$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json) Hash identifier: tI+FdQWpT/dy7yRyec2snVfVbQz3zqonsanBr/4cqMg= Subject key identifier: 42:17:BD:2D:3B:81:2C:AD:45:C3:14:BA:CA:76:FF:9D:02:84:66:EC Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft Manifest number: 0278 Signing time: Fri 25 Apr 2025 01:28:40 +0000 Manifest this update: Fri 25 Apr 2025 01:28:40 +0000 Manifest next update: Fri 02 May 2025 01:28:40 +0000 Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: 36za5OvAzMpGSiFXEtNPuKppVJoej1MNQwrB4/ChA+A=) 2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: XjpAhwEE1pSxcomjAf7JGmGOWyetZlZpCZkZjy+8eHs=) 3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: W+0s4kjB+OuXJgXiiXNsuYivZOGCT1if/fS87MXGYI0=) 4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: iecsMWv0SpxgWtsHLyW8Kxy2wH4QvRHyfn9HSIK1Az4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Validity Not Before: Apr 25 01:28:40 2025 GMT Not After : May 2 01:28:40 2025 GMT Subject: CN=680ae548-990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:fe:c1:c6:55:04:ca:df:9d:13:e4:37:a0: 94:40:23:87:92:fb:21:9d:8e:9a:b2:e7:41:01:a3: 15:f0:01:a6:e9:8c:59:b0:fd:bc:1f:3e:a3:1d:19: 18:7c:a5:e2:76:d3:0a:9d:76:ff:ba:00:b4:eb:cb: a9:06:9b:d0:9d:3f:32:49:b0:8a:49:b0:64:a9:b6: c4:1b:0a:9b:e7:20:11:7d:38:31:72:10:4a:d6:f0: 83:8e:d8:21:aa:da:89:95:f7:2c:e2:e3:d3:1f:bc: 05:08:3c:25:f8:af:31:32:67:16:ec:4f:bd:e2:e4: b6:60:f2:6b:f2:d8:b8:8f:30:91:31:ad:9c:2e:ef: 3e:cf:ce:ee:d0:4c:f9:5b:7d:92:01:c7:95:b2:29: 53:16:3b:8d:3a:01:c1:6f:c7:18:d6:c0:2b:c8:02: 2d:9e:c8:31:5f:17:de:44:48:c8:37:3c:9d:3d:85: 65:9a:ae:fb:87:f4:1f:d1:3b:2f:44:dd:b7:96:c9: d9:a7:77:ae:e2:88:32:6d:70:70:24:ca:38:bb:f5: ec:3b:28:d9:3e:36:e9:0c:fa:f3:45:28:6c:c6:e8: af:6b:9a:ac:e1:21:64:e9:c4:5a:93:45:54:cb:a3: 53:d0:67:dc:e9:72:c0:f2:cf:89:aa:39:86:fa:9f: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:BD:2D:3B:81:2C:AD:45:C3:14:BA:CA:76:FF:9D:02:84:66:EC X509v3 Authority Key Identifier: keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a0:4a:b0:ce:3e:49:23:24:af:a2:db:4f:e6:3d:04:da:f5: 59:09:c6:cf:8a:c0:6d:06:dc:12:38:45:14:0f:df:cb:35:f0: b5:bc:85:1f:bf:5b:6b:6b:39:bd:e6:8f:dc:c0:47:37:e1:a7: f1:a7:44:9e:38:2f:d4:c7:42:2a:b4:95:67:5b:d7:ce:5c:8c: b8:47:5e:c5:a1:73:18:17:cc:fc:b4:16:f7:3a:e7:e6:54:73: 34:21:f4:0c:12:ca:78:ee:b0:5b:7a:52:15:76:43:a3:3a:75: 1f:e1:30:f7:17:16:1f:b0:a0:e6:85:67:e0:c9:9b:7f:4d:66: 3a:b1:2d:f8:9b:cd:51:75:65:7e:d6:9e:b7:02:8a:eb:2e:fa: 08:21:eb:ca:cb:8c:ca:bb:bc:ef:2a:4a:a0:db:5a:a7:23:1c: ce:d0:80:12:c7:51:fe:f9:85:ec:f8:86:a0:53:8d:25:0c:f0: 9d:86:5e:30:94:ea:98:f1:df:ce:2b:81:d5:59:4d:1b:84:ed: b7:51:29:06:af:ea:f9:eb:08:54:56:20:5e:bc:a5:01:96:d0: 17:a1:dd:80:93:fb:a0:6c:6d:e0:e7:9e:ae:44:d7:14:b3:8b: f3:27:47:0a:b8:51:9e:51:17:07:1b:b7:44:ff:7e:6d:b0:9a: 31:28:e1:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF REEwODdFMkMwHhcNMjUwNDI1MDEyODQwWhcNMjUwNTAyMDEyODQwWjAYMRYwFAYD VQQDEw02ODBhZTU0OC05OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYz+wcZVBMrfnRPkN6CUQCOHkvshnY6asudBAaMV8AGm6YxZsP28Hz6jHRkY fKXidtMKnXb/ugC068upBpvQnT8ySbCKSbBkqbbEGwqb5yARfTgxchBK1vCDjtgh qtqJlfcs4uPTH7wFCDwl+K8xMmcW7E+94uS2YPJr8ti4jzCRMa2cLu8+z87u0Ez5 W32SAceVsilTFjuNOgHBb8cY1sAryAItnsgxXxfeREjINzydPYVlmq77h/Qf0Tsv RN23lsnZp3eu4ogybXBwJMo4u/XsOyjZPjbpDPrzRShsxuiva5qs4SFk6cRak0VU y6NT0Gfc6XLA8s+JqjmG+p8O+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIXvS07 gSytRcMUusp2/50ChGbsMB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5 REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZS N2pQSVJOUkFxakR0b0lmaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABoEqwzj5JIySvottP5j0E2vVZCcbPisBtBtwSOEUUD9/LNfC1vIUf v1trazm95o/cwEc34afxp0SeOC/Ux0IqtJVnW9fOXIy4R17FoXMYF8z8tBb3Oufm VHM0IfQMEsp47rBbelIVdkOjOnUf4TD3FxYfsKDmhWfgyZt/TWY6sS34m81RdWV+ 1p63AorrLvoIIevKy4zKu7zvKkqg21qnIxzO0IASx1H++YXs+IagU40lDPCdhl4w lOqY8d/OK4HVWU0bhO23USkGr+r56whUViBevKUBltAXod2Ak/ugbG3g556uRNcU s4vzJ0cKuFGeURcHG7dE/35tsJoxKOHZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:34 2025 by rpki-client