$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: P6NjLnlB0oAcA5quFpPoZjQ8uNc6aJWmE9mTJJniDEo= Subject key identifier: 69:71:9B:1F:FB:D5:A8:8E:69:DB:34:2D:FE:F4:76:FE:DF:61:C4:E6 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 087B Signing time: Wed 02 Apr 2025 20:39:06 +0000 Manifest this update: Wed 02 Apr 2025 20:39:06 +0000 Manifest next update: Wed 09 Apr 2025 20:39:06 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: rEGRpWHHjXLKXL6IXrBV8XP76/nTcK6qvfKLl3ATe78=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD Validity Not Before: Apr 2 20:39:06 2025 GMT Not After : Apr 9 20:39:06 2025 GMT Subject: CN=67eda06a-4f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:3a:a4:57:68:0a:8c:43:d5:eb:4f:e6:13: 25:c6:23:d2:74:60:12:ab:5f:b4:96:8c:f8:10:75: 33:ff:19:6a:2c:53:5a:5c:e9:18:9a:0f:f3:f0:0f: 7a:b3:2f:b1:e1:ba:7b:08:05:08:11:8c:0e:66:60: c2:c3:5e:1d:25:a2:8d:be:96:b2:69:38:b6:0f:c7: f3:45:00:61:15:4a:c3:ba:c2:c0:fc:fa:d4:0f:d5: 04:f3:a6:64:ef:e1:01:59:ec:46:59:ce:d0:38:0f: 45:8e:22:e5:63:a7:18:df:9f:89:1a:9b:e6:44:91: b1:1e:c9:71:99:4a:74:38:68:db:08:a6:8c:48:0a: f9:4e:dd:28:19:92:86:6b:04:dc:93:fb:1a:67:57: 4b:42:e3:7f:87:5f:c8:6f:9d:c4:dd:d4:87:95:91: 5d:0e:d6:7f:32:12:49:a5:85:eb:cd:16:c5:37:fd: 4d:31:aa:b7:9e:f4:fe:3b:75:ee:74:2b:41:04:93: ac:2a:2d:35:8e:6b:f1:63:61:6d:42:47:08:cc:e2: b8:3e:38:0b:ac:84:5d:75:95:32:cf:b1:c0:b5:5e: 9d:0e:b1:6b:a4:cd:9f:88:fd:21:c2:8f:fe:66:4b: 4c:b4:1f:ce:8c:ee:0c:47:ea:90:21:a0:8e:68:cc: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:9B:1F:FB:D5:A8:8E:69:DB:34:2D:FE:F4:76:FE:DF:61:C4:E6 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bd:16:96:be:94:c3:05:0f:96:34:28:53:54:b3:ce:dd:88: 69:1e:09:6f:2d:e6:f7:7d:4c:6c:01:b6:35:4e:ca:56:e6:f8: 82:bf:a8:7c:a2:0d:f6:8e:77:7d:8d:66:63:24:f3:c8:68:fd: 40:88:e3:d1:6c:b1:03:15:e3:e6:96:28:c4:d6:12:45:7c:9e: 96:46:3a:3c:a7:54:3b:76:e9:19:81:ca:ab:07:43:4f:e5:39: 64:b2:ef:33:0b:09:f5:62:5d:ea:f8:e9:f2:16:d3:42:80:e0: ed:8d:b0:6c:ab:bf:4c:dc:61:d9:9d:77:99:55:e5:e9:bf:2f: 05:3a:c0:2d:61:62:e2:dc:a9:16:ff:e3:e9:37:71:54:2a:bb: f3:e9:78:89:df:e0:8e:de:b3:50:61:93:4e:40:f7:6c:31:2e: ce:be:ea:6f:85:1a:ae:89:e5:f9:db:fe:c6:3e:57:df:48:da: e5:f7:77:ea:df:bb:3c:22:bd:48:df:85:0b:e2:d8:5c:9c:ce: 30:2d:8c:b9:33:30:6a:01:5d:eb:3c:65:1a:46:67:7d:ca:e2: 53:e2:14:a1:89:a1:17:28:2e:89:8a:b3:9b:34:88:7b:a8:f7: 99:23:ce:40:a0:5b:9c:ca:40:05:cc:95:70:89:46:0c:49:4d: 15:aa:18:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNDAyMjAzOTA2WhcNMjUwNDA5MjAzOTA2WjAYMRYwFAYD VQQDEw02N2VkYTA2YS00ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtk6pFdoCoxD1etP5hMlxiPSdGASq1+0loz4EHUz/xlqLFNaXOkYmg/z8A96 sy+x4bp7CAUIEYwOZmDCw14dJaKNvpayaTi2D8fzRQBhFUrDusLA/PrUD9UE86Zk 7+EBWexGWc7QOA9FjiLlY6cY35+JGpvmRJGxHslxmUp0OGjbCKaMSAr5Tt0oGZKG awTck/saZ1dLQuN/h1/Ib53E3dSHlZFdDtZ/MhJJpYXrzRbFN/1NMaq3nvT+O3Xu dCtBBJOsKi01jmvxY2FtQkcIzOK4PjgLrIRddZUyz7HAtV6dDrFrpM2fiP0hwo/+ ZktMtB/OjO4MR+qQIaCOaMwYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlxmx/7 1aiOads0Lf70dv7fYcTmMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAovRaWvpTDBQ+WNChTVLPO3YhpHglvLeb3fUxsAbY1TspW5viCv6h8 og32jnd9jWZjJPPIaP1AiOPRbLEDFePmlijE1hJFfJ6WRjo8p1Q7dukZgcqrB0NP 5Tlksu8zCwn1Yl3q+OnyFtNCgODtjbBsq79M3GHZnXeZVeXpvy8FOsAtYWLi3KkW /+PpN3FUKrvz6XiJ3+CO3rNQYZNOQPdsMS7OvupvhRquieX52/7GPlffSNrl93fq 37s8Ir1I34UL4thcnM4wLYy5MzBqAV3rPGUaRmd9yuJT4hShiaEXKC6JirObNIh7 qPeZI85AoFucykAFzJVwiUYMSU0Vqhg/ -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:50 2025 by rpki-client