$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: XlwZxY3XL5uDppKUS8mwb665+xDf+AwLY1sOEYhleM0= Subject key identifier: 29:C0:FF:68:62:15:26:39:A2:6A:E3:E7:69:A9:2C:97:55:F0:B1:42 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 0129 Signing time: Fri 25 Apr 2025 03:43:20 +0000 Manifest this update: Fri 25 Apr 2025 03:43:19 +0000 Manifest next update: Fri 02 May 2025 03:43:19 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: eU3QxkN9rQRqxD4c7ngvVGzPNwirzEd8Tq01UOJEPLs=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Apr 25 03:43:19 2025 GMT Not After : May 2 03:43:19 2025 GMT Subject: CN=680b04d8-a952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:1c:e2:96:5c:fd:84:7a:8d:35:60:22:65: df:af:f6:94:34:05:26:e2:4c:c3:d4:41:02:e0:c2: 50:31:f2:20:7c:49:fa:6a:8d:fa:cc:14:e9:93:47: b8:d7:47:22:b5:1d:65:af:77:7f:df:a0:9b:07:22: 7e:d0:85:23:58:96:a9:e9:96:60:ab:75:a5:13:17: 1d:66:62:cc:08:1f:af:1a:1a:51:e6:c6:3d:d0:08: 47:e7:36:9d:aa:b6:a4:0a:64:d9:2c:68:e5:b1:a0: bd:b7:c6:c5:47:38:5e:9c:2a:47:a3:1d:ca:d5:b3: 04:55:b4:ee:14:4f:17:a5:87:c9:88:a4:11:50:09: c1:cf:05:5c:46:90:a9:52:17:8a:0e:0a:80:6e:ce: 8d:44:dc:e1:23:de:58:25:4b:3f:7b:43:a7:e7:97: 84:53:4b:e0:6e:ba:8c:b4:a4:82:0c:0f:a3:e6:6f: d0:22:34:e4:c8:90:11:55:d8:21:87:29:9b:ba:a5: 01:f3:c0:e1:28:d2:48:cf:8e:fa:25:ec:a1:bf:19: 69:d3:82:7b:d5:4a:44:0b:ae:cf:dd:63:6a:8d:c7: 75:f9:df:df:7e:7e:1a:bc:db:8e:d1:45:59:c5:df: 27:8f:31:14:8d:2a:b7:11:b0:ba:30:1e:ab:0c:ba: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:FF:68:62:15:26:39:A2:6A:E3:E7:69:A9:2C:97:55:F0:B1:42 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:1f:e8:a2:e0:79:4a:80:0d:a9:a5:25:e4:03:fd:c2:fd:25: 53:78:d4:08:da:40:d6:fe:93:7d:8c:b1:ef:a2:65:d8:51:23: 95:92:c6:ba:03:64:1d:8e:5a:0d:72:09:6b:d0:99:a4:0e:69: 4d:78:a6:64:6a:b1:0c:3c:93:5b:bb:4a:d6:19:e3:6a:0b:2b: 11:c7:2c:ac:de:d0:bd:01:e5:96:9b:3e:65:01:3e:87:65:4e: 85:da:1b:82:91:3b:24:29:67:1f:f4:d5:3d:06:b3:a7:b2:a3: 57:96:a2:d4:36:78:ed:32:f3:6b:54:72:ba:0b:ac:f4:1c:0a: 49:9c:e3:bc:50:e2:17:44:81:22:ca:ec:46:50:a8:a5:d7:01: 29:05:ec:11:9a:69:99:1f:a4:5f:1c:27:28:76:1e:35:d2:a3: eb:63:7c:98:c5:63:38:84:52:ee:a7:ac:49:8a:f9:2c:b6:cb: cc:04:60:15:7d:e1:4a:af:56:1c:73:91:25:71:b2:27:23:58: 6f:bf:f1:af:8b:56:ea:91:08:f8:53:72:87:31:b5:f0:e0:fc: 3e:7d:39:50:ea:c2:11:50:f3:03:e6:be:53:09:db:72:0d:fd: cb:d5:1b:bf:94:b7:e7:da:7c:7c:64:24:17:a2:1a:c3:85:f0: c9:1e:b5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUwNDI1MDM0MzE5WhcNMjUwNTAyMDM0MzE5WjAYMRYwFAYD VQQDEw02ODBiMDRkOC1hOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sQc4pZc/YR6jTVgImXfr/aUNAUm4kzD1EEC4MJQMfIgfEn6ao36zBTpk0e4 10citR1lr3d/36CbByJ+0IUjWJap6ZZgq3WlExcdZmLMCB+vGhpR5sY90AhH5zad qrakCmTZLGjlsaC9t8bFRzhenCpHox3K1bMEVbTuFE8XpYfJiKQRUAnBzwVcRpCp UheKDgqAbs6NRNzhI95YJUs/e0On55eEU0vgbrqMtKSCDA+j5m/QIjTkyJARVdgh hymbuqUB88DhKNJIz476Jeyhvxlp04J71UpEC67P3WNqjcd1+d/ffn4avNuO0UVZ xd8njzEUjSq3EbC6MB6rDLofVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnA/2hi FSY5omrj52mpLJdV8LFCMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1H+ii4HlKgA2ppSXkA/3C/SVTeNQI2kDW/pN9jLHvomXYUSOVksa6 A2QdjloNcglr0JmkDmlNeKZkarEMPJNbu0rWGeNqCysRxyys3tC9AeWWmz5lAT6H ZU6F2huCkTskKWcf9NU9BrOnsqNXlqLUNnjtMvNrVHK6C6z0HApJnOO8UOIXRIEi yuxGUKil1wEpBewRmmmZH6RfHCcodh410qPrY3yYxWM4hFLup6xJivkstsvMBGAV feFKr1Ycc5ElcbInI1hvv/Gvi1bqkQj4U3KHMbXw4Pw+fTlQ6sIRUPMD5r5TCdty Df3L1Ru/lLfn2nx8ZCQXohrDhfDJHrVh -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:21 2025 by rpki-client