$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: 43KZixTkOFmIywPDMjep3lRj4b0lqGAcQYmmMon+foE= Subject key identifier: 2D:4D:F3:BE:F6:D9:7D:08:FD:61:60:67:A3:B4:C5:AC:CE:FD:23:36 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 0260 Signing time: Tue 15 Apr 2025 01:24:47 +0000 Manifest this update: Tue 15 Apr 2025 01:24:47 +0000 Manifest next update: Tue 22 Apr 2025 01:24:47 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: KOT2Lx3pI8PmZriGQZIOn1j7+pCnLTsaio+V++SMhig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Apr 15 01:24:47 2025 GMT Not After : Apr 22 01:24:47 2025 GMT Subject: CN=67fdb55f-fc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:3f:af:98:54:fc:8e:0f:79:eb:65:a3:5d: 16:66:7e:76:a2:82:d7:b2:97:95:23:10:ee:58:f8: 0b:78:0f:77:59:01:14:74:4c:bb:c2:d3:d0:7b:ac: 8d:2f:44:fa:9e:ba:2f:1e:fe:9b:f6:6d:f9:df:7c: b7:6a:d6:72:2f:46:4d:f9:93:13:90:83:d2:5d:0a: bc:b6:ed:79:c5:81:03:19:95:38:c4:29:80:4c:d5: 42:7b:60:51:95:48:b3:da:03:92:02:36:30:dc:35: 32:54:cd:da:97:f6:02:1d:2c:07:be:61:35:12:61: b3:84:25:f7:f3:a8:88:d7:37:b7:f4:51:f5:3f:c5: 7b:7d:34:8c:56:ad:d0:a8:06:73:02:b4:d8:2f:89: 71:c5:39:15:54:5c:e6:31:8a:47:c7:3f:1e:61:0e: 42:4b:a7:46:8a:36:75:77:3e:6f:21:54:71:2e:6b: b5:64:6e:6b:b1:ac:99:80:a1:bc:86:21:ef:c8:e1: 9a:d2:ec:49:18:a7:81:ed:cc:59:ae:7c:e6:56:b3: 65:2a:dc:fa:43:48:e4:87:46:93:f1:09:6f:85:e6: 9d:dc:0c:30:ed:fa:44:9f:62:e8:bd:c2:68:94:62: de:24:ca:68:e2:f2:5a:36:6f:4a:91:0e:c2:44:06: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4D:F3:BE:F6:D9:7D:08:FD:61:60:67:A3:B4:C5:AC:CE:FD:23:36 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:59:e5:f9:5f:bd:2e:ad:af:58:af:e2:30:78:5f:93:00: 3e:ce:30:9c:96:da:56:c1:5f:91:88:2a:fa:71:16:44:8d:f8: fd:45:31:10:5e:60:8e:c8:52:e9:15:ac:3c:da:2c:76:0e:4c: 09:fb:5c:0f:1a:00:be:ea:a2:1c:c5:d5:35:0e:0e:59:66:59: 7e:79:c4:b4:0b:e2:63:33:68:92:c5:d1:b2:33:09:21:c9:27: e7:97:43:c8:57:ac:5a:e2:1f:9a:23:a5:d2:6e:32:70:2b:41: c4:8e:86:d5:9c:43:12:06:aa:2d:5e:92:bc:56:d3:5a:d3:ee: bb:75:02:99:91:30:dc:ac:9f:2a:a7:5a:e5:cc:06:f4:cd:f8: e4:1f:d2:b2:d3:5e:83:22:a9:25:ac:49:d6:b5:2a:bf:80:9d: 2b:b7:81:64:8d:1d:0c:55:67:40:f2:23:bd:ac:8c:80:b9:e2: 9b:8f:54:6a:19:4c:11:77:6b:ba:17:53:50:0d:b6:97:b8:93: e8:e5:19:ac:de:17:04:d2:50:2d:fd:59:43:79:da:3c:3f:72: 66:9e:64:2e:74:b6:fd:e1:7f:dc:0a:cb:bc:16:88:24:b0:c8: 5e:4b:67:de:59:02:be:f2:1f:ed:63:fa:62:ba:f5:de:eb:b9: 44:e5:ef:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUwNDE1MDEyNDQ3WhcNMjUwNDIyMDEyNDQ3WjAYMRYwFAYD VQQDEw02N2ZkYjU1Zi1mYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bg/r5hU/I4Peetlo10WZn52ooLXspeVIxDuWPgLeA93WQEUdEy7wtPQe6yN L0T6nrovHv6b9m3533y3atZyL0ZN+ZMTkIPSXQq8tu15xYEDGZU4xCmATNVCe2BR lUiz2gOSAjYw3DUyVM3al/YCHSwHvmE1EmGzhCX386iI1ze39FH1P8V7fTSMVq3Q qAZzArTYL4lxxTkVVFzmMYpHxz8eYQ5CS6dGijZ1dz5vIVRxLmu1ZG5rsayZgKG8 hiHvyOGa0uxJGKeB7cxZrnzmVrNlKtz6Q0jkh0aT8Qlvhead3Aww7fpEn2LovcJo lGLeJMpo4vJaNm9KkQ7CRAZ3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1N8772 2X0I/WFgZ6O0xazO/SM2MB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoQ1nl+V+9Lq2vWK/iMHhfkwA+zjCcltpWwV+RiCr6cRZEjfj9RTEQ XmCOyFLpFaw82ix2DkwJ+1wPGgC+6qIcxdU1Dg5ZZll+ecS0C+JjM2iSxdGyMwkh ySfnl0PIV6xa4h+aI6XSbjJwK0HEjobVnEMSBqotXpK8VtNa0+67dQKZkTDcrJ8q p1rlzAb0zfjkH9Ky016DIqklrEnWtSq/gJ0rt4FkjR0MVWdA8iO9rIyAueKbj1Rq GUwRd2u6F1NQDbaXuJPo5Rms3hcE0lAt/VlDedo8P3JmnmQudLb94X/cCsu8Fogk sMheS2feWQK+8h/tY/piuvXe67lE5e86 -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:04 2025 by rpki-client