$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: EfOzAEbt8VAkgjZJKk7ElHpXbrVzi4MS+e0pbg+dsP0= Subject key identifier: 3B:4D:09:88:26:14:97:81:59:29:76:30:4A:19:AC:22:58:E8:1A:66 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C28 Signing time: Fri 04 Apr 2025 18:33:24 +0000 Manifest this update: Fri 04 Apr 2025 18:33:23 +0000 Manifest next update: Fri 11 Apr 2025 18:33:23 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: gPZMAWHOydNrhk9MkiGu2YIPwj0uKCfreKCIVifGulI=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02 Validity Not Before: Apr 4 18:33:23 2025 GMT Not After : Apr 11 18:33:23 2025 GMT Subject: CN=67f025f4-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:49:3c:f6:f7:0f:d6:c5:45:31:62:2e:a1: 98:bd:98:70:99:46:02:57:a2:7b:01:ca:04:58:62: 9e:fb:d0:38:b1:24:62:17:2b:15:67:4e:61:34:56: f5:75:ae:a8:b8:98:04:60:ef:97:44:bf:d3:9c:e1: bb:ed:1e:8f:d2:30:56:a1:f3:46:ff:f4:8c:c9:2c: 03:0e:82:e1:0f:6d:37:49:90:f2:c0:be:4a:70:19: 48:ac:51:f3:3c:4c:e7:fd:ea:f3:fd:bc:33:14:6f: 87:b1:b9:01:74:36:5d:59:f2:60:d0:10:4a:b7:74: 48:3b:b7:84:48:c5:3e:fd:00:41:b0:db:77:de:da: 08:6e:58:b5:1e:fe:92:62:38:f9:49:73:70:29:6b: 59:5d:34:92:38:b1:83:2d:fb:52:c4:d8:56:fc:e1: f7:a8:41:0a:61:b0:e0:67:ee:ea:eb:ff:21:36:24: e4:e2:31:ce:fa:87:4b:01:61:cb:5e:ae:73:e2:58: 34:78:a4:0b:d3:b0:e4:3a:50:c3:48:ee:7f:f7:21: 41:56:ba:95:3f:85:2a:0f:18:b8:38:0e:b3:10:f7: 92:df:13:64:5d:19:34:30:94:29:16:9c:0d:7d:ee: 22:b5:d5:0e:db:29:af:ec:92:51:58:f1:9c:ca:8a: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:09:88:26:14:97:81:59:29:76:30:4A:19:AC:22:58:E8:1A:66 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c7:50:3e:91:81:05:7b:ca:ca:4e:09:03:d0:ff:8c:e5:e6: 69:05:87:d3:8a:49:f2:07:d4:e6:05:b3:e1:c3:5b:3f:b1:b6: c4:b3:d5:95:bc:0d:27:3d:74:d7:e3:b8:36:79:c9:0a:19:b1: af:02:7e:05:3b:2a:2c:cf:70:f2:22:58:fe:4b:11:d6:36:62: 8b:91:03:90:5e:e9:5f:de:1a:52:3f:11:60:bc:97:d4:3c:dc: 00:f7:4a:b6:a1:f3:4d:6d:67:ea:47:0c:2d:31:68:af:9d:72: b5:cc:c8:4b:31:69:a7:4e:66:ad:03:ab:7e:c8:76:05:7a:77: cf:5a:f7:1a:48:38:3e:b6:40:1f:09:e7:c9:cf:09:dd:03:46: be:44:ba:2e:1e:ce:da:43:78:0a:ae:bd:3c:58:14:59:22:30: 79:bd:54:34:b0:d7:20:f5:fe:ab:18:8e:89:db:ea:fc:6f:f1: 54:81:c9:15:ad:cc:92:93:f4:5e:60:7f:79:39:b1:cf:64:8f: c9:d3:6f:e8:fd:26:9f:41:42:cf:6b:e6:7d:71:4c:6a:e7:f0: b4:8e:96:f8:47:cd:be:4f:7e:5f:e2:fe:01:c0:f8:c6:e0:ab: db:b9:37:30:c3:f0:1a:32:5c:ba:d5:99:c7:91:06:b1:83:9b: 4e:dc:c1:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUwNDA0MTgzMzIzWhcNMjUwNDExMTgzMzIzWjAYMRYwFAYD VQQDEw02N2YwMjVmNC01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLdJPPb3D9bFRTFiLqGYvZhwmUYCV6J7AcoEWGKe+9A4sSRiFysVZ05hNFb1 da6ouJgEYO+XRL/TnOG77R6P0jBWofNG//SMySwDDoLhD203SZDywL5KcBlIrFHz PEzn/erz/bwzFG+HsbkBdDZdWfJg0BBKt3RIO7eESMU+/QBBsNt33toIbli1Hv6S Yjj5SXNwKWtZXTSSOLGDLftSxNhW/OH3qEEKYbDgZ+7q6/8hNiTk4jHO+odLAWHL Xq5z4lg0eKQL07DkOlDDSO5/9yFBVrqVP4UqDxi4OA6zEPeS3xNkXRk0MJQpFpwN fe4itdUO2ymv7JJRWPGcyoqQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtNCYgm FJeBWSl2MEoZrCJY6BpmMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjx1A+kYEFe8rKTgkD0P+M5eZpBYfTiknyB9TmBbPhw1s/sbbEs9WV vA0nPXTX47g2eckKGbGvAn4FOyosz3DyIlj+SxHWNmKLkQOQXulf3hpSPxFgvJfU PNwA90q2ofNNbWfqRwwtMWivnXK1zMhLMWmnTmatA6t+yHYFenfPWvcaSDg+tkAf CefJzwndA0a+RLouHs7aQ3gKrr08WBRZIjB5vVQ0sNcg9f6rGI6J2+r8b/FUgckV rcySk/ReYH95ObHPZI/J02/o/SafQULPa+Z9cUxq5/C0jpb4R82+T35f4v4BwPjG 4KvbuTcww/AaMly61ZnHkQaxg5tO3MHg -----END CERTIFICATE-----Generated at Fri Apr 4 21:22:59 2025 by rpki-client