$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json) Hash identifier: H24h1lU2RfhqY+NGMRI7RBvmMUtohrC80Gri8EcRSW8= Subject key identifier: 21:E4:7A:DC:7F:57:E6:42:74:42:42:B9:FC:BC:CF:CB:DA:CD:1F:FB Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Certificate serial: 0E6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft Manifest number: 0E5E Signing time: Thu 24 Apr 2025 17:42:56 +0000 Manifest this update: Thu 24 Apr 2025 17:42:55 +0000 Manifest next update: Thu 01 May 2025 17:42:55 +0000 Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: 8CeX/sbQfAs9Ckkpdu6zpkdR1utDzOrhX/EXUd6jaKc=) 2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: 7/M7b1S/qFJmA9ijaIHjOSpLsrFFzRPV61WLZ9RxN6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E554, serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Validity Not Before: Apr 24 17:42:55 2025 GMT Not After : May 1 17:42:55 2025 GMT Subject: CN=680a7820-5fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:0b:c4:45:22:74:e9:66:f1:ca:0b:a7:d2: 09:32:6d:d9:e4:fe:67:d4:e1:64:54:5f:6c:40:05: 3d:91:af:03:4a:d6:71:9f:40:9a:19:62:e2:a0:16: fe:01:51:8b:e8:75:b8:19:ee:c9:60:bd:74:e8:6e: 27:a4:a9:d2:54:06:20:7a:6a:d6:b0:35:56:73:ac: af:da:13:28:a2:58:7a:ec:2f:56:20:4e:ac:2f:a8: b2:47:71:1b:5f:82:11:50:94:89:cc:bf:e6:42:b4: 95:42:72:d0:d0:21:32:0c:7f:8a:a6:56:e4:38:f3: dc:8c:6a:d0:38:1b:5b:a3:c2:ca:d0:21:1b:db:0d: 7b:eb:73:9c:84:28:99:9d:e3:61:c0:e7:85:58:3f: a3:28:f9:26:ea:c0:6f:ec:13:a0:19:95:2e:9a:e6: 7e:9f:fb:aa:42:a8:eb:c2:5f:dc:b9:ae:94:ef:bc: 59:da:0a:4b:d0:b4:69:0a:df:f6:2f:ae:1a:e3:d5: cb:91:6c:7e:54:a8:67:89:1f:3d:39:07:58:cb:52: ba:c1:82:66:1d:97:e9:00:7f:f7:c7:27:96:e8:ff: a0:81:c3:ac:51:0f:e6:8a:ef:d0:9b:57:fa:49:9d: 97:7c:44:9a:f4:eb:a3:5f:07:a2:d1:0b:d5:60:2a: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E4:7A:DC:7F:57:E6:42:74:42:42:B9:FC:BC:CF:CB:DA:CD:1F:FB X509v3 Authority Key Identifier: keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ff:e7:63:8a:07:96:c6:bc:5e:7e:d9:f4:fd:82:d2:ad:3e: dc:02:23:b5:b7:d1:da:26:28:c0:aa:88:16:70:9c:72:a1:9b: fd:f8:af:7e:87:88:61:a5:cc:55:29:d8:c7:44:24:8f:66:48: ce:ef:51:8e:51:45:37:56:82:a6:e1:49:f2:74:73:ff:09:60: 6e:ee:59:88:de:ab:fe:5d:b3:ec:10:0e:0b:a8:80:7b:35:b5: f8:91:44:5a:61:b7:9d:4e:fc:d2:d5:e4:7a:8d:41:28:07:98: d5:6d:5d:e4:7d:59:7e:fb:1c:85:eb:69:6e:fe:64:3c:ef:57: fb:1a:13:ea:07:b0:42:eb:e0:57:13:f8:3c:31:a0:9f:46:f3: 99:a5:3d:84:0a:a3:e7:cc:3e:52:a3:44:8c:24:8f:96:6f:54: d2:b1:9b:e4:34:20:bc:9c:45:20:e1:35:55:c8:a2:ed:f8:98: 7f:9e:df:26:11:e2:36:4c:3d:70:bd:b3:23:84:51:34:10:e4: 5c:b6:64:68:f2:af:78:a8:eb:99:11:50:e7:ce:6a:e2:1d:54: 98:24:a7:4b:ed:48:31:e8:34:6b:89:94:7b:d8:71:a6:71:fe: 0f:66:cd:f6:fb:87:ee:6b:3e:d7:fb:05:31:59:5a:35:e6:52: fb:21:00:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1NTQxMTAvBgNVBAUTKEYzRkMzRThGRTNGQ0Q4NkNBRjBGNzFBRjZGQjQyMzFF QzU3MUJBRjYwHhcNMjUwNDI0MTc0MjU1WhcNMjUwNTAxMTc0MjU1WjAYMRYwFAYD VQQDEw02ODBhNzgyMC01ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscsLxEUidOlm8coLp9IJMm3Z5P5n1OFkVF9sQAU9ka8DStZxn0CaGWLioBb+ AVGL6HW4Ge7JYL106G4npKnSVAYgemrWsDVWc6yv2hMoolh67C9WIE6sL6iyR3Eb X4IRUJSJzL/mQrSVQnLQ0CEyDH+KplbkOPPcjGrQOBtbo8LK0CEb2w1763OchCiZ neNhwOeFWD+jKPkm6sBv7BOgGZUumuZ+n/uqQqjrwl/cua6U77xZ2gpL0LRpCt/2 L64a49XLkWx+VKhniR89OQdYy1K6wYJmHZfpAH/3xyeW6P+ggcOsUQ/miu/Qm1f6 SZ2XfESa9OujXwei0QvVYCoYnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHketx/ V+ZCdEJCufy8z8vazR/7MB8GA1UdIwQYMBaAFPP8Po/j/Nhsrw9xr2+0Ix7Fcbr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTU1NC83RTA1M0U5MDk4 Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJHeXZEM0d2YjdRakhzVnh1 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfdy1qLVA4Mkd5dkQzR3ZiN1FqSHNWeHV2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTU1NC83RTA1M0U5MDk4Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJH eXZEM0d2YjdRakhzVnh1dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC/+djigeWxrxeftn0/YLSrT7cAiO1t9HaJijAqogWcJxyoZv9+K9+ h4hhpcxVKdjHRCSPZkjO71GOUUU3VoKm4UnydHP/CWBu7lmI3qv+XbPsEA4LqIB7 NbX4kURaYbedTvzS1eR6jUEoB5jVbV3kfVl++xyF62lu/mQ871f7GhPqB7BC6+BX E/g8MaCfRvOZpT2ECqPnzD5So0SMJI+Wb1TSsZvkNCC8nEUg4TVVyKLt+Jh/nt8m EeI2TD1wvbMjhFE0EORctmRo8q94qOuZEVDnzmriHVSYJKdL7Ugx6DRriZR72HGm cf4PZs32+4fuaz7X+wUxWVo15lL7IQAY -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:43 2025 by rpki-client