$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: vs8Ai10VDab6G7gRtXG5MOyr8A2815gP3cBz8qXEl08= Subject key identifier: 5B:5C:C4:D6:59:F2:97:CF:2D:6E:02:EB:67:60:33:72:DA:6B:E9:11 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0DDF Signing time: Sat 12 Apr 2025 17:46:31 +0000 Manifest this update: Sat 12 Apr 2025 17:46:30 +0000 Manifest next update: Sat 19 Apr 2025 17:46:30 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: 2lm8SzQIXH7HjIkpie6uo20h+KVIPqNSb7T+q7kHnJ4=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: lZ3QbqPdh5gBg1rW+eMhPiAXrCRo4e2jYq5svVV45wI=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: jOwsth6DgagpPjpvgD+70DaYD4kKIMkvYMnC7TJ216E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Apr 12 17:46:30 2025 GMT Not After : Apr 19 17:46:30 2025 GMT Subject: CN=67faa6f6-c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:47:80:52:1d:30:9e:77:46:84:92:c3:4c: e9:b1:d0:8e:90:c5:49:23:b6:d3:8a:af:24:8d:62: 9f:24:c2:92:37:65:da:06:bb:d3:6d:88:79:0e:13: dd:a0:e2:ef:3a:e6:16:47:59:b6:6d:cb:a3:a7:b4: 88:87:4b:8c:40:12:1a:88:0a:ac:de:55:47:d8:52: c2:5a:24:61:38:f7:7d:41:d7:8f:86:a6:79:71:0f: c6:f8:a6:0a:45:d4:5c:9f:fa:42:10:cd:cd:c3:9f: 65:b7:d9:e6:4a:8b:d3:75:6a:20:c6:12:3e:08:e1: 0a:01:8a:df:86:6d:11:54:b1:08:9c:25:0b:81:c8: 85:71:ad:a2:db:b2:49:c4:5e:79:8a:24:8b:03:de: e1:4a:0c:40:a1:5a:bf:c4:40:7f:57:87:90:82:4f: 55:42:88:06:0c:ab:43:22:af:36:86:b3:c3:19:17: 37:d9:91:24:f8:71:7b:3a:6b:8c:f3:68:b1:97:4d: 7a:25:50:01:69:d3:18:37:1d:7a:26:d4:1f:f9:57: 68:96:da:e6:cc:cd:cf:01:45:a3:fc:aa:31:3d:d7: b4:34:9d:e4:dd:4e:5c:7f:a6:fc:43:53:8e:70:ac: 40:54:98:fb:35:ee:f0:9e:22:30:e9:89:79:22:69: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5C:C4:D6:59:F2:97:CF:2D:6E:02:EB:67:60:33:72:DA:6B:E9:11 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cc:c5:8c:ac:06:de:b0:d5:4c:f3:e8:43:94:34:2f:66:16: ec:4c:00:9f:17:5b:4b:98:4e:01:a5:80:2a:4d:69:19:77:45: fe:0b:22:0d:a2:23:89:b9:30:eb:19:89:a8:55:0f:c2:6b:da: 17:ee:16:b8:05:ed:bf:7b:75:f4:a9:73:c6:27:ed:88:56:73: b0:e2:f1:13:fd:59:05:57:af:20:63:80:9f:22:c2:4e:e9:4a: 86:ab:57:56:0a:e9:4a:0e:50:68:10:f7:60:2a:84:15:5f:64: ea:a1:ed:6a:fb:ea:88:88:ec:08:bb:a3:63:87:50:51:81:48: a7:2c:91:d4:d0:07:bd:b6:5b:34:8d:2c:88:b2:26:a0:c3:17: 3a:18:9b:ad:9d:dc:6b:3e:35:69:27:cd:75:fe:ac:f3:dd:0c: 61:04:7e:89:52:9e:73:b4:09:96:74:7e:a6:80:38:36:28:bf: af:9d:d8:a2:64:fe:d2:1e:8e:30:63:bd:3f:fc:13:ab:35:22: 58:43:c7:a8:f4:81:60:50:69:09:c9:6c:8f:ae:1e:a5:ff:cc: 3a:18:02:c7:5d:fc:3b:32:b2:1a:d1:d9:ee:1b:48:bc:3f:57: 04:c4:bc:2f:c7:d6:91:53:7d:98:8a:89:a7:7d:04:b0:23:90: 40:ba:77:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwNDEyMTc0NjMwWhcNMjUwNDE5MTc0NjMwWjAYMRYwFAYD VQQDEw02N2ZhYTZmNi1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/tHgFIdMJ53RoSSw0zpsdCOkMVJI7bTiq8kjWKfJMKSN2XaBrvTbYh5DhPd oOLvOuYWR1m2bcujp7SIh0uMQBIaiAqs3lVH2FLCWiRhOPd9QdePhqZ5cQ/G+KYK RdRcn/pCEM3Nw59lt9nmSovTdWogxhI+COEKAYrfhm0RVLEInCULgciFca2i27JJ xF55iiSLA97hSgxAoVq/xEB/V4eQgk9VQogGDKtDIq82hrPDGRc32ZEk+HF7OmuM 82ixl016JVABadMYNx16JtQf+VdoltrmzM3PAUWj/KoxPde0NJ3k3U5cf6b8Q1OO cKxAVJj7Ne7wniIw6Yl5ImmfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtcxNZZ 8pfPLW4C62dgM3Laa+kRMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBczMWMrAbesNVM8+hDlDQvZhbsTACfF1tLmE4BpYAqTWkZd0X+CyIN oiOJuTDrGYmoVQ/Ca9oX7ha4Be2/e3X0qXPGJ+2IVnOw4vET/VkFV68gY4CfIsJO 6UqGq1dWCulKDlBoEPdgKoQVX2Tqoe1q++qIiOwIu6Njh1BRgUinLJHU0Ae9tls0 jSyIsiagwxc6GJutndxrPjVpJ811/qzz3QxhBH6JUp5ztAmWdH6mgDg2KL+vndii ZP7SHo4wY70//BOrNSJYQ8eo9IFgUGkJyWyPrh6l/8w6GALHXfw7MrIa0dnuG0i8 P1cExLwvx9aRU32YiomnfQSwI5BAundy -----END CERTIFICATE-----Generated at Sun Apr 13 05:47:36 2025 by rpki-client