$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft File: 8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json) Hash identifier: AWzN6NU5BWBpt3nlUz2As4dEdLFlUpNRGDIymaYPuUI= Subject key identifier: AF:85:66:34:7B:DF:55:28:18:57:94:F9:0D:DE:3A:C3:4A:B0:42:0D Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 Certificate issuer: /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft Manifest number: 24 Signing time: Wed 09 Apr 2025 06:37:25 +0000 Manifest this update: Wed 09 Apr 2025 06:37:25 +0000 Manifest next update: Wed 16 Apr 2025 06:37:25 +0000 Files and hashes: 1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: nPbLvwXfYyhuqJc3nYuzQlnFDVSH4B+5R9UMIM8qcFs=) 2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: kCo0wcr5hL64P6FXIbDjXCO02F9fPfzca6P+P/sgaPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66 Validity Not Before: Apr 9 06:37:25 2025 GMT Not After : Apr 16 06:37:25 2025 GMT Subject: CN=67f615a5-40de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:0f:fc:02:7e:de:a5:fc:e2:ad:e1:12:b7: a0:19:da:5e:6e:25:d0:1f:02:83:23:54:d5:4e:61: f3:f7:a7:a5:36:ef:6c:9e:f9:48:9e:97:e7:c9:3a: cb:bf:13:c4:db:88:bf:d4:4a:72:36:37:e7:fc:b9: 58:3e:cd:f4:a7:74:6a:5f:8c:2a:f5:ee:3b:96:9c: cd:80:a7:91:f8:44:7c:63:d6:a5:e6:e2:77:06:bd: fa:cc:38:fa:88:b4:90:42:65:50:b1:f4:40:ff:87: 8c:85:90:3a:62:a7:bd:2a:71:e7:3a:5a:63:d9:fb: 27:62:0f:74:4e:41:64:a9:e0:03:21:5d:a2:dd:a3: 32:04:b3:e9:bb:3a:3a:3f:f6:19:9c:ed:29:49:d3: e9:30:41:51:eb:2e:c8:4d:ec:26:be:a5:4c:f0:b9: 0d:aa:80:5a:ff:3e:76:0d:4d:7e:b8:57:9a:0a:ef: 5a:d5:74:31:89:bd:77:ad:4f:99:96:a4:72:8b:6e: d3:20:c7:4d:58:fd:c5:8a:ee:88:fb:5c:e5:a7:76: d6:d0:02:89:3e:ba:a9:31:02:0a:6c:4c:83:9f:20: 52:3a:d0:62:81:d6:18:ab:05:7b:42:2b:5e:51:19: 0d:23:ee:ca:73:01:bc:68:33:8c:87:f9:20:05:fa: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:66:34:7B:DF:55:28:18:57:94:F9:0D:DE:3A:C3:4A:B0:42:0D X509v3 Authority Key Identifier: keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8b:d0:c8:08:22:c0:e9:45:2e:25:ae:45:93:4c:12:fe:1d: e3:8b:f4:f5:66:94:d0:a2:eb:23:7e:61:74:2f:1d:9d:89:a0: 69:8c:e6:6c:20:87:21:c1:e8:60:9e:08:7b:98:04:4a:91:22: 07:15:cf:d9:f0:dc:dc:e3:25:85:00:6b:0f:7a:28:18:b1:35: 63:a6:93:d4:49:95:d5:29:1b:9b:c0:6c:8d:33:d7:e7:ba:03: 1d:b4:6b:98:32:25:19:bb:55:b0:5a:cb:28:93:2b:78:6f:51: 34:08:37:c2:3e:53:dd:01:77:7b:82:33:81:a9:1d:0d:6c:a1: c2:34:e3:70:61:7c:fa:14:1d:35:c0:fc:f2:44:56:65:01:da: 0a:78:88:21:ee:d5:b3:1e:76:56:dc:6d:94:00:3b:e8:9f:9f: c3:7b:05:65:25:5b:11:59:30:6f:d1:06:b8:88:9b:9c:e9:48: 43:7c:12:87:d2:e8:51:e7:08:df:0c:23:91:70:e5:70:e1:20: a6:73:57:1b:0e:2b:4b:a4:2e:9c:2b:18:37:d3:12:a3:09:23: c6:be:a5:50:12:2b:7f:88:b2:f1:8a:b7:3c:b1:b0:88:93:db: a7:04:fc:a5:42:a9:4b:ec:93:1b:7b:af:97:5b:91:b1:ce:46: 9d:b8:cf:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoRjI5RjE1MzU3NDc1Qjg3NDZGQUQ3ODkzNkEwRkNEODUy NkUyRDYxMzAeFw0yNTA0MDkwNjM3MjVaFw0yNTA0MTYwNjM3MjVaMBgxFjAUBgNV BAMTDTY3ZjYxNWE1LTQwZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuPw/8An7epfzireESt6AZ2l5uJdAfAoMjVNVOYfP3p6U272ye+Uiel+fJOsu/ E8TbiL/USnI2N+f8uVg+zfSndGpfjCr17juWnM2Ap5H4RHxj1qXm4ncGvfrMOPqI tJBCZVCx9ED/h4yFkDpip70qcec6WmPZ+ydiD3ROQWSp4AMhXaLdozIEs+m7Ojo/ 9hmc7SlJ0+kwQVHrLshN7Ca+pUzwuQ2qgFr/PnYNTX64V5oK71rVdDGJvXetT5mW pHKLbtMgx01Y/cWK7oj7XOWndtbQAok+uqkxAgpsTIOfIFI60GKB1hirBXtCK15R GQ0j7spzAbxoM4yH+SAF+plfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr4VmNHvf VSgYV5T5Dd46w0qwQg0wHwYDVR0jBBgwFoAU8p8VNXR1uHRvrXiTag/NhSbi1hMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2LzgwNjU5N0FDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyLzhwOFZOWFIxdUhSdnJYaVRhZ19OaFNiaTFo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHA4Vk5YUjF1SFJ2clhpVGFnX05oU2JpMWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2LzgwNjU5N0FDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyLzhwOFZOWFIxdUhS dnJYaVRhZ19OaFNiaTFoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+L0MgIIsDpRS4lrkWTTBL+HeOL9PVmlNCi6yN+YXQvHZ2JoGmM5mwg hyHB6GCeCHuYBEqRIgcVz9nw3NzjJYUAaw96KBixNWOmk9RJldUpG5vAbI0z1+e6 Ax20a5gyJRm7VbBayyiTK3hvUTQIN8I+U90Bd3uCM4GpHQ1socI043BhfPoUHTXA /PJEVmUB2gp4iCHu1bMedlbcbZQAO+ifn8N7BWUlWxFZMG/RBriIm5zpSEN8EofS 6FHnCN8MI5Fw5XDhIKZzVxsOK0ukLpwrGDfTEqMJI8a+pVASK3+IsvGKtzyxsIiT 26cE/KVCqUvskxt7r5dbkbHORp24z8g= -----END CERTIFICATE-----Generated at Thu Apr 10 18:42:01 2025 by rpki-client