$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: qgApeOXZ2oQ6nSshVYIpz0OvoCkFXRFKJ1IoDMXa70g= Subject key identifier: E3:C4:28:50:20:90:AF:44:A1:7C:80:52:44:83:A5:FF:59:8C:67:43 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 0594 Signing time: Thu 24 Apr 2025 23:01:27 +0000 Manifest this update: Thu 24 Apr 2025 23:01:26 +0000 Manifest next update: Thu 01 May 2025 23:01:26 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: WBacSKU7dC2vjkec95EqyngBUYeMknzf3cGJzHIGCKM=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Apr 24 23:01:26 2025 GMT Not After : May 1 23:01:26 2025 GMT Subject: CN=680ac2c7-c5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:4c:84:3c:70:57:47:ac:90:2a:52:0c:db: 5e:3e:a0:7a:e4:1a:0a:1d:8c:e5:3c:6f:c1:31:c6: 13:4c:63:a0:73:24:21:e7:16:b0:08:69:2e:a1:36: 54:00:ad:c9:c5:7d:80:de:a7:0f:47:08:85:b9:a8: 28:21:f5:e5:22:8d:db:62:83:55:c5:12:98:80:95: c6:e9:3c:43:08:6c:c8:62:cd:cd:b5:8b:a2:6b:04: f9:89:d3:aa:d7:82:6a:e2:21:43:57:0b:37:8c:f0: 5a:32:2a:6e:c8:2f:cc:47:3d:cb:7f:ec:46:4e:a3: c1:45:5f:be:e4:e7:1d:dd:f0:11:8c:12:69:fb:9a: 38:97:30:00:a4:99:aa:ea:25:db:bc:d7:3d:f5:a1: 8d:d9:81:4d:c0:04:42:8d:36:f8:7e:98:c5:cd:d9: b8:90:7c:70:4f:d2:41:cc:a9:7e:c8:d2:10:95:cb: 72:75:a9:67:60:15:c9:a1:63:3c:5f:58:a4:bf:00: 4c:b6:f7:44:a2:03:00:13:01:0c:50:89:b1:85:21: d8:47:50:c1:bb:8c:e2:a9:d5:97:0c:82:fc:ed:71: bd:1f:07:d0:0a:56:fe:53:9a:ca:7c:d3:55:d3:8e: 49:92:1d:90:22:dc:2f:cd:e4:a0:eb:a8:5a:3d:a8: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:28:50:20:90:AF:44:A1:7C:80:52:44:83:A5:FF:59:8C:67:43 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c9:91:fb:f5:80:49:51:69:33:27:68:10:6c:7d:b4:14:24: 92:c1:d6:4e:2e:d4:cb:dd:70:11:94:24:04:15:52:14:b2:44: c1:df:39:47:4e:40:7c:94:b3:e6:94:5a:d2:59:5e:76:4c:74: 96:43:0f:6a:bf:86:56:b0:f3:a1:bf:27:fe:1a:75:8c:1d:ae: 2a:70:21:98:dd:cd:a1:ce:8a:5d:7e:a1:6f:7d:e3:ee:13:50: e0:41:10:fb:6b:45:3c:24:0b:b4:f5:55:ab:05:ca:8d:a6:f1: 55:1b:4c:36:73:e3:1a:06:f7:46:44:37:ea:f7:58:a9:e7:bf: 25:ff:8a:22:88:0e:bc:f6:54:f7:84:de:fe:da:4d:05:78:44: ea:e5:d5:98:1e:84:a7:b1:9c:eb:b0:bb:d1:da:98:b8:ee:8d: 82:0a:4f:95:ec:10:f5:8d:f6:96:da:92:1f:15:d0:0c:d1:a4: 19:d0:3e:53:1c:e2:24:a7:f1:9c:63:d2:b4:9d:b2:93:d2:5a: 8f:ff:ba:9f:6a:de:d4:73:6f:1b:2b:b0:fa:2e:8d:5a:1d:b4: 49:69:b5:1a:64:8d:6d:dc:f2:f8:fe:62:c3:73:d1:0f:d9:0c: 26:91:66:c8:43:fa:9e:ef:8c:5a:ac:e0:93:aa:88:02:5d:b1: e3:58:ba:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwNDI0MjMwMTI2WhcNMjUwNTAxMjMwMTI2WjAYMRYwFAYD VQQDEw02ODBhYzJjNy1jNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT1MhDxwV0eskCpSDNtePqB65BoKHYzlPG/BMcYTTGOgcyQh5xawCGkuoTZU AK3JxX2A3qcPRwiFuagoIfXlIo3bYoNVxRKYgJXG6TxDCGzIYs3NtYuiawT5idOq 14Jq4iFDVws3jPBaMipuyC/MRz3Lf+xGTqPBRV++5Ocd3fARjBJp+5o4lzAApJmq 6iXbvNc99aGN2YFNwARCjTb4fpjFzdm4kHxwT9JBzKl+yNIQlctydalnYBXJoWM8 X1ikvwBMtvdEogMAEwEMUImxhSHYR1DBu4ziqdWXDIL87XG9HwfQClb+U5rKfNNV 045Jkh2QItwvzeSg66haPaiNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPEKFAg kK9EoXyAUkSDpf9ZjGdDMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPyZH79YBJUWkzJ2gQbH20FCSSwdZOLtTL3XARlCQEFVIUskTB3zlH TkB8lLPmlFrSWV52THSWQw9qv4ZWsPOhvyf+GnWMHa4qcCGY3c2hzopdfqFvfePu E1DgQRD7a0U8JAu09VWrBcqNpvFVG0w2c+MaBvdGRDfq91ip578l/4oiiA689lT3 hN7+2k0FeETq5dWYHoSnsZzrsLvR2pi47o2CCk+V7BD1jfaW2pIfFdAM0aQZ0D5T HOIkp/GcY9K0nbKT0lqP/7qfat7Uc28bK7D6Lo1aHbRJabUaZI1t3PL4/mLDc9EP 2QwmkWbIQ/qe74xarOCTqogCXbHjWLqp -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:35 2025 by rpki-client