$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: 6r60oLVvB2E763NeGg74O/P9oow5kRDgi0/GtooDxc8= Subject key identifier: 88:31:00:5D:4F:1C:B2:08:0E:41:79:2C:C4:04:18:16:BC:CD:A4:9B Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0507 Signing time: Fri 28 Mar 2025 23:56:16 +0000 Manifest this update: Fri 28 Mar 2025 23:56:15 +0000 Manifest next update: Fri 04 Apr 2025 23:56:15 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: 80fm++dBOjbxrw7PkriL/2ccj7sdckMTVoHFf0AKNqE=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD Validity Not Before: Mar 28 23:56:15 2025 GMT Not After : Apr 4 23:56:15 2025 GMT Subject: CN=67e7371f-f3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ed:64:61:d8:45:a5:da:07:2a:f3:03:8f:ce: f1:90:6c:8b:05:b7:2e:40:e7:f1:db:1a:08:bb:e9: 17:95:f7:42:10:e9:87:7a:98:8b:41:af:95:fe:f0: 9c:c1:2c:f1:80:ac:b2:64:dd:83:15:e8:f9:14:2d: e5:a4:42:2a:d9:a2:9e:de:14:2e:00:c6:d1:c4:ed: 94:70:22:68:8c:bd:27:e3:89:f0:05:99:dc:e4:0b: 74:61:16:4e:4e:4c:ab:a8:04:5e:d8:b8:73:dd:a4: ce:9f:e5:1d:7b:db:37:1e:e9:12:9a:88:17:58:39: 42:30:cf:df:96:2d:e0:ab:05:b1:85:93:cc:d2:4d: 9a:0c:f3:85:4e:7f:a2:c9:dc:9f:e8:1d:1f:2d:4b: 30:be:5b:01:b9:3b:a4:53:da:e4:f2:d3:0c:e6:d2: 7a:d0:b1:75:a8:aa:17:32:c8:32:67:61:1f:6e:00: 43:f0:10:6b:06:5c:0d:16:b1:d0:7c:c2:6f:2e:d5: 0e:08:19:71:73:89:b4:66:0a:a7:d1:49:c3:a7:fe: 04:83:3f:86:74:db:ed:f5:7a:89:21:65:60:bd:8b: e1:15:7c:de:fd:30:c9:5d:fc:99:36:45:0c:bb:0e: d3:41:d9:0c:f8:54:61:85:d7:f0:48:32:d0:56:f6: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:31:00:5D:4F:1C:B2:08:0E:41:79:2C:C4:04:18:16:BC:CD:A4:9B X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d2:c0:64:e7:53:79:c2:9f:f2:d0:b4:25:f6:9c:be:a6:0b: a7:cb:db:27:3e:9d:df:e4:be:d9:a1:da:a2:93:cf:12:4f:06: 7e:91:cb:9b:a8:46:2e:67:56:db:ec:18:2a:4f:76:7a:01:33: f7:71:05:e7:f7:b3:86:94:fb:e2:47:2f:c5:04:f8:a9:c5:82: e7:d9:0d:75:ba:7f:02:60:f5:3b:0a:5d:b6:b6:e3:e3:9c:7b: c8:17:5a:8b:12:12:9f:df:07:ca:25:66:bb:c7:65:f1:e7:9d: f0:9f:c7:76:7b:5b:ba:14:e5:55:3f:08:1c:88:e8:07:a1:f7: 77:eb:ad:71:ea:78:dd:4a:e7:41:77:e1:3e:53:d0:e6:53:c4: c8:01:47:e5:b2:f9:0e:5f:54:2d:b3:f4:c9:69:ab:99:da:9d: c4:25:a4:0b:16:4f:1a:e7:a2:97:46:2c:4e:dc:28:fc:d1:74: cb:52:8a:80:98:7f:fa:ae:f5:cf:d0:85:35:0a:35:4c:f1:45: 56:f9:c4:6f:7b:cf:5f:ad:64:22:66:57:68:2c:e3:fe:8e:77: 5c:94:4e:4c:50:31:d1:12:64:21:ac:47:07:8f:f2:19:08:07: 2a:6d:ab:5b:37:4d:a9:c9:d8:4a:be:6d:d2:83:fc:3e:1a:d3: 47:20:11:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwMzI4MjM1NjE1WhcNMjUwNDA0MjM1NjE1WjAYMRYwFAYD VQQDEw02N2U3MzcxZi1mM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u1kYdhFpdoHKvMDj87xkGyLBbcuQOfx2xoIu+kXlfdCEOmHepiLQa+V/vCc wSzxgKyyZN2DFej5FC3lpEIq2aKe3hQuAMbRxO2UcCJojL0n44nwBZnc5At0YRZO TkyrqARe2Lhz3aTOn+Ude9s3HukSmogXWDlCMM/fli3gqwWxhZPM0k2aDPOFTn+i ydyf6B0fLUswvlsBuTukU9rk8tMM5tJ60LF1qKoXMsgyZ2EfbgBD8BBrBlwNFrHQ fMJvLtUOCBlxc4m0Zgqn0UnDp/4Egz+GdNvt9XqJIWVgvYvhFXze/TDJXfyZNkUM uw7TQdkM+FRhhdfwSDLQVvbGWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgxAF1P HLIIDkF5LMQEGBa8zaSbMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu0sBk51N5wp/y0LQl9py+pguny9snPp3f5L7Zodqik88STwZ+kcub qEYuZ1bb7BgqT3Z6ATP3cQXn97OGlPviRy/FBPipxYLn2Q11un8CYPU7Cl22tuPj nHvIF1qLEhKf3wfKJWa7x2Xx553wn8d2e1u6FOVVPwgciOgHofd3661x6njdSudB d+E+U9DmU8TIAUflsvkOX1Qts/TJaauZ2p3EJaQLFk8a56KXRixO3Cj80XTLUoqA mH/6rvXP0IU1CjVM8UVW+cRve89frWQiZldoLOP+jndclE5MUDHREmQhrEcHj/IZ CAcqbatbN02pydhKvm3Sg/w+GtNHIBGx -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:30 2025 by rpki-client