$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: MQrLsRX/sA+BLGysuhnpeXrwClJy+/0gory+5RsooC8= Subject key identifier: 5D:4B:39:07:C3:02:C5:33:E4:2B:88:3F:B3:E6:E8:CA:89:98:6B:90 Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:33:25 +0000 Manifest this update: Fri 25 Apr 2025 05:33:24 +0000 Manifest next update: Fri 02 May 2025 05:33:24 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: yf16KP6QhvIu/IlJZ+7d0vOL6NuEnGhuUGL95P6Jdzo=) 2: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (hash: 2zLHgEDWGwo9zlyqNnj3rIHawpIWGW43p4pSnf/kapk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Apr 25 05:33:24 2025 GMT Not After : May 2 05:33:24 2025 GMT Subject: CN=680b1ea5-ba90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:aa:e9:9c:0e:0a:b2:2d:22:83:03:d1:30:8e: fd:6d:9b:e1:c8:b8:5a:bb:4a:5f:2e:dd:54:62:63: 06:50:d8:be:1d:a8:54:c5:39:4b:f5:a0:4c:f3:78: ad:5e:a2:0d:89:20:1b:1f:ae:b1:9c:03:7a:17:82: 5a:b8:ac:84:01:e4:52:c6:a3:62:60:23:d0:ae:26: 02:b3:17:3b:e1:67:d1:47:43:65:b5:f5:8a:71:c9: d3:2c:29:50:dc:26:07:e4:be:c0:90:fb:0b:de:6c: f8:43:59:66:1c:9c:60:1e:ca:a7:d7:b4:90:5e:a7: 42:74:7f:7f:3e:8a:ef:2f:69:8a:36:9a:99:c2:e7: f8:44:dd:91:59:0c:ea:2f:be:f9:e4:5e:cd:b7:8c: a2:33:d7:9a:f8:47:c1:75:98:7b:75:5c:22:18:b6: 4f:22:eb:c1:9e:2e:c4:cb:38:90:0c:58:92:7a:a1: 99:bd:d8:9d:b9:d5:90:19:7c:67:1f:b3:5b:62:6f: 14:3f:66:32:d6:ba:b6:24:4f:92:7f:6a:96:65:7b: 07:c2:ad:89:7c:1f:a0:4b:72:15:59:6a:74:f8:c1: b8:55:88:f2:ff:b1:94:a7:08:6a:09:7b:df:db:a6: 89:2d:16:28:68:46:5f:e0:58:41:de:47:c2:3e:b8: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4B:39:07:C3:02:C5:33:E4:2B:88:3F:B3:E6:E8:CA:89:98:6B:90 X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:68:3a:40:10:4a:2b:38:26:57:15:93:c6:60:26:c4:59:c0: 98:14:00:da:a9:24:d7:af:fb:ba:35:d5:0f:ae:a5:c9:1d:a8: 94:e9:dd:9d:7c:e4:17:18:6d:75:2b:11:af:fb:de:47:2f:24: 3e:64:a1:e0:ca:d9:4c:27:94:c0:1b:9e:a7:e0:85:7b:bb:d0: 51:ea:36:c6:a0:0e:64:1b:8e:af:68:2c:ba:46:42:9b:dd:90: 43:b8:6e:54:e7:3a:e8:2d:28:e1:02:42:41:c9:7e:4c:6c:e4: b3:98:6f:52:e2:77:60:13:a6:d5:1c:87:2e:e0:d6:96:39:26: 36:c2:33:b9:2a:1c:e8:7b:59:d9:0c:10:5f:2f:d0:6d:50:8a: d0:c4:cc:8d:8f:61:23:15:44:0b:e4:cd:cb:f3:cf:b8:90:0f: 04:bf:8a:82:32:03:93:44:e1:26:ec:9d:83:88:47:46:53:ed: c4:8a:06:b1:a4:83:b6:8c:e4:86:5f:ee:f7:ac:6b:18:8e:d0: a0:4b:9a:cb:55:42:25:56:48:73:f9:f8:bf:82:15:a5:6c:7e: 76:34:72:40:ec:27:dd:c8:b9:7b:5c:7d:c2:e7:e4:f9:c6:3e: 31:f1:aa:b0:92:0c:8f:02:9f:40:db:3c:11:91:4e:28:ad:56: 85:10:e9:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjUwNDI1MDUzMzI0WhcNMjUwNTAyMDUzMzI0WjAYMRYwFAYD VQQDEw02ODBiMWVhNS1iYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76rpnA4Ksi0igwPRMI79bZvhyLhau0pfLt1UYmMGUNi+HahUxTlL9aBM83it XqINiSAbH66xnAN6F4JauKyEAeRSxqNiYCPQriYCsxc74WfRR0NltfWKccnTLClQ 3CYH5L7AkPsL3mz4Q1lmHJxgHsqn17SQXqdCdH9/PorvL2mKNpqZwuf4RN2RWQzq L7755F7Nt4yiM9ea+EfBdZh7dVwiGLZPIuvBni7EyziQDFiSeqGZvdidudWQGXxn H7NbYm8UP2Yy1rq2JE+Sf2qWZXsHwq2JfB+gS3IVWWp0+MG4VYjy/7GUpwhqCXvf 26aJLRYoaEZf4FhB3kfCPrgSpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1LOQfD AsUz5CuIP7Pm6MqJmGuQMB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApaDpAEEorOCZXFZPGYCbEWcCYFADaqSTXr/u6NdUPrqXJHaiU6d2d fOQXGG11KxGv+95HLyQ+ZKHgytlMJ5TAG56n4IV7u9BR6jbGoA5kG46vaCy6RkKb 3ZBDuG5U5zroLSjhAkJByX5MbOSzmG9S4ndgE6bVHIcu4NaWOSY2wjO5Khzoe1nZ DBBfL9BtUIrQxMyNj2EjFUQL5M3L88+4kA8Ev4qCMgOTROEm7J2DiEdGU+3Eigax pIO2jOSGX+73rGsYjtCgS5rLVUIlVkhz+fi/ghWlbH52NHJA7CfdyLl7XH3C5+T5 xj4x8aqwkgyPAp9A2zwRkU4orVaFEOkc -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:47 2025 by rpki-client