$ rpki-client -vvf rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft File: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft (raw, json) Hash identifier: YiIHAw3MQwVSG0L8rUU9PMV8uoeU0m4i3VAVOHVbrEo= Subject key identifier: 53:47:5B:B2:28:3D:15:10:5B:0D:F0:C2:E5:AA:5E:BD:75:AA:C7:02 Authority key identifier: F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 Certificate issuer: /CN=A9114CE7/serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft Manifest number: 01BE Signing time: Sat 29 Mar 2025 02:33:56 +0000 Manifest this update: Sat 29 Mar 2025 02:33:56 +0000 Manifest next update: Sat 05 Apr 2025 02:33:56 +0000 Files and hashes: 1: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl (hash: CZc9w8DmChPh27sJjJ8iS4zaS0em6aodBtSCf83PdYs=) 2: 34F0D27CAE8911ED98BE3276C4F9AE02.roa (hash: S1fM+44ZPLYhOmM8WltBkWWgeurm+yVCnFrbU5RV1Jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114CE7 Validity Not Before: Mar 29 02:33:56 2025 GMT Not After : Apr 5 02:33:56 2025 GMT Subject: CN=67e75c14-686c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:f2:3e:68:91:fb:6a:ce:75:f4:1d:38:64: 07:58:cd:c7:ef:22:b5:2d:e6:5c:f5:8a:fa:01:ad: 88:e5:f7:9f:ce:1e:7e:af:f8:0d:61:58:99:be:8b: 91:43:c5:e3:d9:5f:f3:1a:76:fb:c3:cd:6e:2f:1d: 0b:73:dc:78:d0:be:c8:7a:96:78:e5:0d:5f:88:a6: 05:fa:97:df:63:81:e6:79:4a:d8:de:b3:5e:33:b5: 29:7b:21:92:15:85:fc:65:29:df:10:db:75:3c:e5: 7f:69:1f:2e:df:04:8f:6b:a6:e4:d2:5c:95:22:fc: 5d:32:9b:7e:6a:49:ef:41:54:fb:d4:2b:e1:75:e8: e0:95:fd:62:58:91:ab:38:b4:6e:70:d9:1d:30:60: ad:c1:1d:37:47:c3:02:f2:8f:a9:cf:8e:b9:ba:e7: 7e:89:1d:8c:27:9d:85:7c:65:79:3b:9e:08:2d:58: 68:d5:4f:07:df:8a:c8:bf:f2:d1:e3:44:93:c4:3e: 31:eb:a6:a2:11:32:76:66:f0:7f:61:86:16:af:7d: c4:43:b1:ec:93:a5:4d:df:71:26:4f:d5:81:8e:58: 57:63:c5:c5:d0:a9:c2:66:ba:9e:cc:c4:42:2f:82: 4f:84:04:53:b7:0f:80:55:eb:56:4b:4c:56:cc:5c: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:5B:B2:28:3D:15:10:5B:0D:F0:C2:E5:AA:5E:BD:75:AA:C7:02 X509v3 Authority Key Identifier: keyid:F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:48:07:3d:f3:d7:0d:78:0b:f1:4c:f6:e0:90:f9:c3:d0:eb: ae:ee:51:d4:5a:3a:b6:06:cd:dc:cf:d3:e2:8a:af:d8:a7:89: 14:2c:e0:6f:0f:e3:52:59:32:fe:d5:42:33:98:c2:ea:a2:a0: 16:f9:d6:b8:11:04:6d:60:52:e0:3b:db:0f:a0:63:89:8e:94: 51:65:91:de:e3:d8:bb:30:6c:60:4d:e1:ce:64:cd:b7:e5:e2: 77:ec:7c:58:9d:52:24:a1:ca:62:e3:f7:d2:a1:2a:7b:95:74: 8d:a0:c5:d0:98:38:e0:6c:a2:fc:42:2e:a0:c8:bc:93:5d:4c: 89:b2:53:b4:dc:41:4f:0b:89:93:c6:88:76:0c:c6:05:d4:27: 3a:d1:fd:4f:a3:75:2c:c8:1f:2b:b3:b7:36:ce:09:6a:71:5a: 77:58:38:50:57:02:29:79:09:83:79:c6:c6:39:f8:ba:6f:52: e6:da:69:87:66:6c:19:1d:f6:ed:bf:0a:97:59:f8:37:8d:87: 67:9b:16:cf:04:73:98:a7:97:64:d1:6a:d9:d3:25:ca:6c:af: d5:ed:f1:a6:7d:e4:bd:bd:a5:01:22:cf:c8:8b:08:cc:bd:72: 91:bd:d5:b8:9b:ac:31:7e:db:4d:5e:2e:e5:a2:1b:13:48:cb: 26:fd:4b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRDRTcxMTAvBgNVBAUTKEYyOEQ2RDExQzNDNTU0NkU0MjQxODE4QTczQjQ3MEVF Q0E2RDcyODMwHhcNMjUwMzI5MDIzMzU2WhcNMjUwNDA1MDIzMzU2WjAYMRYwFAYD VQQDEw02N2U3NWMxNC02ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fvyPmiR+2rOdfQdOGQHWM3H7yK1LeZc9Yr6Aa2I5fefzh5+r/gNYViZvouR Q8Xj2V/zGnb7w81uLx0Lc9x40L7IepZ45Q1fiKYF+pffY4HmeUrY3rNeM7UpeyGS FYX8ZSnfENt1POV/aR8u3wSPa6bk0lyVIvxdMpt+aknvQVT71Cvhdejglf1iWJGr OLRucNkdMGCtwR03R8MC8o+pz465uud+iR2MJ52FfGV5O54ILVho1U8H34rIv/LR 40STxD4x66aiETJ2ZvB/YYYWr33EQ7Hsk6VN33EmT9WBjlhXY8XF0KnCZrqezMRC L4JPhARTtw+AVetWS0xWzFyczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNHW7Io PRUQWw3wwuWqXr11qscCMB8GA1UdIwQYMBaAFPKNbRHDxVRuQkGBinO0cO7KbXKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNENFNy81QjJCMTMxQzYw Q0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZHNUNRWUdLYzdSdzdzcHRj b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhvMXRFY1BGVkc1Q1FZR0tjN1J3N3NwdGNvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NENFNy81QjJCMTMxQzYwQ0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZH NUNRWUdLYzdSdzdzcHRjb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYSAc989cNeAvxTPbgkPnD0Ouu7lHUWjq2Bs3cz9Piiq/Yp4kULOBv D+NSWTL+1UIzmMLqoqAW+da4EQRtYFLgO9sPoGOJjpRRZZHe49i7MGxgTeHOZM23 5eJ37HxYnVIkocpi4/fSoSp7lXSNoMXQmDjgbKL8Qi6gyLyTXUyJslO03EFPC4mT xoh2DMYF1Cc60f1Po3UsyB8rs7c2zglqcVp3WDhQVwIpeQmDecbGOfi6b1Lm2mmH ZmwZHfbtvwqXWfg3jYdnmxbPBHOYp5dk0WrZ0yXKbK/V7fGmfeS9vaUBIs/IiwjM vXKRvdW4m6wxfttNXi7lohsTSMsm/UtR -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:32 2025 by rpki-client