$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json) Hash identifier: OpDKB9+W59mhHbS03c+7MQLOHymJccg8AkTiTIIo0LQ= Subject key identifier: B9:CB:95:4C:8B:FF:37:99:86:7F:0A:E4:EA:A0:AE:88:CB:00:2E:81 Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft Manifest number: 08 Signing time: Fri 25 Apr 2025 07:08:58 +0000 Manifest this update: Fri 25 Apr 2025 07:08:57 +0000 Manifest next update: Fri 02 May 2025 07:08:57 +0000 Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: xZ0MssycSxtzvCLNjOZdY8usDgBrIEvVRYT4nA7vt6U=) 2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: dO3tBpPXfUSx2n1k3cMhWuGnqgEV9qYaUcicUOmxL84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: Apr 25 07:08:57 2025 GMT Not After : May 2 07:08:57 2025 GMT Subject: CN=680b3509-54f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:11:8a:e7:6c:82:de:12:15:c2:7f:0c:27: f1:d0:08:d4:f3:21:e5:44:2b:55:ea:26:97:26:c3: c2:d4:c5:4d:43:2f:44:5d:21:e8:f1:ea:b0:c1:40: 61:11:e3:ba:46:ca:ed:3b:71:07:8b:45:00:13:c2: 16:5e:7a:9c:e2:6f:56:b4:dd:e5:5a:d4:e7:36:e0: 27:dc:1f:6b:7f:f2:0e:12:b3:f8:77:e1:ad:84:1d: 36:d0:02:e1:c0:da:0d:a5:09:7c:0e:21:70:8e:4e: d1:e2:8c:9f:fa:e5:c0:5c:01:9e:07:ff:f8:68:cc: 31:a3:bb:79:96:2e:1a:92:98:2b:c2:ee:95:8c:29: ac:f5:7c:ec:e5:5b:af:53:5f:12:7b:39:67:57:fa: 1f:db:49:43:28:d1:af:1e:ec:c8:e3:9a:6f:85:3b: 4a:00:31:d6:82:a6:77:1d:d6:b5:ca:52:77:6b:f2: 3d:cb:71:dd:8f:8e:b0:f1:90:0a:45:33:37:4c:21: 4f:bb:c8:c8:db:36:d7:4a:4e:70:7b:84:dd:ef:7b: a4:ba:74:5d:94:28:2e:71:46:20:19:a5:ec:38:87: ea:2a:0b:1f:ea:f6:ff:7c:02:14:eb:06:e7:53:84: 88:19:e0:99:73:87:82:0a:90:d0:42:9d:c7:69:4e: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:95:4C:8B:FF:37:99:86:7F:0A:E4:EA:A0:AE:88:CB:00:2E:81 X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:b0:b4:23:15:e6:dc:65:a9:35:46:cd:ce:8d:67:f8:62: 40:b5:3e:dd:cc:ee:d7:a6:b8:83:7c:8e:ec:cd:a7:f0:42:1a: 7c:5f:70:12:ab:b4:d4:05:f4:b3:f1:0d:11:0d:05:7d:ff:3c: 0c:10:4c:db:ef:0f:f4:f0:e1:86:ad:88:52:54:1c:f4:4b:b0: e2:98:a2:43:87:4c:5d:a7:89:7b:61:83:29:da:03:f3:a4:b8: a9:ac:3c:bb:5d:5b:a5:cf:f1:13:d8:a1:51:b2:90:8f:6f:ba: d6:f6:23:39:ad:3a:28:d3:70:42:f5:1d:f7:90:1e:71:bb:d3: 70:04:f7:1d:e7:7f:70:eb:47:6b:ba:4d:45:a7:1c:db:a1:64: 88:5f:3a:2f:a0:f5:75:72:93:96:e4:40:a8:0e:e8:8d:b4:0b: 0e:63:80:72:96:4d:28:5d:53:85:88:01:22:04:51:a2:0a:7c: a2:98:d8:83:b9:ab:2b:c7:f3:49:c8:f2:25:7b:2c:85:07:89: 8c:9a:07:61:b9:4c:cb:9d:98:06:ce:5c:df:fd:1d:f1:7a:ac: 77:31:0d:5c:c9:43:d2:1f:48:02:2c:94:9a:09:cc:21:b1:58: 4e:af:4b:9b:ba:e4:94:ba:3f:2a:ea:03:03:a8:cf:55:91:d8: cc:01:d0:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDNGOTExMC8GA1UEBRMoMzM2MkFDNThFREIxODlDRjI1NzgzQzI3RDkwQTdEMkZB MzI5NzdDNTAeFw0yNTA0MjUwNzA4NTdaFw0yNTA1MDIwNzA4NTdaMBgxFjAUBgNV BAMTDTY4MGIzNTA5LTU0ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUGRGK52yC3hIVwn8MJ/HQCNTzIeVEK1XqJpcmw8LUxU1DL0RdIejx6rDBQGER 47pGyu07cQeLRQATwhZeepzib1a03eVa1Oc24CfcH2t/8g4Ss/h34a2EHTbQAuHA 2g2lCXwOIXCOTtHijJ/65cBcAZ4H//hozDGju3mWLhqSmCvC7pWMKaz1fOzlW69T XxJ7OWdX+h/bSUMo0a8e7Mjjmm+FO0oAMdaCpncd1rXKUndr8j3Lcd2PjrDxkApF MzdMIU+7yMjbNtdKTnB7hN3ve6S6dF2UKC5xRiAZpew4h+oqCx/q9v98AhTrBudT hIgZ4Jlzh4IKkNBCncdpToglAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUucuVTIv/ N5mGfwrk6qCuiMsALoEwHwYDVR0jBBgwFoAUM2KsWO2xic8leDwn2Qp9L6Mpd8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEM0Y5LzEyMjIzNkU2MThD NzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTJLc1dPMnhpYzhsZUR3bjJRcDlMNk1wZDhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE M0Y5LzEyMjIzNkU2MThDNzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4 bGVEd24yUXA5TDZNcGQ4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFSYsLQjFebcZak1Rs3OjWf4YkC1Pt3M7temuIN8juzNp/BCGnxfcBKr tNQF9LPxDRENBX3/PAwQTNvvD/Tw4YatiFJUHPRLsOKYokOHTF2niXthgynaA/Ok uKmsPLtdW6XP8RPYoVGykI9vutb2IzmtOijTcEL1HfeQHnG703AE9x3nf3DrR2u6 TUWnHNuhZIhfOi+g9XVyk5bkQKgO6I20Cw5jgHKWTShdU4WIASIEUaIKfKKY2IO5 qyvH80nI8iV7LIUHiYyaB2G5TMudmAbOXN/9HfF6rHcxDVzJQ9IfSAIslJoJzCGx WE6vS5u65JS6PyrqAwOoz1WR2MwB0Ao= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:50 2025 by rpki-client