJOwqLi/FPFLEdwK3eukBTiOCCTjuJ4yCwWkwhShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB Validity Not Before: Apr 25 02:05:58 2025 GMT Not After : May 2 02:05:58 2025 GMT Subject: CN=680aee07-5c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:c5:d4:bb:1e:e4:c6:d1:30:5a:56:e7:f9: fc:97:0f:26:d6:3b:94:3d:69:3f:d8:76:47:96:b3: ab:3a:a1:bc:1f:89:03:9b:ce:2f:33:b5:27:7e:58: 74:9e:2e:9b:ef:88:01:b9:d2:47:b6:38:52:b5:60: 31:34:35:35:33:68:c6:fc:77:e3:35:8d:94:26:f0: 68:0e:17:07:51:7b:ee:d8:4a:07:6b:f5:ca:ed:fa: e4:80:3f:ff:8e:7a:f2:a9:a7:c1:98:3c:dc:e3:a5: 18:12:d4:68:f2:4e:8b:65:c9:e5:d6:f4:b1:bf:05: a9:ec:7f:67:c0:91:5b:d2:83:c4:56:13:1f:ee:cc: 35:02:f2:90:c7:90:b3:ff:55:6f:3a:af:92:12:c8: 23:00:40:31:c1:fd:2b:15:b7:a1:5c:23:67:0b:49: 3d:02:b2:f7:70:23:32:13:cd:41:e6:93:10:99:1f: 76:38:94:3d:9e:48:f5:63:80:3c:1c:a4:2e:fa:89: 25:68:2e:36:cc:dd:aa:d7:b9:48:fa:44:e8:7c:87: 20:32:71:98:32:42:b7:c6:1e:18:4c:9a:01:79:e2: cf:e8:77:92:d4:69:6a:16:e8:1e:69:d1:98:8c:2c: b2:52:a6:5f:37:f3:07:12:c3:6b:a8:c4:7a:64:40: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:A1:BD:0C:20:14:A4:D6:CF:E9:12:6D:78:35:7D:73:4C:BB:85 X509v3 Authority Key Identifier: keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:fa:41:1f:ab:0f:5b:7c:26:96:2a:15:1a:e9:ff:52:12:ca: 4e:eb:ff:5d:a9:80:8f:c2:02:8b:ea:dd:2a:98:de:28:28:48: 26:19:42:de:8e:a6:cb:ee:32:b3:1d:8d:da:bf:5e:5f:9e:01: 4a:9e:88:44:80:f6:d2:b2:4b:b5:48:3a:7d:20:7d:53:87:a4: f3:3d:1c:98:45:63:5a:5c:80:cc:d5:46:4c:62:fc:ba:2f:e5: 0c:7e:36:9a:1e:d2:d7:15:44:49:20:7b:57:bf:f1:53:5b:df: a4:ab:85:e6:61:6e:91:dc:7a:7e:83:ce:75:3d:39:06:70:aa: db:0b:ed:94:06:97:9a:9f:e7:39:46:d1:78:7d:a2:55:ae:13: 05:d2:27:78:8c:c8:22:48:81:30:c5:cf:e4:20:f0:9a:4e:fb: a5:7d:4d:02:59:9b:63:17:cd:90:8b:a8:66:58:10:22:ef:a9: c8:d3:37:b6:56:4e:81:ef:78:95:29:81:49:3b:30:fb:a8:2a: 04:cd:d1:82:8b:53:2d:32:ae:53:4c:cc:52:da:e6:95:b9:4c: 8d:87:5e:72:ee:11:fe:e8:0c:26:16:7c:a6:c9:3e:37:50:7f: 59:74:cd:91:84:3f:cf:1c:c0:13:2d:26:f5:0d:d3:90:a8:32: af:7c:5d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwOTAxMTAvBgNVBAUTKEIzQzk1NzU5QjAyNjAxNjlENTgxQUY4NDQ2NkM1QzZC Q0Y2RkMxREIwHhcNMjUwNDI1MDIwNTU4WhcNMjUwNTAyMDIwNTU4WjAYMRYwFAYD VQQDEw02ODBhZWUwNy01YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqHF1Lse5MbRMFpW5/n8lw8m1juUPWk/2HZHlrOrOqG8H4kDm84vM7Unflh0 ni6b74gBudJHtjhStWAxNDU1M2jG/HfjNY2UJvBoDhcHUXvu2EoHa/XK7frkgD// jnryqafBmDzc46UYEtRo8k6LZcnl1vSxvwWp7H9nwJFb0oPEVhMf7sw1AvKQx5Cz /1VvOq+SEsgjAEAxwf0rFbehXCNnC0k9ArL3cCMyE81B5pMQmR92OJQ9nkj1Y4A8 HKQu+oklaC42zN2q17lI+kTofIcgMnGYMkK3xh4YTJoBeeLP6HeS1GlqFugeadGY jCyyUqZfN/MHEsNrqMR6ZEDAqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgVob0M IBSk1s/pEm14NX1zTLuFMB8GA1UdIwQYMBaAFLPJV1mwJgFp1YGvhEZsXGvPb8Hb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjA5MC82QjY3MjQzNDY3 RjExMUVEQkRDNTg1MkNDNEY5QUUwMi9zOGxYV2JBbUFXblZnYS1FUm14Y2E4OXZ3 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4bFhXYkFtQVduVmdhLUVSbXhjYTg5dndkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjA5MC82QjY3MjQzNDY3RjExMUVEQkRDNTg1MkNDNEY5QUUwMi9zOGxYV2JBbUFX blZnYS1FUm14Y2E4OXZ3ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy+kEfqw9bfCaWKhUa6f9SEspO6/9dqYCPwgKL6t0qmN4oKEgmGULe jqbL7jKzHY3av15fngFKnohEgPbSsku1SDp9IH1Th6TzPRyYRWNaXIDM1UZMYvy6 L+UMfjaaHtLXFURJIHtXv/FTW9+kq4XmYW6R3Hp+g851PTkGcKrbC+2UBpean+c5 RtF4faJVrhMF0id4jMgiSIEwxc/kIPCaTvulfU0CWZtjF82Qi6hmWBAi76nI0ze2 Vk6B73iVKYFJOzD7qCoEzdGCi1MtMq5TTMxS2uaVuUyNh15y7hH+6AwmFnymyT43 UH9ZdM2RhD/PHMATLSb1DdOQqDKvfF3y -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:32 2025 by rpki-client