$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: ZFbD8spFv2bwrCbVXNbIFp9ZUfGghx7JnLhDj951HN4= Subject key identifier: 14:F0:D3:65:A5:57:50:71:FD:03:4D:F3:D2:7F:3A:AE:61:58:7A:BE Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 046A Signing time: Fri 25 Apr 2025 00:01:13 +0000 Manifest this update: Fri 25 Apr 2025 00:01:12 +0000 Manifest next update: Fri 02 May 2025 00:01:12 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: RVAt8bEcWyazEWsETvdeWRre+YGFEMjCRKVpzRlzaSE=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Apr 25 00:01:12 2025 GMT Not After : May 2 00:01:12 2025 GMT Subject: CN=680ad0c9-879f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:29:dd:18:a7:c2:c2:bb:e8:6a:65:30:09: 38:4d:3e:62:5c:8c:4e:85:11:48:09:e6:17:ac:38: 68:12:4e:f2:80:6d:a1:b5:d1:01:df:32:80:c2:70: 84:88:c4:1c:9f:b5:f9:c9:93:79:97:f0:90:48:ad: 27:71:6d:b1:cb:ef:74:63:eb:90:d6:c1:7f:34:7e: bb:c9:97:53:fe:2f:d0:63:86:31:53:c3:37:e3:37: a5:ce:0b:b7:57:31:01:dd:8c:16:6e:c7:87:03:3b: 41:7b:3d:4a:15:85:cb:b9:f2:1a:e2:3c:2e:72:21: 42:3c:f3:60:87:f2:7b:99:85:76:58:5c:5e:47:c2: f8:bd:d0:b5:93:de:90:9a:c9:f2:46:0a:f0:83:30: b7:29:56:92:e8:56:ad:5d:a2:f2:7b:6e:5e:20:fe: e0:22:c0:96:20:a8:2c:ec:97:5a:d3:aa:8e:22:9d: a3:c2:a7:1b:95:b6:29:59:e8:9d:96:85:aa:32:fc: 2f:da:f8:e1:a1:73:39:61:d5:af:a8:5b:45:b4:aa: 9d:70:9d:6f:2f:9f:20:78:e7:31:be:9e:07:d4:b7: e0:a1:c6:9f:a8:e6:cd:64:9f:21:66:f8:7f:60:89: 4d:0e:40:00:88:bd:0e:54:0d:76:a2:a2:af:7d:b6: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:D3:65:A5:57:50:71:FD:03:4D:F3:D2:7F:3A:AE:61:58:7A:BE X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2e:9e:c9:68:a3:47:90:0d:f5:2f:d1:b4:f7:71:9d:15:88: bb:54:dc:73:85:fe:6e:c5:20:d9:9e:8d:84:af:e6:a1:01:27: 68:8b:ae:99:06:a3:a1:dc:f4:2b:3a:8e:78:43:20:be:ea:3c: 27:8b:5a:49:f0:64:e1:45:93:8c:74:b0:f5:31:ff:ff:54:6b: 56:fa:31:b8:34:d7:60:f2:bd:c6:15:ba:8b:ac:9d:90:c6:09: b4:75:1e:86:ee:fc:77:34:ef:bf:d9:f5:55:15:c4:6e:fe:10: d9:5a:fd:0d:16:82:32:31:fa:73:42:00:77:72:77:29:ff:15: 62:76:a3:df:ae:2c:ee:f2:6b:fe:54:50:6b:6d:d1:c8:d7:aa: 34:53:5f:31:0b:d4:68:41:09:b7:66:81:fe:60:63:70:9f:32: ba:2f:1d:68:8d:0d:87:bc:9b:7c:ba:be:ea:1d:f0:e4:6e:fa: 3f:97:30:aa:b9:33:1a:b5:f0:03:af:8e:50:90:07:7b:88:09: ca:ac:d5:a1:40:79:3e:03:c0:87:4f:8d:c2:0e:06:1f:5a:7f: 89:af:89:11:36:d4:4f:94:ed:a1:9b:6e:7a:3b:6e:c0:3f:3b: 89:6c:75:a2:55:35:cb:73:3f:e3:20:6f:0d:b5:9c:c1:b5:00: 88:c1:9e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwNDI1MDAwMTEyWhcNMjUwNTAyMDAwMTEyWjAYMRYwFAYD VQQDEw02ODBhZDBjOS04NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5d4p3RinwsK76GplMAk4TT5iXIxOhRFICeYXrDhoEk7ygG2htdEB3zKAwnCE iMQcn7X5yZN5l/CQSK0ncW2xy+90Y+uQ1sF/NH67yZdT/i/QY4YxU8M34zelzgu3 VzEB3YwWbseHAztBez1KFYXLufIa4jwuciFCPPNgh/J7mYV2WFxeR8L4vdC1k96Q msnyRgrwgzC3KVaS6FatXaLye25eIP7gIsCWIKgs7Jda06qOIp2jwqcblbYpWeid loWqMvwv2vjhoXM5YdWvqFtFtKqdcJ1vL58geOcxvp4H1LfgocafqObNZJ8hZvh/ YIlNDkAAiL0OVA12oqKvfbZfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTw02Wl V1Bx/QNN89J/Oq5hWHq+MB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Lp7JaKNHkA31L9G093GdFYi7VNxzhf5uxSDZno2Er+ahASdoi66Z BqOh3PQrOo54QyC+6jwni1pJ8GThRZOMdLD1Mf//VGtW+jG4NNdg8r3GFbqLrJ2Q xgm0dR6G7vx3NO+/2fVVFcRu/hDZWv0NFoIyMfpzQgB3cncp/xVidqPfrizu8mv+ VFBrbdHI16o0U18xC9RoQQm3ZoH+YGNwnzK6Lx1ojQ2HvJt8ur7qHfDkbvo/lzCq uTMatfADr45QkAd7iAnKrNWhQHk+A8CHT43CDgYfWn+Jr4kRNtRPlO2hm256O27A PzuJbHWiVTXLcz/jIG8NtZzBtQCIwZ7C -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:42 2025 by rpki-client