$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: QlLd+2hm1zqIvlX6TehpBn8B6+71kU4q3CGShvTej7Y= Subject key identifier: 31:BB:91:FA:81:DD:D7:06:D1:B3:3E:B6:C1:7E:77:15:98:82:A0:90 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 012B Signing time: Wed 09 Apr 2025 03:34:06 +0000 Manifest this update: Wed 09 Apr 2025 03:34:05 +0000 Manifest next update: Wed 16 Apr 2025 03:34:05 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: FehnLRAHjxUV3+9FaDNK6+acjVUR/2TO0kGq81L69rU=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25 Validity Not Before: Apr 9 03:34:05 2025 GMT Not After : Apr 16 03:34:05 2025 GMT Subject: CN=67f5eaad-b358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:d5:f8:1e:e8:b8:38:26:41:92:1a:8a:ab: 38:6b:b2:b8:99:73:cd:fe:33:79:93:b0:15:3f:02: d0:d4:74:a8:d9:52:bf:df:b5:d6:bc:6c:53:9a:09: 21:d6:5b:c1:e7:e5:a7:65:0a:7b:0a:b4:b3:c8:e6: a9:a1:72:b8:e1:ef:51:78:44:42:a9:b7:f3:53:dc: 8b:dc:79:02:0b:de:9f:db:74:07:11:b4:2a:27:89: fb:35:e0:33:a6:b3:3e:44:3b:79:e1:1e:2a:29:09: 4f:aa:c0:76:5e:eb:2f:5c:17:1d:39:59:c3:5b:89: 23:e8:cd:12:ff:32:ed:95:a0:ef:59:7f:3f:b0:28: 2c:3f:39:ee:2f:99:5f:5c:b6:3a:bf:23:dc:43:b1: d3:a8:f6:28:bc:a2:41:55:ee:17:17:10:f3:27:be: 93:5c:9f:71:d9:97:72:e7:0a:57:16:e3:ec:eb:34: 59:0b:86:1e:8c:c4:df:d3:f5:8c:e2:1b:ae:21:e0: ba:29:cc:ed:2c:5a:61:1a:b7:3a:7b:a2:68:e1:41: a1:10:cd:7c:8d:55:bd:8f:21:88:4c:cd:b9:58:6c: 06:4b:77:b3:20:e0:41:fa:2f:57:6e:b7:ff:75:d6: ba:fc:b8:9a:ee:dc:e8:5f:df:c5:62:c2:da:f7:03: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:91:FA:81:DD:D7:06:D1:B3:3E:B6:C1:7E:77:15:98:82:A0:90 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:83:70:cc:96:90:17:34:8d:a1:f9:55:cc:49:3b:84:d2: bd:4e:50:4f:15:0f:bc:85:53:9c:20:48:37:ec:94:1a:27:c4: 57:8f:4a:88:63:37:44:e6:f6:21:c0:73:52:fd:fa:35:ca:d1: a2:5e:a6:d1:4c:80:82:6d:2b:74:c4:25:c6:1c:32:99:c2:5a: b5:71:d7:94:38:63:10:3c:66:2b:2c:b8:3e:c7:14:ca:b1:ff: d1:e0:83:ed:dd:d6:ca:7f:32:0b:11:a5:09:bb:47:db:8c:24: 25:97:71:f4:6d:77:72:60:5a:9f:1f:91:5e:2b:86:0a:a1:c1: f2:fb:82:d7:56:2f:cb:26:80:3b:b4:e8:5e:77:5b:70:8b:7f: 1b:d5:b6:17:ad:a4:b9:40:48:39:d1:99:10:0c:51:0d:43:e1: 4b:b7:1e:9b:16:e8:34:eb:0a:58:ac:dd:3b:6c:b7:f7:b0:dd: 63:39:de:f1:6e:7c:7e:5b:87:59:bf:9a:5f:cd:64:8f:34:c3: 88:a0:9b:36:6d:4b:39:c8:5d:d5:82:b6:74:82:d5:2c:78:84: b1:35:22:1e:11:2e:a1:ee:7c:cc:89:7f:4a:7f:8f:9d:ef:ad: 6e:a1:95:52:63:41:8e:0d:53:70:3b:f0:2c:ab:90:0a:e8:48: 5a:96:b2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwNDA5MDMzNDA1WhcNMjUwNDE2MDMzNDA1WjAYMRYwFAYD VQQDEw02N2Y1ZWFhZC1iMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xbV+B7ouDgmQZIaiqs4a7K4mXPN/jN5k7AVPwLQ1HSo2VK/37XWvGxTmgkh 1lvB5+WnZQp7CrSzyOapoXK44e9ReERCqbfzU9yL3HkCC96f23QHEbQqJ4n7NeAz prM+RDt54R4qKQlPqsB2XusvXBcdOVnDW4kj6M0S/zLtlaDvWX8/sCgsPznuL5lf XLY6vyPcQ7HTqPYovKJBVe4XFxDzJ76TXJ9x2Zdy5wpXFuPs6zRZC4YejMTf0/WM 4huuIeC6KcztLFphGrc6e6Jo4UGhEM18jVW9jyGITM25WGwGS3ezIOBB+i9Xbrf/ dda6/Lia7tzoX9/FYsLa9wNe3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG7kfqB 3dcG0bM+tsF+dxWYgqCQMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0FoNwzJaQFzSNoflVzEk7hNK9TlBPFQ+8hVOcIEg37JQaJ8RXj0qI YzdE5vYhwHNS/fo1ytGiXqbRTICCbSt0xCXGHDKZwlq1cdeUOGMQPGYrLLg+xxTK sf/R4IPt3dbKfzILEaUJu0fbjCQll3H0bXdyYFqfH5FeK4YKocHy+4LXVi/LJoA7 tOhed1twi38b1bYXraS5QEg50ZkQDFENQ+FLtx6bFug06wpYrN07bLf3sN1jOd7x bnx+W4dZv5pfzWSPNMOIoJs2bUs5yF3VgrZ0gtUseISxNSIeES6h7nzMiX9Kf4+d 761uoZVSY0GODVNwO/Asq5AK6EhalrIR -----END CERTIFICATE-----Generated at Fri Apr 11 16:29:20 2025 by rpki-client