$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: YAr2To1RABYmKj1iGbueca4CM5Ql2/yo3kOtjxINR18= Subject key identifier: A6:D5:B7:87:9D:28:79:79:29:18:FD:5C:1B:1F:9E:28:80:D6:DF:81 Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:34:02 +0000 Manifest this update: Fri 25 Apr 2025 04:34:02 +0000 Manifest next update: Fri 02 May 2025 04:34:02 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: lHlcMq3gsMf3bx05vvUmiIRAzRJ4S/WFckeJ+mealDQ=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: Apr 25 04:34:02 2025 GMT Not After : May 2 04:34:02 2025 GMT Subject: CN=680b10ba-4dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:81:27:60:07:52:1b:d2:3f:0d:42:b4:1e: f6:3a:6a:99:0b:97:33:5c:95:7d:87:58:c8:86:c4: 72:1a:a8:84:6b:d9:1c:ce:66:bf:07:e1:e7:b6:5d: 7d:f5:7f:f5:a9:a0:6b:fe:98:48:02:aa:14:ef:c1: ca:bc:fc:e2:ab:b9:67:98:93:33:9a:7e:0b:0d:86: c1:44:c5:22:f5:a5:83:de:bf:35:6f:76:8f:7b:b7: cd:cb:07:a9:d0:46:91:78:4c:32:f9:07:74:79:a0: 4f:76:c0:7e:9b:44:da:fd:ba:80:1a:ea:e9:36:60: d7:d6:9f:1c:2a:90:32:f1:ec:01:5d:c2:e6:47:84: a1:cd:db:4c:23:5c:24:51:0e:a0:57:dc:82:f4:54: 02:e2:f2:26:fe:af:e6:87:34:a1:5b:84:ff:12:ac: e3:5a:8b:5e:b9:27:1a:c1:2a:1d:ef:86:15:ca:f1: 72:13:e4:0b:bd:f0:8a:9c:d4:4f:40:97:82:65:5d: 23:56:74:5f:d9:45:54:2a:3c:77:bb:25:14:00:1d: 87:78:69:6a:cd:e1:d7:ca:48:b2:1c:d6:14:db:b2: f4:65:b9:fb:94:a1:68:e8:1c:5b:2d:38:a2:b4:13: c4:31:03:b5:62:bc:91:f8:47:25:85:14:76:5d:a3: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:B7:87:9D:28:79:79:29:18:FD:5C:1B:1F:9E:28:80:D6:DF:81 X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:79:a5:77:48:55:a4:7b:6c:9d:f0:3a:fa:53:0d:64:f1:f4: 89:46:42:2f:8d:29:3a:ec:e7:49:aa:2b:b5:92:25:f1:d4:b8: 72:d5:21:35:0e:49:37:9b:7e:b4:f6:ab:83:a0:0a:67:38:26: 59:f6:3c:72:0f:61:a3:79:c1:e6:7d:0c:88:d8:7e:59:b9:dd: f2:4b:d8:8e:7b:7c:d7:75:5a:ad:8b:af:ae:ff:1b:de:ff:f5: ce:73:18:f4:5f:41:1c:f4:e5:1a:05:2b:96:be:8b:f4:96:ea: c0:d3:06:8a:e6:8d:6e:58:5d:1e:b8:da:31:e9:f5:4c:64:4d: 72:87:32:2d:34:15:c9:d7:d8:6c:7d:5c:4c:86:fe:46:4b:8f: 9b:1b:78:e4:31:61:59:85:28:78:87:48:7c:ff:76:db:e6:26: 1d:e7:d2:5f:1b:9f:ac:fb:96:71:23:77:47:c8:17:06:3b:da: 2d:67:ec:7a:b1:3d:b8:fd:9e:91:55:f7:a3:6d:00:54:c1:73: 29:2f:31:66:74:52:f2:c9:05:fe:ae:3d:19:ea:5a:6d:83:f1: a1:a1:c9:d9:54:a2:cd:3c:4b:19:cf:f6:67:78:34:1e:8e:bf: b7:d2:98:98:90:fa:b3:af:b3:fd:eb:75:b3:2e:55:37:29:d0: db:01:01:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUwNDI1MDQzNDAyWhcNMjUwNTAyMDQzNDAyWjAYMRYwFAYD VQQDEw02ODBiMTBiYS00ZGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lCBJ2AHUhvSPw1CtB72OmqZC5czXJV9h1jIhsRyGqiEa9kczma/B+Hntl19 9X/1qaBr/phIAqoU78HKvPziq7lnmJMzmn4LDYbBRMUi9aWD3r81b3aPe7fNywep 0EaReEwy+Qd0eaBPdsB+m0Ta/bqAGurpNmDX1p8cKpAy8ewBXcLmR4ShzdtMI1wk UQ6gV9yC9FQC4vIm/q/mhzShW4T/EqzjWoteuScawSod74YVyvFyE+QLvfCKnNRP QJeCZV0jVnRf2UVUKjx3uyUUAB2HeGlqzeHXykiyHNYU27L0Zbn7lKFo6BxbLTii tBPEMQO1YryR+EclhRR2XaPR+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbVt4ed KHl5KRj9XBsfniiA1t+BMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYeaV3SFWke2yd8Dr6Uw1k8fSJRkIvjSk67OdJqiu1kiXx1Lhy1SE1 Dkk3m3609quDoApnOCZZ9jxyD2GjecHmfQyI2H5Zud3yS9iOe3zXdVqti6+u/xve //XOcxj0X0Ec9OUaBSuWvov0lurA0waK5o1uWF0euNox6fVMZE1yhzItNBXJ19hs fVxMhv5GS4+bG3jkMWFZhSh4h0h8/3bb5iYd59JfG5+s+5ZxI3dHyBcGO9otZ+x6 sT24/Z6RVfejbQBUwXMpLzFmdFLyyQX+rj0Z6lptg/GhocnZVKLNPEsZz/ZneDQe jr+30piYkPqzr7P963WzLlU3KdDbAQF8 -----END CERTIFICATE-----Generated at Sun Apr 27 05:13:20 2025 by rpki-client