$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: vzLRhv5q3IwTscLH0+MSNlApwNEGsntBHnUbEPoP/xM= Subject key identifier: CE:EE:64:7E:51:38:67:DF:81:86:AF:FF:E4:BE:ED:7D:F5:74:BC:47 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 096D Signing time: Thu 24 Apr 2025 20:02:00 +0000 Manifest this update: Thu 24 Apr 2025 20:02:00 +0000 Manifest next update: Thu 01 May 2025 20:02:00 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: PCPPATnz/Yu9FCrQyxAaFeAn0g0QgQuwr5kr6oHXmPo=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Apr 24 20:02:00 2025 GMT Not After : May 1 20:02:00 2025 GMT Subject: CN=680a98b8-d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:3b:1d:74:42:c5:60:4d:13:04:c8:fe:85: 2d:b7:48:06:38:f3:ba:2a:cc:45:3a:8c:b0:86:74: ba:21:aa:78:be:73:98:13:1d:0a:b2:f6:e9:19:0a: 66:78:b5:73:cf:7d:0a:85:b3:78:65:ce:e0:6f:81: 31:43:71:45:ab:7c:1a:df:fd:01:84:18:b0:b7:9f: c0:24:5a:1b:43:2e:51:81:d8:42:8e:6b:4c:fe:d1: 4d:79:25:fb:c1:6d:a0:e5:2a:ac:98:2d:c0:cd:4f: 9e:e6:2a:13:24:fc:b3:20:16:67:4f:98:19:cf:24: 59:b0:4e:bb:b4:38:01:2e:a0:e9:35:bb:66:53:04: c8:df:a8:7e:c6:3d:56:65:e1:37:d7:1b:33:2b:f2: 4f:d3:34:f4:f1:89:e0:8a:2a:c4:06:63:ad:7c:6e: 64:1a:7d:9b:df:ff:ba:58:63:37:df:e4:25:57:1e: 9d:c7:84:1f:21:40:40:d9:d6:72:54:0c:d6:db:4b: e9:3e:e4:40:88:93:09:9e:92:9f:ca:90:90:9c:cf: e5:b7:b5:66:f2:8a:a3:85:43:8e:01:bb:3e:58:98: f8:e0:a4:7b:40:02:c9:69:4a:73:d7:2c:de:80:9a: 72:95:70:e9:bd:41:60:b1:77:12:d7:bf:7e:fa:c5: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:64:7E:51:38:67:DF:81:86:AF:FF:E4:BE:ED:7D:F5:74:BC:47 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5c:82:f2:60:24:42:ac:44:14:af:d9:6d:0d:50:8f:c8:c8: 43:39:af:ab:e4:13:17:ff:a1:77:18:ef:fe:c6:3f:12:47:1d: 6d:1a:e4:ec:5b:bc:1b:39:c9:45:33:a1:d3:f3:8c:ff:8e:1f: 13:dc:08:02:0f:ee:87:02:ca:bb:94:90:71:ef:af:cd:09:32: 8d:f1:84:a9:b2:01:fa:9d:90:b8:b0:08:ed:8b:8a:6f:7b:37: bb:4d:53:03:ab:57:53:9e:a3:23:52:d9:97:cd:f6:4f:a0:43: 8b:5a:37:dd:75:65:5d:73:ec:22:18:8f:11:35:32:a6:ac:06: ec:be:0e:7c:fa:2f:07:2a:e5:47:a3:ef:59:65:25:6e:dc:9c: 00:d1:02:d2:fb:8e:33:7f:14:b2:f3:d8:c5:90:70:6b:21:65: 5f:9a:e3:ba:c4:80:cb:01:be:0a:dc:e8:b1:ee:45:49:66:6c: 96:6b:cb:47:98:9a:d3:02:8a:f0:3c:18:b4:57:f4:38:4a:43: a1:51:e3:66:78:ec:ce:fa:e8:8a:50:95:09:41:96:48:c1:e2: b2:70:69:06:e8:4d:6b:36:70:fc:c0:64:67:47:a3:2f:69:f4: 8f:21:c0:22:80:af:34:d4:c3:fc:bc:95:a9:a0:9e:d9:e4:b6: a2:e2:3c:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwNDI0MjAwMjAwWhcNMjUwNTAxMjAwMjAwWjAYMRYwFAYD VQQDEw02ODBhOThiOC1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0s7HXRCxWBNEwTI/oUtt0gGOPO6KsxFOoywhnS6Iap4vnOYEx0KsvbpGQpm eLVzz30KhbN4Zc7gb4ExQ3FFq3wa3/0BhBiwt5/AJFobQy5RgdhCjmtM/tFNeSX7 wW2g5SqsmC3AzU+e5ioTJPyzIBZnT5gZzyRZsE67tDgBLqDpNbtmUwTI36h+xj1W ZeE31xszK/JP0zT08YngiirEBmOtfG5kGn2b3/+6WGM33+QlVx6dx4QfIUBA2dZy VAzW20vpPuRAiJMJnpKfypCQnM/lt7Vm8oqjhUOOAbs+WJj44KR7QALJaUpz1yze gJpylXDpvUFgsXcS179++sWh+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7uZH5R OGffgYav/+S+7X31dLxHMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAXILyYCRCrEQUr9ltDVCPyMhDOa+r5BMX/6F3GO/+xj8SRx1tGuTs W7wbOclFM6HT84z/jh8T3AgCD+6HAsq7lJBx76/NCTKN8YSpsgH6nZC4sAjti4pv eze7TVMDq1dTnqMjUtmXzfZPoEOLWjfddWVdc+wiGI8RNTKmrAbsvg58+i8HKuVH o+9ZZSVu3JwA0QLS+44zfxSy89jFkHBrIWVfmuO6xIDLAb4K3Oix7kVJZmyWa8tH mJrTAorwPBi0V/Q4SkOhUeNmeOzO+uiKUJUJQZZIweKycGkG6E1rNnD8wGRnR6Mv afSPIcAigK801MP8vJWpoJ7Z5Lai4jxi -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:53 2025 by rpki-client