$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: WT87tD94xW0yHoI3TdZ/1NvCH6/MUfSyNa8PrDdMP4c= Subject key identifier: 0B:C0:54:67:92:D5:79:66:5C:BA:3F:A9:C6:31:75:FF:AD:2D:86:86 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 089E Signing time: Thu 12 Jun 2025 20:18:07 +0000 Manifest this update: Thu 12 Jun 2025 20:18:06 +0000 Manifest next update: Thu 19 Jun 2025 20:18:06 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: /hJ52WqP3/2xsQ2kwjcYDD03lmPvVHyLKht2pG/5nPU=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Jun 12 20:18:06 2025 GMT Not After : Jun 19 20:18:06 2025 GMT Subject: CN=684b35ff-12e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:80:37:95:eb:a4:42:fe:ab:30:b5:51:8c: 26:8c:f4:ef:bf:39:53:ab:02:a1:ea:c6:73:6e:80: 77:86:a2:d4:7d:40:b4:08:87:73:bd:7f:b2:c4:cf: 59:87:8b:f2:1f:b6:10:dd:84:53:db:3b:21:9c:94: b3:71:0d:21:84:20:1f:7f:8d:89:62:ef:f4:33:e0: ca:af:dd:24:fc:4c:d4:23:e9:c7:ea:3e:58:69:58: 63:04:37:7f:d3:86:58:09:9d:92:06:d4:d5:41:f2: f0:e9:aa:e6:63:8d:53:03:94:c3:6a:45:ce:d5:99: 84:d1:42:0d:e1:ca:e5:37:49:ab:67:4b:7b:dc:9c: 97:5c:41:41:af:e5:72:9c:ea:9b:d3:1f:6d:bb:a6: f0:2c:6a:4a:14:1c:41:42:fe:f7:7f:d9:0f:f1:82: dc:f9:96:51:8c:ec:48:36:ef:75:bd:1c:d0:8e:ac: 1b:2f:04:cb:7c:c6:53:c1:86:59:bb:94:7d:02:a7: 35:13:00:9b:fd:ce:39:f2:81:89:4d:a9:87:6b:9e: 75:a1:96:d3:00:bc:2b:56:a0:f5:c2:73:99:99:4c: b9:e5:00:2e:6e:ef:cd:e4:c1:4e:a1:f0:72:4e:48: 8a:5e:58:6c:d5:c8:41:ea:af:97:ba:b4:ad:d8:e9: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C0:54:67:92:D5:79:66:5C:BA:3F:A9:C6:31:75:FF:AD:2D:86:86 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d2:4a:b8:12:c4:e0:40:c3:2c:5c:ac:7e:2d:39:c4:53:59: 51:cd:38:c8:3b:e8:bc:01:80:4d:8b:03:af:85:22:d5:90:56: 53:70:06:f9:c9:2a:80:bf:45:df:89:b8:82:bc:1d:c9:97:e9: e9:6c:d1:b6:06:2e:8d:92:05:59:a8:bf:f8:22:53:10:fa:ce: c5:f9:00:72:8c:8b:d6:c9:a3:40:26:46:d7:77:85:8e:93:9b: ba:a3:5b:6f:8f:0e:51:31:61:e9:90:0c:33:5d:6a:52:ac:ca: 5c:26:cb:0c:ef:21:33:07:88:ef:6d:5d:f0:39:23:ba:02:87: 49:5d:c1:d4:b0:f3:00:fd:7d:e6:ad:31:7f:75:e7:78:d6:27: 13:b5:d4:2b:c3:d5:87:7a:76:4d:0f:a4:12:84:4c:cd:c5:ba: 80:f2:e7:e5:cf:74:ed:50:c0:f3:60:81:2b:e2:53:0b:66:5c: 09:69:b6:01:93:21:ea:b4:a3:ee:15:25:48:64:88:d8:a9:38: 56:0e:89:31:23:d5:00:a7:6a:f0:8a:66:b6:45:db:93:0a:e8: 60:1f:46:32:c2:ba:bd:35:8b:99:9f:d2:ba:07:21:3d:1d:a5: 4c:39:f4:ba:9d:5b:a7:bd:bb:d8:de:35:bb:c8:80:6c:8e:42: 87:1b:49:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNjEyMjAxODA2WhcNMjUwNjE5MjAxODA2WjAYMRYwFAYD VQQDEw02ODRiMzVmZi0xMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgKAN5XrpEL+qzC1UYwmjPTvvzlTqwKh6sZzboB3hqLUfUC0CIdzvX+yxM9Z h4vyH7YQ3YRT2zshnJSzcQ0hhCAff42JYu/0M+DKr90k/EzUI+nH6j5YaVhjBDd/ 04ZYCZ2SBtTVQfLw6armY41TA5TDakXO1ZmE0UIN4crlN0mrZ0t73JyXXEFBr+Vy nOqb0x9tu6bwLGpKFBxBQv73f9kP8YLc+ZZRjOxINu91vRzQjqwbLwTLfMZTwYZZ u5R9Aqc1EwCb/c458oGJTamHa551oZbTALwrVqD1wnOZmUy55QAubu/N5MFOofBy TkiKXlhs1chB6q+XurSt2On6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvAVGeS 1XlmXLo/qcYxdf+tLYaGMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr0kq4EsTgQMMsXKx+LTnEU1lRzTjIO+i8AYBNiwOvhSLVkFZTcAb5 ySqAv0XfibiCvB3Jl+npbNG2Bi6NkgVZqL/4IlMQ+s7F+QByjIvWyaNAJkbXd4WO k5u6o1tvjw5RMWHpkAwzXWpSrMpcJssM7yEzB4jvbV3wOSO6AodJXcHUsPMA/X3m rTF/ded41icTtdQrw9WHenZND6QShEzNxbqA8uflz3TtUMDzYIEr4lMLZlwJabYB kyHqtKPuFSVIZIjYqThWDokxI9UAp2rwima2RduTCuhgH0Yywrq9NYuZn9K6ByE9 HaVMOfS6nVunvbvY3jW7yIBsjkKHG0kd -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:40 2025 by rpki-client