$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: TYbrPmKL6Zf937YDZzQdu78W51NaLijyu0JWGgSRSPU= Subject key identifier: 7C:24:90:0D:34:75:19:F2:10:2A:05:B3:B7:FF:D5:67:F7:18:19:69 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 0349 Signing time: Fri 25 Apr 2025 00:51:51 +0000 Manifest this update: Fri 25 Apr 2025 00:51:50 +0000 Manifest next update: Fri 02 May 2025 00:51:50 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: GuzGYujDG3fXRHDRv+sTi4kISjPUyjtgkdOo50IsYaY=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: VhDwcUHjhyil4F0v9hLHnTY4dEx10IiI44izoTq8eNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Apr 25 00:51:50 2025 GMT Not After : May 2 00:51:50 2025 GMT Subject: CN=680adca7-0812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:f2:ee:d4:19:d7:c8:de:3b:38:76:42:4c: e7:57:7d:2e:0e:26:8f:3c:a6:fa:71:d1:af:3f:20: 92:6c:92:78:2d:95:51:4d:99:ae:14:48:21:35:28: 71:c5:8a:a2:1a:f6:31:25:d5:46:79:75:03:08:f6: c3:17:37:b2:b5:4a:2a:d7:92:67:fc:f2:72:30:6d: c1:c3:a8:a0:cd:63:25:4e:0d:e7:b3:98:b8:aa:7f: 77:43:f4:29:2e:6b:b1:35:17:02:0e:da:1f:2f:20: 6e:06:91:0e:df:af:5b:a5:a3:0e:fb:86:40:ab:f0: 07:31:5e:35:bf:16:f7:b8:6c:ab:02:1c:78:51:7c: 29:16:05:2a:e4:5e:d4:ec:53:c5:57:68:a2:c3:57: 66:91:f1:5a:c3:ca:3d:91:9a:0a:e9:2c:27:2b:93: 0e:1e:96:f1:95:e2:54:a6:1e:52:79:7c:c9:84:22: ee:09:ea:fe:d3:0a:9f:73:3a:ce:25:6c:3f:82:d6: 6e:11:f1:c4:3d:d1:32:1d:3c:92:84:0c:ec:37:fa: 3e:41:03:61:52:c7:6f:04:cc:c3:a5:28:fe:88:4c: 2c:46:57:db:4e:b3:47:d6:cf:cc:c3:91:3b:c6:eb: 64:9a:1b:14:5f:c2:49:f4:12:c1:db:60:68:49:4a: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:90:0D:34:75:19:F2:10:2A:05:B3:B7:FF:D5:67:F7:18:19:69 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ad:d6:64:c1:99:90:c0:e4:05:c8:ec:71:3b:11:b0:0b:c4: af:6d:74:45:fa:51:69:1b:28:da:f2:91:a5:c5:68:b8:98:a3: 39:e6:05:70:40:7b:41:b9:f3:19:f4:c4:31:8c:41:d4:77:a4: a3:06:a4:eb:1f:9e:e4:51:0c:a6:35:d6:c6:7f:c0:c0:1d:96: 84:79:9c:e8:1a:e8:18:f5:e4:7d:f3:59:95:db:e4:b2:19:53: 47:42:c3:d3:3f:43:52:ad:3c:76:e2:6a:82:df:c8:6f:5a:95: 95:cb:82:9f:34:2e:1c:af:7e:5a:10:f7:cf:df:c7:18:87:97: 5b:a0:fa:1c:40:0f:a5:db:c5:1b:0b:62:da:2e:e0:55:12:22: d9:76:00:1e:2c:ea:96:cb:70:04:90:c6:22:20:cb:18:ae:73: d8:28:ab:2b:b5:c1:96:91:2a:f2:bf:b5:81:cd:d3:99:7f:8a: ec:67:26:33:9b:5b:92:ca:f0:c0:35:44:41:10:ee:10:5b:34: fd:42:a1:99:78:95:19:ca:2d:97:e6:1c:d8:d9:cc:11:de:ba: 50:70:ea:0c:70:3d:e6:c5:b4:d9:f4:fb:98:31:9b:c5:1b:bb: f1:e8:35:ba:13:42:7d:d3:ff:e4:99:cd:0c:83:3f:1b:60:6e: 1c:f9:8b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUwNDI1MDA1MTUwWhcNMjUwNTAyMDA1MTUwWjAYMRYwFAYD VQQDEw02ODBhZGNhNy0wODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q3y7tQZ18jeOzh2QkznV30uDiaPPKb6cdGvPyCSbJJ4LZVRTZmuFEghNShx xYqiGvYxJdVGeXUDCPbDFzeytUoq15Jn/PJyMG3Bw6igzWMlTg3ns5i4qn93Q/Qp LmuxNRcCDtofLyBuBpEO369bpaMO+4ZAq/AHMV41vxb3uGyrAhx4UXwpFgUq5F7U 7FPFV2iiw1dmkfFaw8o9kZoK6SwnK5MOHpbxleJUph5SeXzJhCLuCer+0wqfczrO JWw/gtZuEfHEPdEyHTyShAzsN/o+QQNhUsdvBMzDpSj+iEwsRlfbTrNH1s/Mw5E7 xutkmhsUX8JJ9BLB22BoSUqOOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwkkA00 dRnyECoFs7f/1Wf3GBlpMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgrdZkwZmQwOQFyOxxOxGwC8SvbXRF+lFpGyja8pGlxWi4mKM55gVw QHtBufMZ9MQxjEHUd6SjBqTrH57kUQymNdbGf8DAHZaEeZzoGugY9eR981mV2+Sy GVNHQsPTP0NSrTx24mqC38hvWpWVy4KfNC4cr35aEPfP38cYh5dboPocQA+l28Ub C2LaLuBVEiLZdgAeLOqWy3AEkMYiIMsYrnPYKKsrtcGWkSryv7WBzdOZf4rsZyYz m1uSyvDANURBEO4QWzT9QqGZeJUZyi2X5hzY2cwR3rpQcOoMcD3mxbTZ9PuYMZvF G7vx6DW6E0J90//kmc0Mgz8bYG4c+Yvs -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:48 2025 by rpki-client