$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: TcRHN37pmSmYw8uXubXAvwF4EhP0wQ3c50/ZGhHLHWs= Subject key identifier: 4A:5A:07:19:5C:CF:9B:38:57:C9:8D:B1:87:B8:3F:0A:75:B9:9B:7D Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0CE5 Signing time: Thu 24 Apr 2025 18:05:00 +0000 Manifest this update: Thu 24 Apr 2025 18:04:59 +0000 Manifest next update: Thu 01 May 2025 18:04:59 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: qY204m0oMCe3p8Qj/zLOeshVUhyUYisY9TKkd64tB8I=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Apr 24 18:04:59 2025 GMT Not After : May 1 18:04:59 2025 GMT Subject: CN=680a7d4b-4990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:99:af:13:24:8c:d7:cb:f0:b8:5c:4c:f5: 8a:ad:fa:d0:8e:ec:9d:96:1f:21:c0:8c:26:9c:f3: 0e:e7:53:d5:92:9c:bd:bb:f8:43:83:86:8e:c5:97: 80:ad:9e:ec:50:42:d3:f9:ea:13:bc:0d:43:f7:d2: c2:25:24:4d:96:bb:19:a2:6c:64:af:ee:d3:54:bd: a2:8c:d6:fc:bf:fd:a6:ad:b4:e0:44:1b:20:6d:49: b9:65:52:49:c0:6c:50:fa:8f:a4:2c:2b:3d:2d:eb: 7f:1e:ab:cb:33:c1:24:0c:92:59:76:33:22:e7:09: 68:a4:71:76:1c:be:fa:91:e3:bb:2f:2d:43:4b:d1: c0:37:36:1a:d1:8f:13:5f:dc:73:7b:37:69:86:0f: c5:73:82:49:02:47:45:a5:6a:f5:14:f8:71:c0:06: 69:01:ee:50:6e:c5:6a:29:7f:8f:61:37:05:e4:92: e1:70:5e:21:8d:f9:ea:5d:7e:da:4a:13:f2:36:84: b5:f5:c4:50:35:9a:5d:6e:2b:5d:c0:d1:f8:fc:4f: 2c:38:60:a9:66:ec:b1:be:ab:1c:94:c6:59:00:85: 5e:9d:dc:52:aa:63:c0:e5:f2:bc:22:c6:2d:3c:f4: df:32:1c:c9:f4:48:ae:62:27:6f:b8:ca:a0:e8:18: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5A:07:19:5C:CF:9B:38:57:C9:8D:B1:87:B8:3F:0A:75:B9:9B:7D X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e7:f4:d7:fd:e4:df:cc:8e:4c:75:25:bc:de:b4:c0:ba:18: 8c:04:c9:80:b8:1c:f2:7a:f2:4a:b0:8c:12:c3:56:d4:a7:e5: 6d:c2:0b:ae:43:fc:fe:b4:a5:4b:01:9c:bd:ab:3f:ec:99:76: d2:d5:ca:94:7b:11:8f:ef:a8:3c:54:7c:10:94:b5:68:d8:9c: b6:9e:5c:af:3e:14:dc:5a:28:2b:a2:b8:8e:57:14:cb:cc:59: 77:42:85:ba:4b:08:84:f9:12:6f:15:59:8d:58:ff:1c:e1:d9: 55:fa:9b:3a:e7:a1:2c:87:1f:00:05:2b:75:c8:10:70:ea:1a: d9:6b:8a:d7:e5:fa:e2:43:df:2f:f5:ac:3b:06:89:94:78:22: a7:ef:71:ff:c4:61:2f:be:b4:7f:2c:e7:98:07:e3:3d:46:12: d3:e2:41:2c:19:42:40:77:cb:e4:8b:ec:0c:ef:db:28:09:2f: 1b:01:58:5c:c2:e4:3f:9e:6d:be:9b:41:1e:0b:b6:a8:8b:18: 54:a5:92:cb:19:c6:8a:b8:92:67:b2:c2:14:a2:1f:e6:25:7b: 9d:a5:62:45:c8:40:1c:7c:fa:88:18:ce:0d:db:6b:c9:ff:7d: 6d:89:15:b8:15:3e:15:16:a5:fb:9d:14:28:2c:e2:95:c7:18: 8d:b0:6e:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUwNDI0MTgwNDU5WhcNMjUwNTAxMTgwNDU5WjAYMRYwFAYD VQQDEw02ODBhN2Q0Yi00OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XqZrxMkjNfL8LhcTPWKrfrQjuydlh8hwIwmnPMO51PVkpy9u/hDg4aOxZeA rZ7sUELT+eoTvA1D99LCJSRNlrsZomxkr+7TVL2ijNb8v/2mrbTgRBsgbUm5ZVJJ wGxQ+o+kLCs9Let/HqvLM8EkDJJZdjMi5wlopHF2HL76keO7Ly1DS9HANzYa0Y8T X9xzezdphg/Fc4JJAkdFpWr1FPhxwAZpAe5QbsVqKX+PYTcF5JLhcF4hjfnqXX7a ShPyNoS19cRQNZpdbitdwNH4/E8sOGCpZuyxvqsclMZZAIVendxSqmPA5fK8IsYt PPTfMhzJ9EiuYidvuMqg6BgIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpaBxlc z5s4V8mNsYe4Pwp1uZt9MB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE5/TX/eTfzI5MdSW83rTAuhiMBMmAuBzyevJKsIwSw1bUp+Vtwguu Q/z+tKVLAZy9qz/smXbS1cqUexGP76g8VHwQlLVo2Jy2nlyvPhTcWigroriOVxTL zFl3QoW6SwiE+RJvFVmNWP8c4dlV+ps656Eshx8ABSt1yBBw6hrZa4rX5friQ98v 9aw7BomUeCKn73H/xGEvvrR/LOeYB+M9RhLT4kEsGUJAd8vki+wM79soCS8bAVhc wuQ/nm2+m0EeC7aoixhUpZLLGcaKuJJnssIUoh/mJXudpWJFyEAcfPqIGM4N22vJ /31tiRW4FT4VFqX7nRQoLOKVxxiNsG7H -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:16 2025 by rpki-client