$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: jZhL5YpR/reNkMUTArvqeNYArzWHlYL1/CQsxbqxwvg= Subject key identifier: 56:BF:0C:69:6E:3D:9E:01:1F:CF:EE:D1:96:70:14:C3:41:C7:FA:3A Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 97 Signing time: Mon 21 Apr 2025 05:09:10 +0000 Manifest this update: Mon 21 Apr 2025 05:09:09 +0000 Manifest next update: Mon 28 Apr 2025 05:09:09 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: fHK5Xg3TlrxyYKI4cZKyNJBWOwA9Nnrcqw83AEZ6AlQ=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: SBjUcQwgq8eYibunzuM6B0MYbh92vDqaJjZbumGPIz4=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Apr 21 05:09:09 2025 GMT Not After : Apr 28 05:09:09 2025 GMT Subject: CN=6805d2f6-dc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:bf:07:3c:98:5a:36:e0:8d:b1:76:68:10: b4:95:41:2a:b8:2e:ca:24:d7:44:64:58:9c:8d:8a: 00:cc:6a:16:50:89:d0:f0:8f:5e:c5:60:5c:58:74: ef:1f:d1:c7:b0:81:c2:86:db:90:a4:32:93:d4:46: c2:e2:fc:64:a7:2f:14:31:38:79:34:6a:29:27:ae: b5:4c:9c:a7:9d:9b:1f:ab:d4:33:95:3e:95:6a:62: ea:07:ca:21:59:36:54:03:2a:08:53:2e:b2:20:df: 33:50:08:26:eb:74:80:d1:27:35:62:ec:94:b6:28: 06:46:73:a3:46:81:64:49:9c:f1:bb:b1:a7:19:df: 58:06:0f:bd:94:11:82:f6:5c:49:ef:d3:4d:ec:62: 3d:f1:0f:de:37:76:39:e9:a1:7b:29:a2:11:fb:88: 1e:b3:91:cb:32:50:54:40:d0:32:54:33:de:2f:bc: 91:58:5b:e8:8c:93:ad:06:34:46:1e:c2:3c:ab:47: 9d:4d:c9:38:8f:16:11:38:57:da:95:55:6a:c9:6a: 62:cf:a6:2c:06:b2:63:e1:8e:24:22:e6:4c:5d:58: 96:9f:d3:d3:f3:4d:1a:ad:13:62:f7:b1:ba:c5:11: 2e:6c:53:44:1a:9e:17:ed:ef:40:4c:52:e9:92:94: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BF:0C:69:6E:3D:9E:01:1F:CF:EE:D1:96:70:14:C3:41:C7:FA:3A X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:ca:cd:92:14:42:c1:64:fd:54:3b:82:c9:fd:eb:d0:bc: 76:57:d7:9a:5e:2d:ca:8d:ec:d2:44:0f:9c:f4:a6:c1:ce:78: d5:b0:c2:57:cf:c9:8b:e0:d9:5e:d7:61:93:80:3d:d8:a0:7a: 42:c3:47:00:b1:b0:50:07:34:a7:c1:81:df:26:f8:bf:65:da: 20:10:79:ae:32:00:ed:5f:4e:b5:fd:92:31:ac:46:5d:c3:72: 95:d0:3c:b8:11:c0:df:2b:b8:72:a8:09:a0:d1:3b:19:71:22: dc:36:ab:c6:93:92:b2:43:91:e2:96:f0:d6:76:c2:f6:31:c6: e0:ae:7c:d5:b4:d1:10:a9:53:a4:06:50:7a:57:4b:5b:cb:a7: db:4e:3c:7e:a2:08:1b:2d:c1:88:69:a2:6a:67:f0:d0:23:bc: 0c:06:85:eb:48:67:f3:9b:e3:71:5a:76:13:56:fc:84:98:62: d5:f1:19:48:40:47:4c:2f:56:fe:95:9c:3b:52:3c:6b:b4:ab: e4:47:1a:3d:06:24:40:09:c9:8e:24:b0:af:c0:5c:de:6a:d1: 61:09:db:cf:74:9a:0e:5f:98:d7:81:72:b5:67:74:cb:d9:1a: 82:d0:66:c1:28:d4:0d:75:d2:4d:b1:fa:3c:4a:27:94:4d:ee: 02:eb:b5:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUwNDIxMDUwOTA5WhcNMjUwNDI4MDUwOTA5WjAYMRYwFAYD VQQDEw02ODA1ZDJmNi1kYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g6/BzyYWjbgjbF2aBC0lUEquC7KJNdEZFicjYoAzGoWUInQ8I9exWBcWHTv H9HHsIHChtuQpDKT1EbC4vxkpy8UMTh5NGopJ661TJynnZsfq9QzlT6VamLqB8oh WTZUAyoIUy6yIN8zUAgm63SA0Sc1YuyUtigGRnOjRoFkSZzxu7GnGd9YBg+9lBGC 9lxJ79NN7GI98Q/eN3Y56aF7KaIR+4ges5HLMlBUQNAyVDPeL7yRWFvojJOtBjRG HsI8q0edTck4jxYROFfalVVqyWpiz6YsBrJj4Y4kIuZMXViWn9PT800arRNi97G6 xREubFNEGp4X7e9ATFLpkpTWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa/DGlu PZ4BH8/u0ZZwFMNBx/o6MB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX08rNkhRCwWT9VDuCyf3r0Lx2V9eaXi3KjezSRA+c9KbBznjVsMJX z8mL4Nle12GTgD3YoHpCw0cAsbBQBzSnwYHfJvi/ZdogEHmuMgDtX061/ZIxrEZd w3KV0Dy4EcDfK7hyqAmg0TsZcSLcNqvGk5KyQ5HilvDWdsL2McbgrnzVtNEQqVOk BlB6V0tby6fbTjx+oggbLcGIaaJqZ/DQI7wMBoXrSGfzm+NxWnYTVvyEmGLV8RlI QEdML1b+lZw7UjxrtKvkRxo9BiRACcmOJLCvwFzeatFhCdvPdJoOX5jXgXK1Z3TL 2RqC0GbBKNQNddJNsfo8SieUTe4C67VS -----END CERTIFICATE-----Generated at Tue Apr 22 19:14:33 2025 by rpki-client