$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: jQ83iwgeK1YihVxIe4fUn1r8/JE6lGvVjoJlVzXD+bY= Subject key identifier: C5:6B:3F:F5:9B:9C:D0:CA:87:83:C2:CB:44:C9:EC:EA:B7:2E:6C:03 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 25FC Signing time: Thu 24 Apr 2025 15:43:16 +0000 Manifest this update: Thu 24 Apr 2025 15:43:16 +0000 Manifest next update: Thu 01 May 2025 15:43:16 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: p/1MxalRb9/VN8brV8MGOK9WtNnuDEJ42DgI1AeGc68=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9748 (0x2614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Apr 24 15:43:16 2025 GMT Not After : May 1 15:43:16 2025 GMT Subject: CN=680a5c14-c13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:08:1f:ad:e6:0a:ba:39:aa:b1:b8:83:19: 27:92:6b:da:0e:2f:60:53:bb:87:b5:f5:c8:75:60: d3:f2:14:dc:51:70:85:83:5c:55:96:11:1c:fa:da: cd:87:f3:eb:93:e7:bb:29:b5:40:7e:79:b0:54:f7: d2:18:77:13:fe:f6:79:84:36:66:a8:89:f6:00:69: 7e:63:9f:52:94:09:ee:f7:12:82:f6:45:ba:14:a7: 45:41:e6:50:1f:4d:43:46:8c:8d:c7:39:eb:b4:6b: 7d:33:a5:a4:e0:20:fd:f0:82:8f:f0:41:1b:a7:83: 45:01:32:83:88:87:f3:c4:36:29:93:ff:96:8c:c1: d0:03:63:c8:4f:af:08:ad:cc:ca:6e:72:7a:2a:6c: 0d:05:98:58:39:45:30:22:2f:cc:bd:d4:b8:46:1c: e8:91:01:32:cb:43:f7:0e:4f:8b:31:6a:3c:d0:4c: 64:62:ff:8a:4e:98:86:12:00:19:56:10:e8:46:ed: 08:09:b4:98:a0:ab:34:22:e7:55:4b:23:25:a7:62: 51:0b:c6:3f:a9:05:ac:ab:16:62:63:3d:df:2b:75: 74:41:26:bc:12:aa:ef:d9:c2:93:a1:59:bd:78:7d: 56:1d:d8:c7:32:2f:0e:94:18:32:64:b2:fa:c2:68: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:3F:F5:9B:9C:D0:CA:87:83:C2:CB:44:C9:EC:EA:B7:2E:6C:03 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ae:10:76:a0:21:b4:e3:15:2a:72:f4:18:ca:f0:e5:a4:40: d1:33:ed:cf:c5:95:f0:31:10:31:ab:11:17:49:c3:f6:4f:40: 29:f4:4a:ea:53:dd:ba:fa:a3:6e:bb:4a:50:b5:28:a2:87:f1: 6c:f4:e7:e5:96:98:a9:be:96:a0:6b:d6:07:de:ec:87:9a:31: 41:3a:61:28:88:1c:5f:14:f1:45:fa:d9:e2:e9:65:44:5d:79: ab:ae:25:36:71:ea:48:4d:8f:13:72:1d:06:b7:5a:88:57:ea: 95:86:d9:06:57:97:93:d2:fb:7d:37:42:d7:bf:8a:6f:60:47: f1:a4:90:b3:f3:67:91:84:5b:4f:fa:04:38:8d:b7:73:93:49: 37:6c:6e:6f:80:1f:16:49:2f:22:45:be:67:c4:a4:2e:82:36: 27:2c:74:1e:dc:95:29:29:1e:23:c0:d6:55:9f:66:89:b8:ee: 0f:7d:b6:58:69:2f:0b:cf:a8:0d:09:4e:32:a2:4d:05:ec:d9: 22:ce:33:79:74:70:69:56:9e:05:5b:b4:8a:a0:26:10:c7:fb: 39:0f:ac:2b:44:85:62:d2:5c:73:99:fd:56:7d:28:a1:fd:a4: a2:93:5c:b0:c0:74:29:fc:c0:58:c7:27:08:c3:fd:06:91:2b: f4:72:e1:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNDI0MTU0MzE2WhcNMjUwNTAxMTU0MzE2WjAYMRYwFAYD VQQDEw02ODBhNWMxNC1jMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AIIH63mCro5qrG4gxknkmvaDi9gU7uHtfXIdWDT8hTcUXCFg1xVlhEc+trN h/Prk+e7KbVAfnmwVPfSGHcT/vZ5hDZmqIn2AGl+Y59SlAnu9xKC9kW6FKdFQeZQ H01DRoyNxznrtGt9M6Wk4CD98IKP8EEbp4NFATKDiIfzxDYpk/+WjMHQA2PIT68I rczKbnJ6KmwNBZhYOUUwIi/MvdS4RhzokQEyy0P3Dk+LMWo80ExkYv+KTpiGEgAZ VhDoRu0ICbSYoKs0IudVSyMlp2JRC8Y/qQWsqxZiYz3fK3V0QSa8Eqrv2cKToVm9 eH1WHdjHMi8OlBgyZLL6wmjvfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVrP/Wb nNDKh4PCy0TJ7Oq3LmwDMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfrhB2oCG04xUqcvQYyvDlpEDRM+3PxZXwMRAxqxEXScP2T0Ap9Erq U926+qNuu0pQtSiih/Fs9Ofllpipvpaga9YH3uyHmjFBOmEoiBxfFPFF+tni6WVE XXmrriU2cepITY8Tch0Gt1qIV+qVhtkGV5eT0vt9N0LXv4pvYEfxpJCz82eRhFtP +gQ4jbdzk0k3bG5vgB8WSS8iRb5nxKQugjYnLHQe3JUpKR4jwNZVn2aJuO4PfbZY aS8Lz6gNCU4yok0F7NkizjN5dHBpVp4FW7SKoCYQx/s5D6wrRIVi0lxzmf1WfSih /aSik1ywwHQp/MBYxycIw/0GkSv0cuG2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:55 2025 by rpki-client