$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: tevU/ITVtitEicVgBcfEfnp4AvsDWdt/QkXi0zwLf5E= Subject key identifier: 1E:F2:ED:0E:85:EB:88:46:50:08:D6:12:B3:04:1A:04:CF:59:89:89 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 8D Signing time: Sat 05 Apr 2025 05:46:48 +0000 Manifest this update: Sat 05 Apr 2025 05:46:47 +0000 Manifest next update: Sat 12 Apr 2025 05:46:47 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: Y8MM7pdz1j4hNAKx9OV+4dR87vp7DlpR1IuAktO1NLU=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D Validity Not Before: Apr 5 05:46:47 2025 GMT Not After : Apr 12 05:46:47 2025 GMT Subject: CN=67f0c3c8-edfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:92:db:31:b9:60:69:25:d8:f7:4c:65:ba: db:aa:19:59:fa:f0:ca:53:aa:0b:03:f6:77:23:7f: d8:69:1b:2b:3c:4b:5d:75:b1:52:62:62:84:66:ad: 57:03:5a:5c:02:ab:56:15:e5:18:ef:31:8a:18:20: 8d:b6:be:1b:2d:53:e7:42:06:5c:27:1c:c9:c5:bb: 10:af:d0:1d:10:1a:90:e8:69:72:8f:61:da:c4:b9: 13:03:5e:4a:d6:de:db:4e:d5:5a:69:fd:28:35:4c: ba:6c:e2:7f:b1:f2:31:34:4c:e9:49:47:31:f4:b6: be:cc:00:ca:d1:f5:59:0f:8a:3f:3f:5e:57:21:38: 14:a8:a4:77:62:eb:f9:5e:3f:d7:37:48:28:1c:33: 7d:7a:99:11:a1:57:04:82:88:03:a6:cd:29:30:a0: 84:e7:5e:65:09:b5:ed:1b:96:e2:be:fd:5b:41:ae: f3:1f:36:ed:02:62:51:f1:15:6f:13:ce:55:de:7a: b8:e4:49:97:cf:77:75:04:30:74:0d:35:d3:63:af: 2f:53:17:87:cd:19:1f:e3:0e:45:06:20:c7:9e:5c: 71:54:9d:85:21:01:79:24:04:43:c3:5a:b2:0e:1d: 0f:40:f9:17:a4:1d:80:77:04:bd:84:32:ab:fc:25: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:ED:0E:85:EB:88:46:50:08:D6:12:B3:04:1A:04:CF:59:89:89 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4f:01:4c:df:f7:0d:69:56:2c:50:65:02:9b:bf:7c:d7:a2: 37:36:08:18:9b:f7:7e:48:c8:70:d4:ce:05:c2:54:3a:19:8a: 49:21:57:db:3e:95:c0:85:5d:61:2b:69:68:9d:f4:c9:91:93: 2e:73:b2:5b:0a:a4:4c:80:e3:20:3d:f6:a1:ec:56:a0:f2:93: f2:f7:40:20:73:77:0f:42:16:04:93:2b:22:63:33:84:a9:59: d3:ac:6d:d8:5f:b2:a9:c5:13:df:7f:99:35:3f:45:57:59:88: aa:b3:bb:a3:d6:83:bf:f9:31:45:38:5f:cd:03:cb:f9:a2:ef: 45:04:bd:e9:1c:95:2f:fc:b0:17:9a:50:ba:3a:a8:e0:b9:42: 85:1d:f2:15:61:66:2f:b5:71:03:ee:9e:85:66:ec:bd:91:1c: fb:9f:14:b1:0f:06:fd:60:5e:3d:f1:08:8e:91:a8:aa:77:a3: 00:8f:27:38:f4:cd:9b:6f:b5:09:08:7a:77:3f:eb:d5:4a:fe: 10:d2:61:f6:7a:aa:f0:03:ad:d4:f9:8f:bf:03:11:40:f1:40: c4:bf:29:48:d1:89:23:74:dd:f8:8a:38:a1:fb:fc:c0:0a:36: 0b:8c:60:af:0a:59:d4:15:72:1c:59:01:02:58:49:1c:2a:e4: 0b:25:2e:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwNDA1MDU0NjQ3WhcNMjUwNDEyMDU0NjQ3WjAYMRYwFAYD VQQDEw02N2YwYzNjOC1lZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMWS2zG5YGkl2PdMZbrbqhlZ+vDKU6oLA/Z3I3/YaRsrPEtddbFSYmKEZq1X A1pcAqtWFeUY7zGKGCCNtr4bLVPnQgZcJxzJxbsQr9AdEBqQ6Glyj2HaxLkTA15K 1t7bTtVaaf0oNUy6bOJ/sfIxNEzpSUcx9La+zADK0fVZD4o/P15XITgUqKR3Yuv5 Xj/XN0goHDN9epkRoVcEgogDps0pMKCE515lCbXtG5bivv1bQa7zHzbtAmJR8RVv E85V3nq45EmXz3d1BDB0DTXTY68vUxeHzRkf4w5FBiDHnlxxVJ2FIQF5JARDw1qy Dh0PQPkXpB2AdwS9hDKr/CVzrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7y7Q6F 64hGUAjWErMEGgTPWYmJMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgTwFM3/cNaVYsUGUCm79816I3NggYm/d+SMhw1M4FwlQ6GYpJIVfb PpXAhV1hK2lonfTJkZMuc7JbCqRMgOMgPfah7Fag8pPy90Agc3cPQhYEkysiYzOE qVnTrG3YX7KpxRPff5k1P0VXWYiqs7uj1oO/+TFFOF/NA8v5ou9FBL3pHJUv/LAX mlC6OqjguUKFHfIVYWYvtXED7p6FZuy9kRz7nxSxDwb9YF498QiOkaiqd6MAjyc4 9M2bb7UJCHp3P+vVSv4Q0mH2eqrwA63U+Y+/AxFA8UDEvylI0YkjdN34ijih+/zA CjYLjGCvClnUFXIcWQECWEkcKuQLJS4H -----END CERTIFICATE-----Generated at Sun Apr 6 04:54:33 2025 by rpki-client