$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: MorTbPSyVG5B8VzALbB2Kf/ZLrPDZcB9Ibfu0xRF1CQ= Subject key identifier: F4:E7:44:C5:5E:C6:E1:D0:B7:32:35:89:D5:DC:0E:FA:98:AF:54:DB Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0412 Signing time: Sat 29 Mar 2025 00:41:57 +0000 Manifest this update: Sat 29 Mar 2025 00:41:57 +0000 Manifest next update: Sat 05 Apr 2025 00:41:57 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: a+zZvdxQNwjIAlXsKzM6NzpYALm/YUSJ8+lVF6zUsbY=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4 Validity Not Before: Mar 29 00:41:57 2025 GMT Not After : Apr 5 00:41:57 2025 GMT Subject: CN=67e741d5-2200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:f5:6a:62:38:ee:44:7c:6f:96:e5:13:c8: aa:f8:ce:32:ff:68:40:74:3b:13:fb:c7:65:36:a8: 0c:ac:7f:d3:59:1f:68:37:7a:6d:51:14:72:d3:dc: ef:c7:c1:eb:bc:9f:1c:35:9a:2d:ca:da:9b:b9:a5: 4f:61:fb:e2:d5:57:78:68:73:48:61:b4:dc:a0:00: cb:49:5f:e6:af:5d:bf:7e:b5:e0:aa:7d:ac:3a:e8: a4:b8:68:61:4e:33:17:a4:9b:e7:c4:68:43:83:8f: a4:26:b3:da:f4:2f:34:66:22:9d:94:d6:7b:f4:96: 6a:56:68:70:c1:33:5c:51:d4:72:49:31:08:d8:8f: 70:5e:3d:5f:3c:08:83:d0:06:8c:70:94:9a:01:06: b6:a3:c2:8a:7a:62:7a:73:77:d8:d4:ef:85:d5:85: 5b:6d:9d:cc:e9:54:5e:10:83:74:d5:b7:1f:bc:d0: 20:c7:4c:dd:86:23:b6:5c:6e:aa:e4:a0:21:38:d5: c8:13:74:78:d4:f5:cd:a7:3f:1e:31:47:0c:28:07: e6:24:2a:a1:2b:8d:e6:b0:b6:5b:de:f8:d0:cb:59: 98:fc:e6:86:34:5e:49:02:36:16:a2:ac:eb:d3:41: 1e:e4:6d:d0:2c:cb:a4:a8:cb:d7:91:dd:72:a5:1b: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E7:44:C5:5E:C6:E1:D0:B7:32:35:89:D5:DC:0E:FA:98:AF:54:DB X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:86:df:98:42:a4:20:14:81:bd:41:86:91:32:bd:cd:c7: 59:ef:69:af:bb:63:db:dc:ec:da:21:13:dc:63:b6:ce:9e:d2: 8a:2c:07:07:6f:ec:ac:45:53:08:7e:f8:3e:22:87:5d:15:b6: 29:3d:bb:63:3d:39:2f:69:1e:6f:32:be:a2:80:7e:78:0f:b4: e8:9e:6b:a3:4a:4b:3c:6b:3d:d1:64:01:7a:61:a1:d6:8a:76: 0d:4e:4f:7d:54:80:6b:f6:22:9d:cf:81:d2:6b:61:69:22:29: 56:71:b4:0c:4e:51:b5:9d:7d:df:bb:58:78:8d:99:31:c8:22: 89:b1:9d:c5:95:fa:ed:dc:ab:2e:ea:f5:2f:04:91:77:2f:ee: b5:2b:03:09:db:44:11:c5:07:fe:07:fb:79:b4:c3:4a:42:3d: 64:2c:a5:3b:af:60:6d:ed:7c:d9:91:f2:e9:04:48:ac:f5:02: f8:de:5f:98:a9:6a:cf:5f:f7:0c:0c:2b:6a:5b:e9:8d:d4:37: ad:8d:00:a0:85:df:39:e5:72:be:27:42:fd:ac:cc:c7:85:22: 79:69:a0:df:8a:07:fd:84:31:c9:b2:0b:b3:1e:bd:3e:8f:95: 9d:6f:81:8b:11:85:1f:3b:ce:7a:28:39:e6:96:ed:5b:59:b7: cb:36:45:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwMzI5MDA0MTU3WhcNMjUwNDA1MDA0MTU3WjAYMRYwFAYD VQQDEw02N2U3NDFkNS0yMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jH1amI47kR8b5blE8iq+M4y/2hAdDsT+8dlNqgMrH/TWR9oN3ptURRy09zv x8HrvJ8cNZotytqbuaVPYfvi1Vd4aHNIYbTcoADLSV/mr12/frXgqn2sOuikuGhh TjMXpJvnxGhDg4+kJrPa9C80ZiKdlNZ79JZqVmhwwTNcUdRySTEI2I9wXj1fPAiD 0AaMcJSaAQa2o8KKemJ6c3fY1O+F1YVbbZ3M6VReEIN01bcfvNAgx0zdhiO2XG6q 5KAhONXIE3R41PXNpz8eMUcMKAfmJCqhK43msLZb3vjQy1mY/OaGNF5JAjYWoqzr 00Ee5G3QLMukqMvXkd1ypRuJGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTnRMVe xuHQtzI1idXcDvqYr1TbMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXeobfmEKkIBSBvUGGkTK9zcdZ72mvu2Pb3OzaIRPcY7bOntKKLAcH b+ysRVMIfvg+IoddFbYpPbtjPTkvaR5vMr6igH54D7TonmujSks8az3RZAF6YaHW inYNTk99VIBr9iKdz4HSa2FpIilWcbQMTlG1nX3fu1h4jZkxyCKJsZ3Flfrt3Ksu 6vUvBJF3L+61KwMJ20QRxQf+B/t5tMNKQj1kLKU7r2Bt7XzZkfLpBEis9QL43l+Y qWrPX/cMDCtqW+mN1DetjQCghd855XK+J0L9rMzHhSJ5aaDfigf9hDHJsguzHr0+ j5Wdb4GLEYUfO856KDnmlu1bWbfLNkUb -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:50 2025 by rpki-client