$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: Gi+ETDn0+HKK1XJF8v7Lj5L3qlH936nTw3MFkbdGMis= Subject key identifier: C8:D5:87:1E:83:99:D8:F0:B8:8A:6C:64:12:66:12:04:05:BC:D0:B3 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 2696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2618 Signing time: Thu 24 Apr 2025 15:44:54 +0000 Manifest this update: Thu 24 Apr 2025 15:44:54 +0000 Manifest next update: Thu 01 May 2025 15:44:54 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: qs+bZqH9/fJHEW6st6rlX8lRey/4B4iPwreFi13frcc=) 2: 99C38DDE95C311EF8BAA846AC4F9AE02.roa (hash: /ELEwN23Ky7YTihMb6ZPd8NEjXrIU3aX3cmP7zRZWJo=) 3: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: Td89jpZ8T+gyCVPCYsPjmrlzAdB5DgTPVAxOlnPEQmY=) 4: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: mTkhvut0IA7Ui5L84PzCm16DVCFntDxfgQs8avD4lEI=) 5: 00BA1DE2BF7611EF909DC53AC4F9AE02.roa (hash: zChqyRzf4cH2GZi1CqmqRA1s7/+IYh/0c/G99c1homQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9878 (0x2696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Apr 24 15:44:54 2025 GMT Not After : May 1 15:44:54 2025 GMT Subject: CN=680a5c76-7a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:48:e1:fa:68:7c:47:7f:6c:6b:07:a2:01:ca: 82:39:e6:76:ce:1e:cd:86:f6:3a:e7:85:e9:1f:cf: bd:8f:a9:58:1b:ff:1b:71:8d:d4:7f:a3:21:3e:26: 7d:46:cc:6d:b4:1b:28:cd:39:e2:e2:b5:ca:1a:44: 32:a3:5a:95:74:42:e9:d4:18:93:f8:c1:56:0f:a0: 36:96:1f:52:9a:e9:d0:64:02:74:22:77:ee:d0:ae: 92:67:5c:d0:36:6c:92:aa:8a:23:24:a9:cb:55:7c: b0:f0:44:9d:53:81:ae:57:3e:9b:c9:93:48:2a:3a: 1a:5d:b5:dc:14:f8:b2:e6:b4:33:72:05:59:27:4a: 64:f1:eb:c2:3e:97:f4:c2:b3:cb:ec:21:d8:9a:68: 74:d4:35:eb:c7:9a:63:d7:1f:cd:67:2e:a6:9e:72: b3:8a:a1:c9:c9:6d:0c:07:c8:45:d9:8c:6c:ee:d8: 1f:65:58:12:f3:9d:17:de:e1:e0:73:57:26:79:81: 7d:1e:d9:cf:21:73:cf:3a:0e:28:37:87:7b:7f:41: 7d:bd:69:8d:2f:41:19:13:18:b3:38:ea:55:76:55: d1:91:1e:b1:32:da:6b:78:5d:3c:a8:7b:1c:3f:67: 5e:fa:b1:05:81:f8:5b:65:b1:55:3e:df:0d:53:65: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:87:1E:83:99:D8:F0:B8:8A:6C:64:12:66:12:04:05:BC:D0:B3 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fe:23:e1:1d:89:45:fa:0b:a3:b8:d5:17:c5:ec:f3:75:b9: 53:f7:85:73:09:58:2e:de:f5:37:11:75:ca:d8:1f:03:66:f9: 50:0b:dd:28:72:be:f4:51:d4:8d:e7:2c:8c:2a:86:19:02:fd: 67:fe:85:d4:86:4e:7b:23:f5:5d:b3:a5:fb:ae:ce:00:a8:1c: f8:55:9d:8e:6f:2a:72:03:8b:db:20:1d:bb:69:01:79:66:de: a6:8c:aa:ac:4d:f7:64:cb:77:02:de:d6:4c:2b:7b:9d:6b:0f: e7:31:39:89:bf:23:df:e4:3e:76:81:55:f7:0e:03:f6:c6:ca: 2a:e9:27:d8:8e:76:5c:54:a7:bd:16:b6:3c:ce:1f:33:17:d9: 88:23:d6:34:04:3b:64:59:fb:eb:25:dd:4d:0b:0c:cb:42:ba: a1:cf:5c:7e:58:c9:c2:58:bd:7d:e3:13:d6:2c:c2:46:03:1e: cb:fb:bf:9e:be:e9:bb:3c:d9:7b:0e:c2:ce:29:b3:cb:40:d6: b0:3a:41:6d:b8:8e:9b:bd:18:0f:22:1d:d8:32:ff:da:ad:36: 1e:f4:ab:65:7b:a8:53:54:74:bd:31:76:20:b5:6d:7c:c2:a3: 96:96:7e:b6:a0:44:d7:cb:6e:09:85:a6:c5:38:54:3b:de:2a: 64:f0:3f:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwNDI0MTU0NDU0WhcNMjUwNTAxMTU0NDU0WjAYMRYwFAYD VQQDEw02ODBhNWM3Ni03YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Ejh+mh8R39saweiAcqCOeZ2zh7NhvY654XpH8+9j6lYG/8bcY3Uf6MhPiZ9 RsxttBsozTni4rXKGkQyo1qVdELp1BiT+MFWD6A2lh9SmunQZAJ0Infu0K6SZ1zQ NmySqoojJKnLVXyw8ESdU4GuVz6byZNIKjoaXbXcFPiy5rQzcgVZJ0pk8evCPpf0 wrPL7CHYmmh01DXrx5pj1x/NZy6mnnKziqHJyW0MB8hF2Yxs7tgfZVgS850X3uHg c1cmeYF9HtnPIXPPOg4oN4d7f0F9vWmNL0EZExizOOpVdlXRkR6xMtpreF08qHsc P2de+rEFgfhbZbFVPt8NU2WaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjVhx6D mdjwuIpsZBJmEgQFvNCzMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2/iPhHYlF+gujuNUXxezzdblT94VzCVgu3vU3EXXK2B8DZvlQC90o cr70UdSN5yyMKoYZAv1n/oXUhk57I/Vds6X7rs4AqBz4VZ2ObypyA4vbIB27aQF5 Zt6mjKqsTfdky3cC3tZMK3udaw/nMTmJvyPf5D52gVX3DgP2xsoq6SfYjnZcVKe9 FrY8zh8zF9mII9Y0BDtkWfvrJd1NCwzLQrqhz1x+WMnCWL194xPWLMJGAx7L+7+e vum7PNl7DsLOKbPLQNawOkFtuI6bvRgPIh3YMv/arTYe9Ktle6hTVHS9MXYgtW18 wqOWln62oETXy24JhabFOFQ73ipk8D+w -----END CERTIFICATE-----Generated at Sat Apr 26 16:45:56 2025 by rpki-client