$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: zP92Lz/tEyehUZYSsY2DslbDMF4czQnhSGI6cgGv/lg= Subject key identifier: 53:C2:8A:06:0C:8F:DE:1A:3C:93:B3:BC:44:E2:CD:E7:EF:77:7F:0E Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 09A5 Signing time: Fri 18 Apr 2025 20:06:03 +0000 Manifest this update: Fri 18 Apr 2025 20:06:02 +0000 Manifest next update: Fri 25 Apr 2025 20:06:02 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: nO1o0IgPDN4SGYKg6mZ0Qb48T/bWERarpXQBN4E+dtM=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 20:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Apr 18 20:06:02 2025 GMT Not After : Apr 25 20:06:02 2025 GMT Subject: CN=6802b0ab-f49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:a3:fb:2e:ff:ab:f2:71:b1:33:dd:c1:82: 25:a3:12:f6:99:c1:52:ed:2a:d8:85:01:ed:71:13: 21:3b:e2:06:02:e0:0f:16:2d:35:46:bb:01:2e:89: dd:f0:e5:aa:86:75:0b:e8:07:64:9d:c0:e8:e7:e0: eb:2f:58:21:9c:e5:87:5e:a5:8c:2b:a4:46:59:1c: 9b:eb:57:2c:f4:6c:13:9c:69:6f:73:ae:65:f4:01: ad:22:c7:34:31:b4:b5:94:6d:49:20:bd:ab:95:d2: 0b:09:2a:a7:77:8b:51:77:94:e4:a2:6c:bd:8e:8d: 18:9b:5e:9b:26:96:3c:00:c2:3d:6c:6b:f9:6a:d2: 09:cd:83:81:83:45:41:95:1b:b5:15:06:6c:94:1f: c5:c8:b4:4e:6f:c4:06:8b:76:c7:24:e9:ed:96:46: 9a:84:32:d1:4f:58:4d:ed:f9:9a:84:ec:b8:6e:63: 52:b7:90:1b:d5:1b:c4:0f:7f:d6:af:af:bc:2e:72: ed:de:ac:90:6f:ae:60:37:f1:42:96:9d:ff:a1:a2: 87:cc:6a:68:61:08:31:5d:c4:e2:6b:87:d1:48:66: f5:5e:41:0d:c3:61:73:64:5d:77:07:44:8e:c8:36: ce:9e:c4:78:06:8e:34:87:bb:86:59:51:9a:d0:9b: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C2:8A:06:0C:8F:DE:1A:3C:93:B3:BC:44:E2:CD:E7:EF:77:7F:0E X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:78:b0:04:2d:1d:6b:25:c3:d2:5d:74:20:e9:58:c0:2c: 47:b2:20:fd:40:c3:74:98:72:f8:b9:ab:50:b0:f9:16:e6:78: b4:1c:42:32:e3:43:a1:f0:e0:86:1e:05:69:45:34:c2:f2:a9: a8:bd:67:ca:c0:3e:0e:1f:da:21:f5:f3:2c:1b:b7:14:d3:05: 27:57:8b:09:d8:8b:4a:76:b2:fa:06:ba:cf:b4:6b:7c:28:e7: e3:31:cf:4e:e0:81:cf:41:b5:42:48:80:71:5f:02:82:ca:bc: cf:58:0e:54:b5:76:65:68:b5:86:81:53:e3:2e:5a:24:5a:34: f5:a9:78:8e:78:80:35:58:c8:49:7e:1b:a2:1e:ee:29:b5:be: ad:74:8f:65:cc:19:ff:14:44:0b:ca:66:7c:98:ab:98:85:f8: c1:53:b0:ca:14:48:a1:ab:b2:ab:77:1b:78:93:13:06:f9:23: c8:13:15:14:d7:25:20:80:a1:7d:ea:ce:2c:71:b5:a4:c7:56: 0e:54:8f:d7:3e:00:6b:48:99:fa:d3:3d:b9:70:72:b7:31:27: 1e:b1:ff:92:67:17:c4:72:97:53:40:99:32:dd:85:5f:6b:49: 5b:5b:c4:ae:b0:3d:30:14:6d:5f:82:f8:66:63:19:be:77:4b: 6d:c1:80:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjUwNDE4MjAwNjAyWhcNMjUwNDI1MjAwNjAyWjAYMRYwFAYD VQQDEw02ODAyYjBhYi1mNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjSj+y7/q/JxsTPdwYIloxL2mcFS7SrYhQHtcRMhO+IGAuAPFi01RrsBLond 8OWqhnUL6AdkncDo5+DrL1ghnOWHXqWMK6RGWRyb61cs9GwTnGlvc65l9AGtIsc0 MbS1lG1JIL2rldILCSqnd4tRd5Tkomy9jo0Ym16bJpY8AMI9bGv5atIJzYOBg0VB lRu1FQZslB/FyLROb8QGi3bHJOntlkaahDLRT1hN7fmahOy4bmNSt5Ab1RvED3/W r6+8LnLt3qyQb65gN/FClp3/oaKHzGpoYQgxXcTia4fRSGb1XkENw2FzZF13B0SO yDbOnsR4Bo40h7uGWVGa0JuklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPCigYM j94aPJOzvETizefvd38OMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSqXiwBC0dayXD0l10IOlYwCxHsiD9QMN0mHL4uatQsPkW5ni0HEIy 40Oh8OCGHgVpRTTC8qmovWfKwD4OH9oh9fMsG7cU0wUnV4sJ2ItKdrL6BrrPtGt8 KOfjMc9O4IHPQbVCSIBxXwKCyrzPWA5UtXZlaLWGgVPjLlokWjT1qXiOeIA1WMhJ fhuiHu4ptb6tdI9lzBn/FEQLymZ8mKuYhfjBU7DKFEihq7Krdxt4kxMG+SPIExUU 1yUggKF96s4scbWkx1YOVI/XPgBrSJn60z25cHK3MScesf+SZxfEcpdTQJky3YVf a0lbW8SusD0wFG1fgvhmYxm+d0ttwYDb -----END CERTIFICATE-----Generated at Sat Apr 19 06:37:59 2025 by rpki-client