$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: UB/OJfqqgjxCho1TIVNJPNO6UZawJR7ojoG6+M0Zp5Q= Subject key identifier: 9D:62:62:3B:7E:67:DD:22:57:D8:08:37:3D:BD:02:5C:A0:48:B3:50 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 0341 Signing time: Wed 09 Apr 2025 00:48:51 +0000 Manifest this update: Wed 09 Apr 2025 00:48:50 +0000 Manifest next update: Wed 16 Apr 2025 00:48:50 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: J40eam3ZMKZm/k4xGMThGN6OwmqHw8jfK7+5SMQkkyU=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: VhDwcUHjhyil4F0v9hLHnTY4dEx10IiI44izoTq8eNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A Validity Not Before: Apr 9 00:48:50 2025 GMT Not After : Apr 16 00:48:50 2025 GMT Subject: CN=67f5c3f2-fc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:d7:48:40:2f:01:15:02:14:e0:e7:4f:d1: 5d:a0:fd:65:67:45:5c:28:e0:e3:cb:99:9a:bd:48: 4a:47:4c:fd:79:af:c6:10:ed:b7:94:8d:06:df:df: 68:fd:7d:6c:11:34:f0:35:5b:4d:6c:f9:62:65:e3: 3f:0b:43:08:24:9e:57:92:07:34:c9:36:06:fb:e3: 20:cf:fd:81:ac:49:34:16:bc:46:7d:95:e6:33:da: 1a:74:d5:3a:75:0b:5b:53:72:94:38:9c:66:fe:d9: 30:56:88:5f:63:a3:67:48:13:41:80:54:6e:b6:26: b0:89:db:e5:b4:ce:5b:ee:f9:cc:31:f9:ce:53:73: e3:f5:46:9c:d4:0e:78:3a:81:cd:d0:33:b1:7c:cd: 9c:45:d1:a6:03:51:d2:e6:f8:aa:69:2b:42:dc:03: f2:5d:be:f4:df:26:1f:a8:f8:c9:85:cb:fc:b2:84: 10:7f:62:91:af:54:3b:8e:98:59:9b:1e:aa:38:3b: 6a:29:c9:7e:96:19:25:74:85:4f:68:b2:a8:30:1c: c0:af:74:a5:9e:be:4d:b1:19:77:ac:2c:46:02:8f: 7d:d7:cf:99:4e:d0:8a:69:7a:64:21:c7:a0:fd:39: 15:3f:a0:98:51:fd:15:de:36:77:07:05:9f:53:e4: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:62:62:3B:7E:67:DD:22:57:D8:08:37:3D:BD:02:5C:A0:48:B3:50 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:77:dd:2b:b0:c4:61:13:8c:86:92:23:3d:29:91:ae:52: 9e:22:1b:b0:2b:f0:58:2c:7e:fb:73:87:cb:1d:fe:35:4c:ac: 88:b8:24:f7:10:94:e2:1b:09:16:ff:46:54:80:76:dd:28:4e: 6a:b9:89:84:80:0c:48:5c:40:2b:91:22:17:c3:2b:a2:22:4a: be:bc:d7:20:79:0e:4b:b9:c2:26:c0:4d:13:ee:89:d3:02:4c: 5b:68:f9:8f:91:97:82:b5:3a:8a:38:31:c3:2a:8b:14:43:24: fc:6f:00:ee:26:01:da:7f:44:d5:bf:73:fb:8d:da:98:f2:44: 6b:6c:45:ee:06:62:51:d2:78:cc:e7:a2:02:4c:b7:c1:d8:67: 4d:84:38:5f:5d:e2:79:96:d2:aa:c2:4e:e9:62:a0:9c:f9:5d: 95:a6:44:a3:7d:1f:da:e8:ec:b7:43:32:23:ce:56:b8:b3:ac: 3b:df:f2:cd:d7:9e:ab:91:af:18:01:6d:e9:15:ba:a0:a7:15: 71:cf:1e:2e:f9:47:c8:4e:d5:03:38:74:ad:54:e9:af:45:d7: 43:df:0f:e1:58:a9:a8:b0:5a:92:c1:f6:4a:39:50:c1:66:8e: 9a:fd:d0:a3:bc:75:af:69:77:68:78:6e:a6:5b:7f:22:04:55: f8:35:6d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUwNDA5MDA0ODUwWhcNMjUwNDE2MDA0ODUwWjAYMRYwFAYD VQQDEw02N2Y1YzNmMi1mYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuizXSEAvARUCFODnT9FdoP1lZ0VcKODjy5mavUhKR0z9ea/GEO23lI0G399o /X1sETTwNVtNbPliZeM/C0MIJJ5Xkgc0yTYG++Mgz/2BrEk0FrxGfZXmM9oadNU6 dQtbU3KUOJxm/tkwVohfY6NnSBNBgFRutiawidvltM5b7vnMMfnOU3Pj9Uac1A54 OoHN0DOxfM2cRdGmA1HS5viqaStC3APyXb703yYfqPjJhcv8soQQf2KRr1Q7jphZ mx6qODtqKcl+lhkldIVPaLKoMBzAr3Slnr5NsRl3rCxGAo9918+ZTtCKaXpkIceg /TkVP6CYUf0V3jZ3BwWfU+SDJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1iYjt+ Z90iV9gINz29AlygSLNQMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIvHfdK7DEYROMhpIjPSmRrlKeIhuwK/BYLH77c4fLHf41TKyIuCT3 EJTiGwkW/0ZUgHbdKE5quYmEgAxIXEArkSIXwyuiIkq+vNcgeQ5LucImwE0T7onT AkxbaPmPkZeCtTqKODHDKosUQyT8bwDuJgHaf0TVv3P7jdqY8kRrbEXuBmJR0njM 56ICTLfB2GdNhDhfXeJ5ltKqwk7pYqCc+V2VpkSjfR/a6Oy3QzIjzla4s6w73/LN 156rka8YAW3pFbqgpxVxzx4u+UfITtUDOHStVOmvRddD3w/hWKmosFqSwfZKOVDB Zo6a/dCjvHWvaXdoeG6mW38iBFX4NW3h -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:01 2025 by rpki-client