$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: oMQspbM84V1m3ROL+CRraw7p9jYHodZ9IysmNvxDNh4= Subject key identifier: 0F:FF:03:F8:F8:F0:94:84:06:28:9E:CE:49:0B:15:7F:27:CA:E8:27 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 09ED Signing time: Thu 24 Apr 2025 19:47:00 +0000 Manifest this update: Thu 24 Apr 2025 19:46:59 +0000 Manifest next update: Thu 01 May 2025 19:46:59 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: RS8pARGly1jkQhGFO2knD1Bh3lpdNitx6s9yhTKGR9E=) 2: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (hash: ET14uths/QUA4uUBVbff9R12DTawrriACnHopTjr8Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Apr 24 19:46:59 2025 GMT Not After : May 1 19:46:59 2025 GMT Subject: CN=680a9533-0648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:5e:84:31:27:35:b8:ed:6e:3c:3a:eb:fb: 6b:e5:a8:de:00:4e:94:0f:8f:04:38:3b:f9:a7:0e: ba:47:39:6d:68:3f:98:66:ef:1e:de:1b:46:ea:ea: d7:19:93:58:c6:9b:03:83:f8:f4:28:83:6c:14:ef: a4:19:d1:d2:8a:dc:cf:86:7c:89:b1:8b:8a:1f:12: f1:12:c3:c6:4b:d8:10:f2:55:76:a4:1e:62:94:a4: 05:a8:58:31:09:50:30:90:95:84:0a:fd:a5:bb:92: 78:4c:cc:f5:a8:76:2a:17:91:9b:98:02:ff:4c:f0: 79:75:96:dd:5c:6d:30:3a:b4:22:77:e6:99:e3:cf: 58:17:fb:7c:56:3d:6d:0a:00:5e:06:47:0a:2d:39: 30:bc:07:3f:c3:59:41:eb:49:da:d0:00:27:b7:29: 28:fb:98:bc:d9:44:fb:83:34:b5:9b:b2:75:8a:db: dc:2a:e6:75:39:11:30:84:48:dd:d9:c8:6c:37:ee: 3b:07:b2:26:a2:dc:f9:d7:3e:06:6d:c3:0c:19:09: 9a:f7:c3:e9:44:64:b7:0d:30:45:17:92:48:27:03: 3a:2d:5f:a3:7d:2c:53:95:99:67:03:aa:3b:f4:f3: 18:1d:47:1d:32:89:da:eb:91:e1:f2:f4:16:2f:8e: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FF:03:F8:F8:F0:94:84:06:28:9E:CE:49:0B:15:7F:27:CA:E8:27 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:3d:87:a7:2e:32:4c:03:12:9e:a6:02:ac:06:3e:00:35:62: 92:20:c9:2e:8b:1b:e0:f2:c9:98:2f:38:21:f9:57:d1:9f:75: 34:2f:de:d8:15:57:2d:31:a6:4b:10:27:fd:5b:33:80:c7:d0: 86:7f:83:7e:9d:58:28:78:7e:8e:37:5b:e3:f7:b5:06:c9:6b: c2:7b:f0:7a:25:02:22:c6:99:bd:42:7a:6e:6d:22:3c:c0:d5: 3a:6e:2d:a9:21:78:d3:04:62:1e:a2:1a:36:67:74:af:47:01: dd:a3:7a:fe:0a:2d:6a:ae:27:8c:67:95:fb:27:9d:01:be:b4: b3:21:21:37:84:4a:16:9d:a9:83:29:b7:f3:bf:76:5c:bc:72: 48:33:44:53:f7:89:f0:d8:33:be:c8:2c:36:c9:ad:3b:74:34: c0:da:4a:79:31:77:56:8e:70:00:38:62:09:0f:9b:04:28:88: cb:22:05:2f:19:6e:40:b4:7e:3b:b5:8a:48:96:9b:0a:56:1c: 5a:8f:7f:97:81:0a:f8:63:c9:55:0e:d9:36:c1:ff:42:44:98: 21:70:6e:c2:cb:52:56:f5:d7:23:50:d9:8b:7f:e5:07:ba:0f: b7:86:30:37:d8:04:22:4e:16:c9:18:58:a6:67:bf:3e:21:51: 9c:c6:4e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUwNDI0MTk0NjU5WhcNMjUwNTAxMTk0NjU5WjAYMRYwFAYD VQQDEw02ODBhOTUzMy0wNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y9ehDEnNbjtbjw66/tr5ajeAE6UD48EODv5pw66RzltaD+YZu8e3htG6urX GZNYxpsDg/j0KINsFO+kGdHSitzPhnyJsYuKHxLxEsPGS9gQ8lV2pB5ilKQFqFgx CVAwkJWECv2lu5J4TMz1qHYqF5GbmAL/TPB5dZbdXG0wOrQid+aZ489YF/t8Vj1t CgBeBkcKLTkwvAc/w1lB60na0AAntyko+5i82UT7gzS1m7J1itvcKuZ1OREwhEjd 2chsN+47B7Imotz51z4GbcMMGQma98PpRGS3DTBFF5JIJwM6LV+jfSxTlZlnA6o7 9PMYHUcdMona65Hh8vQWL46yKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA//A/j4 8JSEBiiezkkLFX8nyugnMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFPYenLjJMAxKepgKsBj4ANWKSIMkuixvg8smYLzgh+VfRn3U0L97Y FVctMaZLECf9WzOAx9CGf4N+nVgoeH6ON1vj97UGyWvCe/B6JQIixpm9QnpubSI8 wNU6bi2pIXjTBGIeoho2Z3SvRwHdo3r+Ci1qrieMZ5X7J50BvrSzISE3hEoWnamD Kbfzv3ZcvHJIM0RT94nw2DO+yCw2ya07dDTA2kp5MXdWjnAAOGIJD5sEKIjLIgUv GW5AtH47tYpIlpsKVhxaj3+XgQr4Y8lVDtk2wf9CRJghcG7Cy1JW9dcjUNmLf+UH ug+3hjA32AQiThbJGFimZ78+IVGcxk7E -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:40 2025 by rpki-client