$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: iSz5rDtP49j4EOQpuxT2p5uJBtsiQ8ftAn3Mu+WLtmI= Subject key identifier: 0E:E5:FA:6B:CB:A2:2E:39:C0:34:1C:6D:08:86:E0:BF:34:32:AD:E0 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 062A Signing time: Thu 10 Apr 2025 22:37:19 +0000 Manifest this update: Thu 10 Apr 2025 22:37:19 +0000 Manifest next update: Thu 17 Apr 2025 22:37:19 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: 2ymJRbtY+A+Q6mroY6O95D876p+OY7KZg+KpAVNIQHo=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: eq7ObcirvoR6TZzb3RsSpe6IDa+SDjtPX6j3VgoghJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Apr 10 22:37:19 2025 GMT Not After : Apr 17 22:37:19 2025 GMT Subject: CN=67f8481f-62e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:27:7b:a7:9c:b3:70:75:c8:10:60:9c:94: 8e:53:17:50:47:be:8b:30:10:a6:6c:87:74:ce:2a: 7e:cc:41:05:ff:62:55:70:24:cd:1b:ae:fb:e4:80: 54:18:21:ac:8b:07:42:b4:75:92:65:91:0d:ed:15: 46:c3:e2:af:2b:38:b5:17:ba:8d:05:a3:2b:3f:89: 9f:7c:8c:c7:48:23:c6:a3:2b:43:c8:ed:d8:52:6c: f6:fe:50:40:d2:d4:ac:4a:25:f0:3c:bf:ab:70:3c: cd:4b:5d:c5:e5:95:2c:5b:7d:3c:02:f9:9d:f9:90: 5a:af:70:c7:23:24:c4:62:d0:7b:39:a3:d6:d3:0e: 85:9e:c2:02:64:fc:22:d1:3e:88:b3:00:67:05:2e: 2f:12:de:5d:af:16:a5:f2:7e:7e:64:2d:51:1a:26: fa:bf:f9:83:7c:ab:4f:2c:40:06:93:e9:97:4f:5e: 72:fc:8a:ac:f8:0b:2f:14:56:c3:e2:56:77:76:da: b5:ba:76:88:43:66:71:ec:41:52:bd:f1:a5:48:7b: 27:30:6c:a8:68:76:82:53:41:33:63:eb:93:49:82: 5e:c8:0a:71:bc:07:de:fd:bb:3c:d1:5d:86:49:eb: 73:21:f0:90:a0:90:1b:59:a0:58:ea:fd:21:9a:08: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E5:FA:6B:CB:A2:2E:39:C0:34:1C:6D:08:86:E0:BF:34:32:AD:E0 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0a:66:08:73:f4:8a:3d:96:13:40:94:8b:39:13:c9:bf:62: 05:49:d7:1d:90:a3:c0:b9:e1:8b:9f:fc:ee:9f:60:8d:b5:28: 80:93:78:da:91:12:51:71:9b:3b:d1:df:7b:e0:e9:32:7b:28: 13:ad:00:40:d8:9e:b7:ab:76:58:48:18:b6:34:11:ff:b4:77: 02:fa:74:bd:04:1a:73:8d:c1:01:fe:ff:b3:d0:bb:ad:d7:15: 23:a9:d7:81:af:d3:b1:f2:09:44:29:b5:d6:a7:9e:ef:e3:7e: 25:a0:55:c7:cd:83:16:0f:b6:c6:77:0e:eb:ff:2e:99:71:fb: 90:0e:ba:18:51:78:37:85:9b:48:48:cc:50:c4:a3:6b:bd:cd: 64:63:87:38:c6:4f:b7:ca:06:98:7d:e7:a7:b8:27:73:f3:ea: 73:12:3f:93:52:fa:46:a5:3c:2c:67:60:ac:f5:f1:ea:a8:c2: b4:07:19:d0:7a:60:37:bc:b9:b4:58:75:11:ba:4a:9d:4d:39: e4:11:91:89:1e:58:1f:bb:be:16:32:8b:87:9f:30:3a:72:0a: 63:0e:e0:6d:1a:82:37:08:fe:e1:69:bd:bf:d0:ba:04:4f:44: 63:ec:eb:e5:f8:9a:da:fe:c2:6a:34:5a:71:27:47:06:bd:d4: 0e:97:dd:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUwNDEwMjIzNzE5WhcNMjUwNDE3MjIzNzE5WjAYMRYwFAYD VQQDEw02N2Y4NDgxZi02MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Zkne6ecs3B1yBBgnJSOUxdQR76LMBCmbId0zip+zEEF/2JVcCTNG6775IBU GCGsiwdCtHWSZZEN7RVGw+KvKzi1F7qNBaMrP4mffIzHSCPGoytDyO3YUmz2/lBA 0tSsSiXwPL+rcDzNS13F5ZUsW308Avmd+ZBar3DHIyTEYtB7OaPW0w6FnsICZPwi 0T6IswBnBS4vEt5drxal8n5+ZC1RGib6v/mDfKtPLEAGk+mXT15y/Iqs+AsvFFbD 4lZ3dtq1unaIQ2Zx7EFSvfGlSHsnMGyoaHaCU0EzY+uTSYJeyApxvAfe/bs80V2G SetzIfCQoJAbWaBY6v0hmggJAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7l+mvL oi45wDQcbQiG4L80Mq3gMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALCmYIc/SKPZYTQJSLORPJv2IFSdcdkKPAueGLn/zun2CNtSiAk3ja kRJRcZs70d974OkyeygTrQBA2J63q3ZYSBi2NBH/tHcC+nS9BBpzjcEB/v+z0Lut 1xUjqdeBr9Ox8glEKbXWp57v434loFXHzYMWD7bGdw7r/y6ZcfuQDroYUXg3hZtI SMxQxKNrvc1kY4c4xk+3ygaYfeenuCdz8+pzEj+TUvpGpTwsZ2Cs9fHqqMK0BxnQ emA3vLm0WHURukqdTTnkEZGJHlgfu74WMouHnzA6cgpjDuBtGoI3CP7hab2/0LoE T0Rj7Ovl+Jra/sJqNFpxJ0cGvdQOl90W -----END CERTIFICATE-----Generated at Sat Apr 12 19:09:44 2025 by rpki-client