$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: P3/2SaGurOeiXsuaVw2CwshwMeIhXb8H1eW0IDEdQIo= Subject key identifier: E3:FE:7C:F3:5C:23:24:C1:9F:86:A7:55:8E:C5:FA:CE:89:06:F8:DD Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0C95 Signing time: Thu 24 Apr 2025 18:08:05 +0000 Manifest this update: Thu 24 Apr 2025 18:08:05 +0000 Manifest next update: Thu 01 May 2025 18:08:05 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: JrkX6La23u+zNOmIlI8pGxhTDSs9qJDFNBZNOJp30dQ=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Apr 24 18:08:05 2025 GMT Not After : May 1 18:08:05 2025 GMT Subject: CN=680a7e05-ee10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:ed:b5:b9:61:5f:7a:51:7a:96:58:cf:83: 8b:5a:28:8b:f5:ad:1e:e8:9b:de:59:3a:e3:c6:de: 56:60:c8:91:05:0c:0e:6f:68:6e:9e:7b:77:36:c3: 45:56:b5:1b:d4:d9:a9:fd:b4:e6:99:70:ee:75:9f: 30:bc:2e:f0:83:cb:d4:f3:64:53:cf:7a:b9:12:de: ca:34:4c:b1:87:cc:fb:29:31:90:bf:e7:61:4d:da: 41:f2:1b:c7:36:25:89:5d:b1:15:29:d9:c5:91:dd: 2b:96:ea:c6:16:09:02:f9:28:fe:6c:95:b5:f2:8e: 06:f6:0c:1a:ab:cd:39:6a:34:47:15:9d:9f:28:33: 63:df:4c:b7:48:26:02:76:b7:b0:28:40:51:d2:cb: 6e:c1:0b:b2:77:b8:a6:be:ab:19:0f:0e:56:8e:e9: 91:cf:2d:27:5b:78:a5:a2:d2:71:e1:11:4b:4a:19: 9e:4d:82:bc:c9:29:9b:b2:0e:87:41:22:15:8c:cd: fb:3b:90:e7:40:9d:48:b2:fb:56:1e:f3:02:27:f1: a8:c6:ae:c8:eb:ff:ed:56:b5:8a:7c:ca:c5:1a:72: cf:19:c5:29:2e:91:13:f9:b3:4a:4e:5f:fe:41:84: 16:02:81:7d:0c:64:e3:41:b9:9a:a1:30:d7:9e:1d: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FE:7C:F3:5C:23:24:C1:9F:86:A7:55:8E:C5:FA:CE:89:06:F8:DD X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:89:fb:e3:0b:20:91:02:68:65:63:55:df:c5:83:06:02:b6: fb:c0:c8:3a:ed:0f:b3:47:83:dd:f2:f2:50:4a:b0:d5:ee:93: f9:6c:37:1e:e1:c6:60:83:3f:57:23:d5:c8:a9:e8:ad:5e:90: 67:ef:c5:c0:bd:97:10:30:74:f8:45:2f:d9:32:ab:32:66:88: c6:67:e6:32:36:61:13:b3:8c:66:10:71:48:2f:c6:21:64:e1: 60:45:6e:f3:59:17:0f:95:ee:71:e1:97:e0:62:83:21:2e:07: 18:4b:57:0c:41:70:0c:50:33:1c:e5:31:fb:b0:73:fa:20:50: 92:62:79:3c:a7:8b:5a:95:fe:4d:1c:4c:81:a9:42:e2:cb:b2: c6:6d:ca:1c:a8:b8:14:ab:c5:c1:9d:83:16:b1:f4:f0:9a:66: ea:93:9d:e6:00:36:b8:2e:06:5d:01:ab:44:7b:e2:94:2e:6a: 30:63:52:50:25:2a:2c:7b:cf:9f:f2:79:4c:93:29:4b:03:19: a2:fa:42:97:8d:03:e6:e6:3f:37:d7:74:c9:f8:3a:d6:9d:7c: bc:81:d0:a1:af:6d:39:f7:f0:d2:79:3a:58:ab:82:04:1d:8e: 89:9b:19:33:c3:24:6a:07:45:e0:03:41:87:39:91:52:de:9f: 75:e8:a1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwNDI0MTgwODA1WhcNMjUwNTAxMTgwODA1WjAYMRYwFAYD VQQDEw02ODBhN2UwNS1lZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iTttblhX3pRepZYz4OLWiiL9a0e6JveWTrjxt5WYMiRBQwOb2hunnt3NsNF VrUb1Nmp/bTmmXDudZ8wvC7wg8vU82RTz3q5Et7KNEyxh8z7KTGQv+dhTdpB8hvH NiWJXbEVKdnFkd0rlurGFgkC+Sj+bJW18o4G9gwaq805ajRHFZ2fKDNj30y3SCYC drewKEBR0stuwQuyd7imvqsZDw5WjumRzy0nW3ilotJx4RFLShmeTYK8ySmbsg6H QSIVjM37O5DnQJ1IsvtWHvMCJ/Goxq7I6//tVrWKfMrFGnLPGcUpLpET+bNKTl/+ QYQWAoF9DGTjQbmaoTDXnh0EvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP+fPNc IyTBn4anVY7F+s6JBvjdMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJifvjCyCRAmhlY1XfxYMGArb7wMg67Q+zR4Pd8vJQSrDV7pP5bDce 4cZggz9XI9XIqeitXpBn78XAvZcQMHT4RS/ZMqsyZojGZ+YyNmETs4xmEHFIL8Yh ZOFgRW7zWRcPle5x4ZfgYoMhLgcYS1cMQXAMUDMc5TH7sHP6IFCSYnk8p4talf5N HEyBqULiy7LGbcocqLgUq8XBnYMWsfTwmmbqk53mADa4LgZdAatEe+KULmowY1JQ JSose8+f8nlMkylLAxmi+kKXjQPm5j8313TJ+DrWnXy8gdChr2059/DSeTpYq4IE HY6JmxkzwyRqB0XgA0GHOZFS3p916KE1 -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:44 2025 by rpki-client