$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: IZOQu803BlnRuIxrBU3ubcdnHLbtw+uvYucsfNn+thM= Subject key identifier: 73:16:C5:8A:67:3A:7A:7B:2F:89:50:A9:08:71:D7:33:77:FB:B8:B8 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0885 Signing time: Thu 24 Apr 2025 20:28:20 +0000 Manifest this update: Thu 24 Apr 2025 20:28:20 +0000 Manifest next update: Thu 01 May 2025 20:28:20 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: oJgFnDk5zKczf6iZzZBKwSR8UvGb4a//yTJbKVeSX9I=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Apr 24 20:28:20 2025 GMT Not After : May 1 20:28:20 2025 GMT Subject: CN=680a9ee4-f22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:48:cb:05:1a:9b:60:c6:e8:6b:fa:f3:e8: c0:bb:4d:46:d9:89:58:6f:cd:79:9d:85:8d:a7:29: 3a:ee:74:b5:da:32:3c:79:a5:31:f3:fe:a5:f0:00: 4e:66:2a:9c:bf:4f:64:0a:0f:8e:d1:95:36:ee:60: a5:a9:a1:e8:7b:33:50:75:dd:63:d2:1e:75:3a:89: 61:27:bb:a1:58:e6:e9:f5:c5:cd:d6:e2:83:41:eb: a2:a0:cf:5e:17:11:c2:4b:1b:cc:29:01:8a:fe:5d: 5e:52:0c:bb:c6:d8:3e:32:08:4d:92:70:78:f3:f2: e3:08:d2:40:9d:16:0e:45:a5:cf:93:41:91:32:7d: 25:6a:4d:d6:72:14:1d:d4:b1:37:a0:5b:9a:89:f4: 17:7f:de:87:03:91:b3:6a:f5:ab:67:db:5d:40:ae: 57:ab:1c:a4:44:ba:86:47:a2:de:ab:dd:4c:70:a4: 2c:c6:08:14:11:8b:be:68:2d:64:e9:e8:88:85:ff: 3f:64:24:f0:8b:75:23:43:80:1c:c1:4d:83:61:d4: 2a:1b:3d:93:66:7d:ef:16:4a:fe:a0:bb:32:e8:fb: e6:97:1f:80:1e:dd:b7:71:01:ca:2d:30:89:29:b1: a7:de:6b:21:4c:7c:02:fd:a7:ce:3a:47:eb:61:b4: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:16:C5:8A:67:3A:7A:7B:2F:89:50:A9:08:71:D7:33:77:FB:B8:B8 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ef:a9:89:cb:ff:be:2f:10:e0:58:c7:20:e5:0c:12:bc:1d: 3f:81:b9:d5:43:de:0f:cf:65:2d:5e:8a:21:a1:40:73:cc:64: be:0a:76:4f:d2:7b:98:26:d6:90:8b:97:84:70:d8:de:6e:dd: 3b:cb:d8:90:54:28:ce:b7:9a:1f:ab:25:2f:fa:e6:b6:9e:65: f8:07:14:a7:4a:d9:37:88:28:a8:a4:16:4f:7c:13:1b:99:04: 7e:2a:e9:f1:80:12:55:47:86:1a:93:24:87:a6:51:96:de:bd: f9:2e:7c:50:fc:76:38:83:1d:d2:1e:43:55:86:e3:0c:76:b0: 27:d2:18:e0:0e:36:7a:fb:03:83:40:f2:95:40:f8:4f:d4:4d: 20:9a:c0:ec:80:ab:25:cb:a7:69:a8:24:a7:d0:d5:4f:73:3d: 42:38:f4:e5:0c:e2:00:97:71:f3:e4:f8:ca:05:99:95:8b:85: 73:d9:34:e3:24:9e:17:c0:ec:cf:81:ce:ee:d5:9a:d5:b1:68: 25:87:46:06:38:0d:ed:10:f3:27:2f:88:3e:c5:9c:e2:d9:cc: ad:56:4a:65:f1:29:0d:53:ef:20:d9:ab:ab:b5:38:58:4b:9b: e4:85:e4:db:dd:66:f3:24:71:f8:d0:5b:1f:cd:ea:7a:94:c2: 2f:af:19:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNDI0MjAyODIwWhcNMjUwNTAxMjAyODIwWjAYMRYwFAYD VQQDEw02ODBhOWVlNC1mMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbBIywUam2DG6Gv68+jAu01G2YlYb815nYWNpyk67nS12jI8eaUx8/6l8ABO Ziqcv09kCg+O0ZU27mClqaHoezNQdd1j0h51OolhJ7uhWObp9cXN1uKDQeuioM9e FxHCSxvMKQGK/l1eUgy7xtg+MghNknB48/LjCNJAnRYORaXPk0GRMn0lak3WchQd 1LE3oFuaifQXf96HA5GzavWrZ9tdQK5XqxykRLqGR6Leq91McKQsxggUEYu+aC1k 6eiIhf8/ZCTwi3UjQ4AcwU2DYdQqGz2TZn3vFkr+oLsy6Pvmlx+AHt23cQHKLTCJ KbGn3mshTHwC/afOOkfrYbSzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMWxYpn Onp7L4lQqQhx1zN3+7i4MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE76mJy/++LxDgWMcg5QwSvB0/gbnVQ94Pz2UtXoohoUBzzGS+CnZP 0nuYJtaQi5eEcNjebt07y9iQVCjOt5ofqyUv+ua2nmX4BxSnStk3iCiopBZPfBMb mQR+KunxgBJVR4YakySHplGW3r35LnxQ/HY4gx3SHkNVhuMMdrAn0hjgDjZ6+wOD QPKVQPhP1E0gmsDsgKsly6dpqCSn0NVPcz1COPTlDOIAl3Hz5PjKBZmVi4Vz2TTj JJ4XwOzPgc7u1ZrVsWglh0YGOA3tEPMnL4g+xZzi2cytVkpl8SkNU+8g2aurtThY S5vkheTb3WbzJHH40Fsfzep6lMIvrxnU -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:47 2025 by rpki-client