$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: VeqSSu/+fozrp8sA0D2Yf3dDy8I1U0Z1dN0QaF6oXvk= Subject key identifier: 9D:5C:67:C8:60:6B:EF:D3:E3:FA:FE:75:9A:72:AC:B1:A9:68:3B:33 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 0188 Signing time: Fri 25 Apr 2025 02:45:02 +0000 Manifest this update: Fri 25 Apr 2025 02:45:02 +0000 Manifest next update: Fri 02 May 2025 02:45:02 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: oYnQJZYcfNW/IaybgwfCUhdMd1jn+HCH04LldMNBjPg=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Apr 25 02:45:02 2025 GMT Not After : May 2 02:45:02 2025 GMT Subject: CN=680af72e-5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:40:c8:84:f9:14:1f:a6:64:1c:c9:f4:4f: ea:98:3d:59:02:be:94:c0:d4:73:2e:d5:81:85:45: 7f:f5:af:09:53:91:65:9a:03:44:77:48:b2:12:cd: bc:d7:23:2b:3b:bf:15:c9:12:ac:b9:2a:da:39:13: 6b:c2:65:54:d0:7a:55:86:27:f8:f3:45:8e:d8:5c: e6:30:9d:fd:e0:23:95:9f:6f:12:0e:1f:c0:57:64: cc:9e:b2:80:cd:9e:5f:c5:43:c3:ea:8d:ee:c5:db: 52:56:d8:32:17:4e:8f:fa:7a:f0:c8:00:fd:5e:0e: e8:34:5e:3d:36:47:a8:eb:17:77:0e:17:b9:82:f9: 81:8a:a2:01:8c:89:9a:4d:31:54:76:72:e8:3b:46: 59:68:41:8b:fe:ae:ab:e7:1e:64:7b:a8:d1:0e:36: 92:a5:7c:ef:76:17:87:4b:c9:35:79:2b:8b:95:b2: 78:2a:05:e9:cd:82:46:ab:94:aa:94:01:b5:da:3e: 20:de:9a:4b:48:f0:f9:fa:1c:36:67:75:de:88:7d: 74:10:ab:74:44:8e:44:ca:63:0d:1e:8c:b2:a3:fb: c1:b6:b9:f0:78:d4:1a:ce:0e:6b:e2:36:f5:a7:e9: c9:27:fe:0b:0d:11:b6:eb:9e:1f:03:a3:f0:84:d6: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5C:67:C8:60:6B:EF:D3:E3:FA:FE:75:9A:72:AC:B1:A9:68:3B:33 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0a:50:47:8e:8c:8e:34:e5:e1:26:b1:08:de:02:11:ef:5c: 36:3b:52:c5:fa:ae:37:23:42:17:2c:b4:b8:1d:a7:a1:4c:18: 8b:fb:32:50:5e:c5:17:82:f9:8b:5f:2b:c7:99:54:a4:db:a7: 77:27:c8:e4:06:08:90:75:00:d7:d0:30:f4:a7:7b:97:ef:8b: bc:f0:e7:d6:7a:0b:0b:c9:97:22:01:df:fc:05:82:6c:37:72: be:d3:59:37:81:f1:0e:a8:17:cf:3e:28:1f:75:1a:ca:19:f3: 64:88:a4:99:28:db:f9:ad:6e:31:f3:36:68:53:e8:49:0f:0d: 49:2b:58:df:62:c0:7c:12:a6:9a:d7:9c:e5:b3:45:80:f9:87: ef:e8:3b:03:86:d5:79:59:68:f0:a2:a9:bc:2d:aa:08:8c:c9: b9:2f:af:48:3e:6e:ce:a9:64:f2:63:52:3f:0e:bd:21:d2:dc: 5a:4d:2a:e0:ab:2f:0a:ca:8d:f3:df:83:42:c3:6a:f8:6f:c1: 81:01:c8:9c:37:05:14:ec:32:bd:1d:98:28:5c:bf:27:79:69: 74:9a:c5:cd:2d:69:fd:5f:ee:11:96:a2:a7:b0:8b:6e:d4:74: cf:0b:6a:db:8c:e0:7f:d6:38:dd:bd:b6:24:ab:40:41:63:98: da:53:1c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwNDI1MDI0NTAyWhcNMjUwNTAyMDI0NTAyWjAYMRYwFAYD VQQDEw02ODBhZjcyZS01ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxehAyIT5FB+mZBzJ9E/qmD1ZAr6UwNRzLtWBhUV/9a8JU5FlmgNEd0iyEs28 1yMrO78VyRKsuSraORNrwmVU0HpVhif480WO2FzmMJ394COVn28SDh/AV2TMnrKA zZ5fxUPD6o3uxdtSVtgyF06P+nrwyAD9Xg7oNF49Nkeo6xd3Dhe5gvmBiqIBjIma TTFUdnLoO0ZZaEGL/q6r5x5ke6jRDjaSpXzvdheHS8k1eSuLlbJ4KgXpzYJGq5Sq lAG12j4g3ppLSPD5+hw2Z3XeiH10EKt0RI5EymMNHoyyo/vBtrnweNQazg5r4jb1 p+nJJ/4LDRG2654fA6PwhNb5oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1cZ8hg a+/T4/r+dZpyrLGpaDszMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbClBHjoyONOXhJrEI3gIR71w2O1LF+q43I0IXLLS4HaehTBiL+zJQ XsUXgvmLXyvHmVSk26d3J8jkBgiQdQDX0DD0p3uX74u88OfWegsLyZciAd/8BYJs N3K+01k3gfEOqBfPPigfdRrKGfNkiKSZKNv5rW4x8zZoU+hJDw1JK1jfYsB8Eqaa 15zls0WA+Yfv6DsDhtV5WWjwoqm8LaoIjMm5L69IPm7OqWTyY1I/Dr0h0txaTSrg qy8Kyo3z34NCw2r4b8GBAcicNwUU7DK9HZgoXL8neWl0msXNLWn9X+4RlqKnsItu 1HTPC2rbjOB/1jjdvbYkq0BBY5jaUxze -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:52 2025 by rpki-client