$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: lc40Ydq87lVdNVq43RtJ8MLKYs1eH/k0JcM2yNmIkbc= Subject key identifier: 63:AD:48:51:8B:B4:A6:49:7B:B7:97:10:56:9A:D6:47:F9:62:FD:11 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: BA Signing time: Fri 25 Apr 2025 04:57:23 +0000 Manifest this update: Fri 25 Apr 2025 04:57:22 +0000 Manifest next update: Fri 02 May 2025 04:57:22 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: azjsbC8dlf1gyAsr40SzvuC+VI52mCWLOoWJ3H95Xf8=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: Apr 25 04:57:22 2025 GMT Not After : May 2 04:57:22 2025 GMT Subject: CN=680b1632-1556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:37:2c:08:20:cb:68:a8:2f:6f:4f:5d:d5: f0:94:a8:1e:7c:8e:ce:6c:0d:04:b9:48:cf:7b:f7: 74:f6:00:bf:27:88:d2:77:14:03:06:b6:d4:9a:e8: 8f:c9:62:bd:8b:8d:d6:db:48:c5:7a:cd:3a:30:3e: 2a:b8:86:3b:ce:16:14:a0:31:4c:75:33:95:f8:88: 15:de:d8:30:de:1b:38:a4:c6:b5:4b:53:c8:0f:f5: c2:57:67:df:3f:29:ab:7a:4c:20:0f:74:f9:a4:37: 44:b5:49:37:e1:f9:bc:14:d6:fd:5f:10:de:2f:a3: 18:2d:41:78:f9:37:de:ac:03:03:62:b0:d4:65:e2: 18:6b:18:9d:b4:da:8a:69:fa:41:4c:ff:bd:c1:f0: b7:86:1b:21:73:1f:05:f0:a1:8e:a0:4c:8c:89:bf: 4e:9c:d7:7a:61:bf:b7:bc:67:2e:f1:af:9b:4b:cd: 04:39:9e:13:34:f1:71:06:dc:51:54:1b:52:0c:09: 7d:49:d0:48:c4:a7:2f:ad:d2:2b:4c:2f:9b:3a:dd: 45:64:ff:33:7d:ee:6a:2f:c6:94:39:ac:c3:47:41: c2:91:6f:e1:1b:22:b8:8a:c1:cd:a2:e7:66:6c:90: be:c5:7d:0c:28:bf:f2:7a:3e:b9:d3:4e:4f:89:e1: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:48:51:8B:B4:A6:49:7B:B7:97:10:56:9A:D6:47:F9:62:FD:11 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ee:37:23:2e:18:a0:e2:a3:34:b8:d6:b5:d5:b2:5a:ff:2d: ba:1b:87:25:4f:d8:50:ff:3d:c4:dc:c0:38:9d:ed:7a:b7:70: 60:ec:b1:01:f5:04:fd:cb:d8:a4:58:52:cb:fa:31:c4:93:c3: 0b:8e:d3:a1:85:dc:e1:b7:83:68:8f:bb:db:8b:01:ba:fb:56: 99:fc:9e:f5:44:49:0f:b7:c9:b4:d9:d5:50:8d:11:3c:9d:e8: 8c:33:0c:b9:70:70:35:eb:2e:5f:99:25:ac:20:ed:49:53:f9: 1f:89:5e:e5:8f:8c:f8:fd:f1:0b:b4:52:6c:2f:15:6e:14:0a: e9:f8:08:23:32:9a:f1:61:ac:e9:b4:4e:4e:90:18:e0:cc:d0: 04:d3:b3:ee:da:0e:19:16:de:94:f2:5b:13:6c:e4:fa:c0:a5: 65:de:52:d8:bf:c4:69:cd:72:df:cb:82:2d:6b:3f:ec:52:73: 5d:d9:51:ef:98:77:6b:a7:63:03:51:8d:6e:92:48:d1:60:4f: f3:ae:78:ec:92:a3:59:48:69:4c:01:fd:4d:f9:bd:b6:c9:7a: 61:22:80:c7:09:98:cd:62:de:4e:76:5c:76:3c:f0:6c:1c:91: c6:40:43:08:d1:c9:5d:0d:a3:55:2f:ba:b7:d0:b6:13:19:65: e4:05:ea:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwNDI1MDQ1NzIyWhcNMjUwNTAyMDQ1NzIyWjAYMRYwFAYD VQQDEw02ODBiMTYzMi0xNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNc3LAggy2ioL29PXdXwlKgefI7ObA0EuUjPe/d09gC/J4jSdxQDBrbUmuiP yWK9i43W20jFes06MD4quIY7zhYUoDFMdTOV+IgV3tgw3hs4pMa1S1PID/XCV2ff PymrekwgD3T5pDdEtUk34fm8FNb9XxDeL6MYLUF4+TferAMDYrDUZeIYaxidtNqK afpBTP+9wfC3hhshcx8F8KGOoEyMib9OnNd6Yb+3vGcu8a+bS80EOZ4TNPFxBtxR VBtSDAl9SdBIxKcvrdIrTC+bOt1FZP8zfe5qL8aUOazDR0HCkW/hGyK4isHNoudm bJC+xX0MKL/yej65005PieGpsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOtSFGL tKZJe7eXEFaa1kf5Yv0RMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX7jcjLhig4qM0uNa11bJa/y26G4clT9hQ/z3E3MA4ne16t3Bg7LEB 9QT9y9ikWFLL+jHEk8MLjtOhhdzht4Noj7vbiwG6+1aZ/J71REkPt8m02dVQjRE8 neiMMwy5cHA16y5fmSWsIO1JU/kfiV7lj4z4/fELtFJsLxVuFArp+AgjMprxYazp tE5OkBjgzNAE07Pu2g4ZFt6U8lsTbOT6wKVl3lLYv8RpzXLfy4Itaz/sUnNd2VHv mHdrp2MDUY1ukkjRYE/zrnjskqNZSGlMAf1N+b22yXphIoDHCZjNYt5Odlx2PPBs HJHGQEMI0cldDaNVL7q30LYTGWXkBepd -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:55 2025 by rpki-client