$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: jkwVn+M81xPP3PDZhE8SbBntI3jVf20z2NqZBZYoXqk= Subject key identifier: 41:8F:14:32:31:75:AB:D5:52:24:43:FF:65:98:2C:6A:D3:44:E8:E8 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0420 Signing time: Fri 25 Apr 2025 00:10:16 +0000 Manifest this update: Fri 25 Apr 2025 00:10:16 +0000 Manifest next update: Fri 02 May 2025 00:10:16 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: Nfx9MzAuaXDuChKlFNP5MuR/g7iCxLS1Er3+3Klopls=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Apr 25 00:10:16 2025 GMT Not After : May 2 00:10:16 2025 GMT Subject: CN=680ad2e8-c5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:79:14:42:eb:50:10:f7:d1:10:06:dd:63: 95:a9:ac:b9:68:e0:0a:60:fb:04:a7:62:99:1a:80: 72:f5:9b:6e:33:91:94:b4:b2:3b:bf:03:bd:c9:fe: 29:37:35:e0:79:14:ea:64:ef:4e:7b:f9:cf:bd:b2: 54:fc:c4:f9:f4:30:d7:2d:4d:77:22:66:5e:68:bd: d9:66:d9:56:90:44:70:5f:1b:76:0b:1c:e4:58:15: 01:4a:63:b5:2e:ae:04:44:6d:f8:a3:3d:4f:34:3f: 40:a2:e5:1d:62:ef:26:bd:33:d1:50:1d:26:84:2d: 2e:ec:24:54:20:0b:60:55:47:e6:e3:fe:32:3d:02: 6c:c0:ba:e8:76:c5:3d:d4:fa:0b:02:92:a5:90:d3: 70:83:4b:18:57:22:ec:b8:52:4b:39:cf:09:5d:85: df:fb:e8:06:c8:53:49:fe:d8:df:55:f7:ae:66:3b: 6f:14:fa:f6:65:62:be:c7:38:97:ac:a1:4c:ad:77: 96:e6:a3:96:f4:fc:ed:13:12:59:3a:ba:59:77:7e: 1c:ee:07:40:fd:e7:d2:19:50:d8:b7:16:3b:25:49: c2:09:bd:8a:67:22:9d:18:f5:06:3c:b5:fa:7e:fe: 77:ca:81:c2:f4:bd:d3:cb:ad:9d:a1:d9:cf:c6:7f: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8F:14:32:31:75:AB:D5:52:24:43:FF:65:98:2C:6A:D3:44:E8:E8 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:81:74:92:f7:31:1e:35:98:6d:06:f9:92:ee:2f:42:f7:7e: c6:65:ec:e5:af:a7:a9:78:c5:45:b7:35:91:f7:94:88:2a:8f: 5a:ea:f6:a5:51:db:0f:90:0c:b3:eb:8a:20:7f:06:eb:24:ef: 43:6e:73:59:66:21:8b:72:12:09:8e:1e:f8:ca:bb:5d:c2:9c: 0c:bf:60:83:c6:63:4a:7f:39:87:90:b5:f7:66:5e:88:fd:14: 71:50:92:0b:01:47:3d:70:e0:6a:12:2a:28:a3:ba:69:b1:a3: 41:51:68:75:96:6d:95:27:dd:c3:67:8e:b2:5b:63:b8:59:f3: 7b:0d:36:dd:c0:be:73:89:69:be:a3:cc:6a:56:2f:9a:4d:e2: 2b:47:e2:a4:3a:32:13:de:3e:0d:6e:8e:23:a2:a8:ed:1a:52: 58:a4:6f:6f:63:19:f4:bb:2f:d3:d4:d8:4e:9d:9e:36:e9:2b: 08:9d:c7:2f:10:50:83:da:b5:17:38:7e:cd:4c:78:05:ef:9a: 9e:bd:88:6a:11:d1:75:06:26:4d:b0:82:cc:26:03:85:6c:55: 83:fd:36:06:fd:30:43:60:56:8b:a9:c7:97:66:5b:4d:57:b3: c9:62:05:26:ec:a1:36:b0:4b:c2:43:5f:1e:69:b6:e6:14:ff: 58:b5:e1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwNDI1MDAxMDE2WhcNMjUwNTAyMDAxMDE2WjAYMRYwFAYD VQQDEw02ODBhZDJlOC1jNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwN5FELrUBD30RAG3WOVqay5aOAKYPsEp2KZGoBy9ZtuM5GUtLI7vwO9yf4p NzXgeRTqZO9Oe/nPvbJU/MT59DDXLU13ImZeaL3ZZtlWkERwXxt2CxzkWBUBSmO1 Lq4ERG34oz1PND9AouUdYu8mvTPRUB0mhC0u7CRUIAtgVUfm4/4yPQJswLrodsU9 1PoLApKlkNNwg0sYVyLsuFJLOc8JXYXf++gGyFNJ/tjfVfeuZjtvFPr2ZWK+xziX rKFMrXeW5qOW9PztExJZOrpZd34c7gdA/efSGVDYtxY7JUnCCb2KZyKdGPUGPLX6 fv53yoHC9L3Ty62dodnPxn/7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGPFDIx davVUiRD/2WYLGrTROjoMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8gXSS9zEeNZhtBvmS7i9C937GZezlr6epeMVFtzWR95SIKo9a6val UdsPkAyz64ogfwbrJO9DbnNZZiGLchIJjh74yrtdwpwMv2CDxmNKfzmHkLX3Zl6I /RRxUJILAUc9cOBqEiooo7ppsaNBUWh1lm2VJ93DZ46yW2O4WfN7DTbdwL5ziWm+ o8xqVi+aTeIrR+KkOjIT3j4Nbo4joqjtGlJYpG9vYxn0uy/T1NhOnZ426SsInccv EFCD2rUXOH7NTHgF75qevYhqEdF1BiZNsILMJgOFbFWD/TYG/TBDYFaLqceXZltN V7PJYgUm7KE2sEvCQ18eabbmFP9YteER -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:21 2025 by rpki-client