$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json) Hash identifier: PE4VTYeRH5JIWl8oj/7S7RsiIMhy0gSId5v06BzriH0= Subject key identifier: B8:22:9F:78:65:9C:09:C8:AF:D3:1F:26:30:4F:A5:94:A9:B7:51:14 Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 02:18:46 +0000 Manifest this update: Fri 25 Apr 2025 02:18:45 +0000 Manifest next update: Fri 02 May 2025 02:18:45 +0000 Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: Tof5m2RA7k4f+3yQEiQNMES35SmFlX93p8h3foOd8tk=) 2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: BVHGl0zZvP8Be5BZrq+SjWInlh4j0twqe2382XWJEhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Validity Not Before: Apr 25 02:18:45 2025 GMT Not After : May 2 02:18:45 2025 GMT Subject: CN=680af105-509e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:b0:8b:9f:00:bf:38:91:c1:62:cd:0d:2d: 8c:74:f5:ae:a8:de:06:6f:b7:35:39:4a:25:b1:5d: f1:db:68:1d:6f:12:cd:c0:7e:94:3c:ab:05:6a:b6: e3:6a:be:31:10:8c:89:ac:db:46:47:db:9d:37:f1: 78:26:bb:ed:15:51:42:9d:41:2c:dd:9f:95:98:f5: 0a:58:1b:31:7f:27:a4:4d:71:cf:7b:0d:b0:83:7e: 55:0a:90:e6:b6:a9:e9:fa:07:de:b4:83:4a:cf:b5: 93:2c:33:d5:e1:7e:94:17:3b:f3:d1:f4:24:53:cc: 29:8d:d9:ee:1a:2f:69:87:ff:24:94:b9:8f:b2:c2: 7e:28:b5:09:ea:ce:b0:33:ab:e8:f8:62:0f:bc:eb: ad:c6:79:e0:bf:66:09:57:4e:7e:e1:49:5e:bf:fa: 97:74:93:4d:86:2c:a3:02:e9:f7:09:ff:c4:a0:1f: 43:3c:7e:58:80:14:7b:21:43:2f:1e:eb:5d:ef:01: fb:f0:eb:fa:3f:dc:9e:cb:af:cc:e5:76:26:96:0d: 33:0e:b1:36:76:d3:60:7a:7c:50:e0:68:ca:0e:ca: db:f7:93:01:a8:fb:41:2a:04:af:ca:2d:41:1c:f3: 05:c1:b0:2c:b5:b2:e0:a9:07:89:cb:1e:df:d6:d3: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:22:9F:78:65:9C:09:C8:AF:D3:1F:26:30:4F:A5:94:A9:B7:51:14 X509v3 Authority Key Identifier: keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f2:f2:03:f1:04:5b:7b:4f:f6:9c:ba:2e:c0:89:01:a2:b8: 2d:2e:df:be:0e:8e:58:e0:9a:1d:a9:9d:f8:0a:da:1f:7c:5a: a4:16:19:78:d9:ba:3b:fc:24:b0:77:af:64:4e:ad:d7:7c:1d: 66:17:ae:d0:d9:15:19:28:26:55:c1:2d:83:7e:41:94:08:c4: f6:ad:c8:42:d3:83:9f:55:78:2d:1d:ba:61:9f:54:15:a3:48: 7b:09:e2:4a:e7:cb:b1:f3:e1:a7:6a:43:a6:a1:07:13:8f:ea: 54:24:b9:7f:c7:88:a5:e2:cb:ef:76:7d:63:8c:7f:8b:22:d8: 4e:47:88:f6:e5:0f:fa:dc:77:9d:10:1d:42:9b:bc:2e:77:8a: 1d:58:56:00:5b:8f:5c:a7:ea:aa:b8:82:10:95:8a:1c:62:6a: b3:03:ae:38:6d:82:3c:42:c2:16:64:a5:40:88:86:51:f4:24: 9d:a5:76:e8:c1:36:bd:ab:b9:f4:2d:12:a6:74:ca:d9:9b:cd: 8e:9d:56:b3:23:95:c3:0d:4c:d8:3a:83:51:87:98:20:12:fa: 19:f0:07:ef:60:bc:cf:e0:09:3f:01:3d:4e:45:2a:a6:c8:ea: 59:74:63:e2:92:ba:97:ef:89:5a:03:3c:2d:64:0f:df:b2:d0: 72:24:21:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MkExMTAvBgNVBAUTKEYxMjVBMEU2QjhFQkRDMTM2QUI1MzA3RDQ5MTQ3MTBF OTAwNjNCQzMwHhcNMjUwNDI1MDIxODQ1WhcNMjUwNTAyMDIxODQ1WjAYMRYwFAYD VQQDEw02ODBhZjEwNS01MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWuwi58AvziRwWLNDS2MdPWuqN4Gb7c1OUolsV3x22gdbxLNwH6UPKsFarbj ar4xEIyJrNtGR9udN/F4JrvtFVFCnUEs3Z+VmPUKWBsxfyekTXHPew2wg35VCpDm tqnp+gfetINKz7WTLDPV4X6UFzvz0fQkU8wpjdnuGi9ph/8klLmPssJ+KLUJ6s6w M6vo+GIPvOutxnngv2YJV05+4Ulev/qXdJNNhiyjAun3Cf/EoB9DPH5YgBR7IUMv Hutd7wH78Ov6P9yey6/M5XYmlg0zDrE2dtNgenxQ4GjKDsrb95MBqPtBKgSvyi1B HPMFwbAstbLgqQeJyx7f1tNUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgin3hl nAnIr9MfJjBPpZSpt1EUMB8GA1UdIwQYMBaAFPEloOa469wTarUwfUkUcQ6QBjvD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkyQS84MUEzMDA3MDg2 NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNCTnF0VEI5U1JSeERwQUdP OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTV2c1cmpyM0JOcXRUQjlTUlJ4RHBBR084TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkyQS84MUEzMDA3MDg2NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNC TnF0VEI5U1JSeERwQUdPOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC8vID8QRbe0/2nLouwIkBorgtLt++Do5Y4JodqZ34CtoffFqkFhl4 2bo7/CSwd69kTq3XfB1mF67Q2RUZKCZVwS2DfkGUCMT2rchC04OfVXgtHbphn1QV o0h7CeJK58ux8+GnakOmoQcTj+pUJLl/x4il4svvdn1jjH+LIthOR4j25Q/63Hed EB1Cm7wud4odWFYAW49cp+qquIIQlYocYmqzA644bYI8QsIWZKVAiIZR9CSdpXbo wTa9q7n0LRKmdMrZm82OnVazI5XDDUzYOoNRh5ggEvoZ8AfvYLzP4Ak/AT1ORSqm yOpZdGPikrqX74laAzwtZA/fstByJCGT -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:37 2025 by rpki-client