$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: hOyhWrCvOvFTbVP8GBtzFHo6LrKbwMRlxlSS6w9VUbo= Subject key identifier: 2A:80:27:F2:FF:5C:C6:11:FC:20:B5:12:9F:96:65:7D:76:44:1F:C4 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: C9 Signing time: Fri 25 Apr 2025 04:45:57 +0000 Manifest this update: Fri 25 Apr 2025 04:45:56 +0000 Manifest next update: Fri 02 May 2025 04:45:56 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: W3uquu0QYfyu0qTGFVw0oY79LnNtBMDWNF8H44Ezl7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Apr 25 04:45:56 2025 GMT Not After : May 2 04:45:56 2025 GMT Subject: CN=680b1385-fe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:51:17:a6:b8:15:bb:90:51:fd:02:ae:9a: db:fe:e9:98:c6:48:f0:52:78:a6:46:4b:50:44:75: 17:f6:c1:a4:01:5f:ab:41:85:fd:9b:ff:e6:22:d4: 4f:13:eb:59:15:26:e8:ef:4f:2f:9c:10:1b:78:81: e8:d4:da:7d:6c:e5:ad:2d:e8:ea:e3:7f:b4:9d:ef: c4:bc:62:78:c6:08:02:69:fb:a7:e5:fd:28:b6:97: 9b:06:36:0e:64:ff:da:4a:3b:5d:be:cf:5a:6e:c3: bb:b5:af:44:56:5c:e9:ec:e8:cc:01:51:a7:ac:8e: 1c:eb:8c:4c:e1:16:6f:12:f2:b5:a7:a5:d2:c0:3a: 0b:8c:00:4f:c0:92:23:af:3d:e3:6b:0e:1d:e8:eb: 1d:3c:72:f8:93:7d:6c:5a:24:41:ce:d1:9e:85:92: 0a:cc:c2:31:4d:7b:b6:34:6b:59:93:50:84:e5:9c: ce:f5:ee:2b:18:3c:9d:92:54:95:3a:55:0a:15:61: ac:8b:40:21:0d:78:62:cd:05:54:41:3e:ad:17:fb: 65:76:97:04:e0:0b:87:de:de:f6:16:d6:52:10:76: ee:66:d9:04:e3:11:24:97:ae:cc:fc:90:10:56:45: 04:02:08:1b:01:e9:ef:6c:a8:47:02:cb:af:14:2d: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:27:F2:FF:5C:C6:11:FC:20:B5:12:9F:96:65:7D:76:44:1F:C4 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b8:17:b1:3a:6e:67:2a:3b:a1:04:ba:45:cb:e4:00:92:58: 2f:99:d7:3f:54:64:80:7d:9c:84:70:e9:c6:c2:d2:ba:d2:30: eb:58:88:f7:af:d1:df:28:2d:1b:c6:11:18:d1:7e:a9:90:3f: d9:20:cc:13:db:52:eb:53:f6:17:f1:a0:da:53:7e:ad:0a:99: 48:03:5c:79:fb:14:c6:98:b3:1b:1e:69:14:f0:fd:60:84:0f: c5:13:06:2b:6c:91:ea:9a:eb:8e:29:88:7c:96:0a:b9:c4:7d: 56:c2:23:24:d7:65:86:10:d3:1b:78:fd:68:6b:12:31:cb:2c: 4b:0d:f7:e2:53:9c:f8:f5:47:01:35:f7:e7:45:92:08:5e:da: 91:0d:8b:1e:e2:30:65:8d:bb:8b:82:67:94:9f:d2:d8:67:af: d8:cc:e9:af:3f:92:4f:24:d4:57:4b:65:f3:11:c1:ad:ec:34: 02:3e:b9:11:b1:11:56:62:49:0e:40:e9:33:8a:c4:26:2d:18: a0:42:0e:54:b2:3f:d8:85:ed:07:7b:3d:7b:0a:9a:3f:8b:77: ed:8b:30:f1:71:b2:fd:b5:1a:54:b8:b1:cf:cd:18:12:86:e4: 69:59:ec:62:49:31:99:0d:9d:a7:18:f1:b3:b7:51:b1:80:ec: de:b9:fe:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUwNDI1MDQ0NTU2WhcNMjUwNTAyMDQ0NTU2WjAYMRYwFAYD VQQDEw02ODBiMTM4NS1mZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdZRF6a4FbuQUf0Crprb/umYxkjwUnimRktQRHUX9sGkAV+rQYX9m//mItRP E+tZFSbo708vnBAbeIHo1Np9bOWtLejq43+0ne/EvGJ4xggCafun5f0otpebBjYO ZP/aSjtdvs9absO7ta9EVlzp7OjMAVGnrI4c64xM4RZvEvK1p6XSwDoLjABPwJIj rz3jaw4d6OsdPHL4k31sWiRBztGehZIKzMIxTXu2NGtZk1CE5ZzO9e4rGDydklSV OlUKFWGsi0AhDXhizQVUQT6tF/tldpcE4AuH3t72FtZSEHbuZtkE4xEkl67M/JAQ VkUEAggbAenvbKhHAsuvFC1C9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqAJ/L/ XMYR/CC1Ep+WZX12RB/EMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXuBexOm5nKjuhBLpFy+QAklgvmdc/VGSAfZyEcOnGwtK60jDrWIj3 r9HfKC0bxhEY0X6pkD/ZIMwT21LrU/YX8aDaU36tCplIA1x5+xTGmLMbHmkU8P1g hA/FEwYrbJHqmuuOKYh8lgq5xH1WwiMk12WGENMbeP1oaxIxyyxLDffiU5z49UcB NffnRZIIXtqRDYse4jBljbuLgmeUn9LYZ6/YzOmvP5JPJNRXS2XzEcGt7DQCPrkR sRFWYkkOQOkzisQmLRigQg5Usj/Yhe0Hez17Cpo/i3ftizDxcbL9tRpUuLHPzRgS huRpWexiSTGZDZ2nGPGzt1GxgOzeuf7V -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:02 2025 by rpki-client