$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: 6yziRTkhKumtBsfYGVeJl85pjImnW2QytkigL5wedZY= Subject key identifier: 94:80:2A:69:02:E2:97:E2:F0:58:BC:B4:F7:A3:96:73:CE:33:65:EC Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 0268 Signing time: Thu 01 May 2025 01:19:46 +0000 Manifest this update: Thu 01 May 2025 01:19:45 +0000 Manifest next update: Thu 08 May 2025 01:19:45 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: AQeAANy4+kVWC+RIIRpLAunVvtTTC1gdPoXLhZZxSC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: May 1 01:19:45 2025 GMT Not After : May 8 01:19:45 2025 GMT Subject: CN=6812cc31-38e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:6c:da:7c:b0:5c:a7:fd:42:61:89:5a:d7: 09:81:17:0c:9b:9b:2a:a5:9c:d7:e9:dd:54:89:ef: ad:93:7b:34:08:c2:c5:9e:6c:bd:29:cf:32:0b:2a: 5e:27:fd:1e:32:0c:ba:81:bf:04:29:6a:73:ee:37: bd:da:27:94:1d:8c:5c:85:82:d6:19:b8:fb:7b:ef: ba:82:5e:06:f2:95:b5:07:c4:7b:2e:2f:8a:7f:bc: 20:16:b7:37:4c:01:90:b2:96:df:e9:94:37:cf:09: e0:db:e4:2f:74:61:20:ef:2e:fb:ad:95:7f:f3:c0: 14:28:5e:ae:aa:54:11:76:6e:85:4c:e0:48:da:d5: f3:bd:e4:db:53:69:ad:7c:3b:a4:b3:88:68:c8:ec: bf:5a:bc:3a:0b:01:39:21:dd:98:00:e8:d3:9f:61: c8:84:4f:3e:3a:91:74:79:b9:7f:12:0e:45:1a:5f: e1:83:ca:ce:c3:91:ad:b7:61:02:2e:9b:f9:2a:6a: 13:b9:7c:2e:85:cf:9a:88:07:13:6f:bf:09:15:be: 3c:25:af:7f:77:3b:59:28:2b:13:dd:8e:a7:77:d0: 5c:16:cc:83:6d:81:fd:94:0f:75:ac:88:3a:3d:2f: 0e:33:7e:08:81:75:d5:d4:a6:e4:d6:95:bc:d2:98: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:2A:69:02:E2:97:E2:F0:58:BC:B4:F7:A3:96:73:CE:33:65:EC X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d0:38:4a:50:6a:dd:76:1b:13:95:53:79:b3:47:44:99:9d: a7:7d:3b:7a:a2:db:84:34:62:a3:3d:64:18:33:65:36:02:bc: 62:16:43:d8:e3:1f:96:5a:ef:8e:ac:21:42:20:16:bd:17:99: 87:ab:f5:16:00:67:8d:0d:aa:29:bb:80:ec:fb:92:72:f8:6a: df:49:62:89:7e:11:84:11:cc:ea:29:72:ff:34:bb:4c:53:d5: a2:2c:a4:58:0c:77:6b:dc:13:f0:33:ee:8b:56:90:f2:fb:df: 3a:ec:e5:3f:9b:27:b1:15:1b:9e:15:08:85:0a:1a:e3:69:75: b6:34:1f:3b:87:70:66:e6:74:46:59:23:1f:d5:2d:96:17:d4: 32:82:8f:5b:43:24:f5:5c:87:48:e2:fd:8e:73:7f:0b:ca:ee: 84:8a:da:87:7a:58:24:fd:23:e2:9b:1b:39:79:d1:40:9e:5b: 7f:41:56:c7:95:ca:45:3d:73:05:f0:bf:ff:ed:f4:b9:c8:2b: 19:2a:73:bf:8e:0a:a1:fc:36:29:4b:21:b5:87:95:82:47:90: 32:58:5d:30:2a:30:38:2f:56:81:7c:77:a6:4c:06:86:25:df: 1e:69:35:2a:0d:cc:14:06:83:6a:de:dc:6a:af:55:2a:da:56: fb:bd:a9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUwNTAxMDExOTQ1WhcNMjUwNTA4MDExOTQ1WjAYMRYwFAYD VQQDEw02ODEyY2MzMS0zOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Bs2nywXKf9QmGJWtcJgRcMm5sqpZzX6d1Uie+tk3s0CMLFnmy9Kc8yCype J/0eMgy6gb8EKWpz7je92ieUHYxchYLWGbj7e++6gl4G8pW1B8R7Li+Kf7wgFrc3 TAGQspbf6ZQ3zwng2+QvdGEg7y77rZV/88AUKF6uqlQRdm6FTOBI2tXzveTbU2mt fDuks4hoyOy/Wrw6CwE5Id2YAOjTn2HIhE8+OpF0ebl/Eg5FGl/hg8rOw5Gtt2EC Lpv5KmoTuXwuhc+aiAcTb78JFb48Ja9/dztZKCsT3Y6nd9BcFsyDbYH9lA91rIg6 PS8OM34IgXXV1Kbk1pW80piLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSAKmkC 4pfi8Fi8tPejlnPOM2XsMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0DhKUGrddhsTlVN5s0dEmZ2nfTt6otuENGKjPWQYM2U2ArxiFkPY 4x+WWu+OrCFCIBa9F5mHq/UWAGeNDaopu4Ds+5Jy+GrfSWKJfhGEEczqKXL/NLtM U9WiLKRYDHdr3BPwM+6LVpDy+9867OU/myexFRueFQiFChrjaXW2NB87h3Bm5nRG WSMf1S2WF9Qygo9bQyT1XIdI4v2Oc38Lyu6EitqHelgk/SPimxs5edFAnlt/QVbH lcpFPXMF8L//7fS5yCsZKnO/jgqh/DYpSyG1h5WCR5AyWF0wKjA4L1aBfHemTAaG Jd8eaTUqDcwUBoNq3txqr1Uq2lb7vanx -----END CERTIFICATE-----Generated at Fri May 2 08:30:43 2025 by rpki-client