$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: ym0mL4MJMHrMINEmcAGChtTjg0duUnQTwfYTMIU1yC0= Subject key identifier: 0E:1E:29:F3:6F:03:7B:0E:D3:E0:B4:D6:F6:2F:52:D5:CA:76:62:0B Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: FC Signing time: Fri 25 Apr 2025 04:13:22 +0000 Manifest this update: Fri 25 Apr 2025 04:13:22 +0000 Manifest next update: Fri 02 May 2025 04:13:22 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: 0CQ0Upc01Q0u83I6GnpifOchAhHvXdMNpUOGmHsFh+0=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: +frr+wTOoHrcgFMpLKILndUUUD44Ln0TV7/77IoTLr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: Apr 25 04:13:22 2025 GMT Not After : May 2 04:13:22 2025 GMT Subject: CN=680b0be2-23a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:1d:37:f4:61:7e:7c:c3:83:ed:cf:b3:cd: b0:9a:07:3f:52:41:7c:52:ae:f0:48:c8:90:7b:87: 0f:b9:97:60:ec:df:d4:dc:a1:7c:c1:1a:9e:67:bb: 6a:5c:51:0c:96:57:50:39:a4:61:5e:ed:de:dc:a7: 09:cb:1c:98:0a:a7:2c:d5:5b:be:79:08:77:df:d4: b0:a0:cd:15:c1:a2:84:ca:b1:3f:8f:cb:e8:15:85: 35:4b:ca:10:dc:49:ae:11:53:fe:65:75:a6:f4:af: 5b:fe:3f:12:08:6e:80:dd:62:6e:98:78:a6:11:6d: 77:ea:a2:9f:65:37:1b:6e:82:a7:9e:3b:ff:6f:c4: ac:68:98:92:44:ad:e6:11:3a:98:a3:85:c1:85:c2: cd:21:e3:ad:9b:12:0b:36:b8:ff:c4:52:59:e5:fb: 1c:b3:2e:48:25:0e:10:e4:3d:25:e4:db:64:09:ac: fe:78:78:2d:90:80:a2:1a:13:f8:f6:0e:62:5a:d7: fe:ee:69:66:45:94:0b:6f:a8:cb:c0:46:ec:15:4d: c2:e4:14:76:6c:1c:0c:96:ee:9f:3e:34:71:fe:f1: 62:13:bc:ea:ff:19:f7:77:7b:56:92:81:16:94:7a: 29:15:fb:53:29:c5:38:38:91:fb:31:fa:a1:ba:0b: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1E:29:F3:6F:03:7B:0E:D3:E0:B4:D6:F6:2F:52:D5:CA:76:62:0B X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5a:fb:80:f4:67:ac:b0:59:0e:b1:f0:65:2d:62:2e:63:fe: 88:b1:ec:13:d6:9a:0a:f7:94:6a:db:0f:2e:3f:de:9c:ae:0e: 94:57:26:45:08:98:09:84:a7:7f:94:b8:3f:a2:e4:bb:94:06: ae:de:b2:02:04:49:9b:9c:fa:a1:46:ed:88:a4:b7:89:95:49: ad:78:b2:8d:8c:db:77:ab:81:96:13:12:01:44:08:22:3f:d8: aa:27:96:fe:d0:44:41:71:64:0d:f2:2e:d4:8a:3a:2f:9c:1b: e9:67:1f:47:d0:15:4a:5d:b4:3b:fe:ad:29:05:1a:93:32:72: e1:9e:b2:4d:23:40:ba:e1:eb:91:7f:d2:83:ae:df:e6:f0:09: 54:a0:dd:3e:bc:fb:6d:bc:8b:5d:fa:1f:41:d0:7b:26:f2:1b: df:2f:48:5b:6b:19:eb:bc:46:b0:21:cf:ab:2c:13:24:3e:a4: 33:d3:f1:8c:3c:e5:82:f4:b9:07:8f:3e:ac:98:25:32:0a:a5: 2c:94:db:b9:1a:ae:91:04:46:c6:fe:e0:6c:4c:68:e7:c9:c0: c0:3c:21:e3:f7:ec:39:7f:ad:aa:c1:66:c3:cd:33:75:07:af: f7:58:fc:9e:0b:b8:4f:84:48:3e:09:fe:03:f0:d8:e1:e6:f3: 02:e1:bf:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwNDI1MDQxMzIyWhcNMjUwNTAyMDQxMzIyWjAYMRYwFAYD VQQDEw02ODBiMGJlMi0yM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypgdN/RhfnzDg+3Ps82wmgc/UkF8Uq7wSMiQe4cPuZdg7N/U3KF8wRqeZ7tq XFEMlldQOaRhXu3e3KcJyxyYCqcs1Vu+eQh339SwoM0VwaKEyrE/j8voFYU1S8oQ 3EmuEVP+ZXWm9K9b/j8SCG6A3WJumHimEW136qKfZTcbboKnnjv/b8SsaJiSRK3m ETqYo4XBhcLNIeOtmxILNrj/xFJZ5fscsy5IJQ4Q5D0l5NtkCaz+eHgtkICiGhP4 9g5iWtf+7mlmRZQLb6jLwEbsFU3C5BR2bBwMlu6fPjRx/vFiE7zq/xn3d3tWkoEW lHopFftTKcU4OJH7MfqhugvWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4eKfNv A3sO0+C01vYvUtXKdmILMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWvuA9GessFkOsfBlLWIuY/6IsewT1poK95Rq2w8uP96crg6UVyZF CJgJhKd/lLg/ouS7lAau3rICBEmbnPqhRu2IpLeJlUmteLKNjNt3q4GWExIBRAgi P9iqJ5b+0ERBcWQN8i7UijovnBvpZx9H0BVKXbQ7/q0pBRqTMnLhnrJNI0C64euR f9KDrt/m8AlUoN0+vPttvItd+h9B0Hsm8hvfL0hbaxnrvEawIc+rLBMkPqQz0/GM POWC9LkHjz6smCUyCqUslNu5Gq6RBEbG/uBsTGjnycDAPCHj9+w5f62qwWbDzTN1 B6/3WPyeC7hPhEg+Cf4D8Njh5vMC4b/f -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:39 2025 by rpki-client