$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: sMJp8J/VMcl3cnCAp9XbTOPxgs9ogs8Ug8Qce3l9ilA= Subject key identifier: B0:BA:5B:70:A4:3B:77:AC:5A:D3:27:F7:21:42:BA:25:E1:DF:0F:95 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: C5 Signing time: Thu 17 Apr 2025 04:38:44 +0000 Manifest this update: Thu 17 Apr 2025 04:38:44 +0000 Manifest next update: Thu 24 Apr 2025 04:38:44 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: fERxAVHVfgRuc8Rw0Xnq46qeit90Uq+gZuflqDv+5HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Apr 17 04:38:44 2025 GMT Not After : Apr 24 04:38:44 2025 GMT Subject: CN=680085d4-95bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:d5:a4:26:88:c5:8e:e1:b6:6b:f8:93:a5: da:d4:c7:45:50:ce:e7:86:6b:84:45:eb:22:b5:4e: 8a:1a:cc:94:92:a8:b8:b8:7c:fd:07:ec:6a:e5:31: 73:ac:f8:82:3a:bf:18:89:78:08:e1:97:81:ba:4f: 5c:79:d7:4d:3d:61:64:f9:7a:fb:47:99:b9:57:fd: bc:72:d0:6a:02:2a:fa:fe:3d:45:6b:dd:c7:95:1a: 02:a2:50:2f:a0:28:bc:71:c2:4a:2a:12:6b:48:68: ea:d7:54:e0:77:4b:90:83:1f:3a:c9:f6:8d:95:e0: 25:5b:0b:02:df:94:74:66:5b:20:e9:7a:f7:39:f0: 01:eb:da:f5:c3:9b:dd:22:47:99:9a:a7:16:6e:b7: e5:cb:5b:95:7d:96:fa:1a:48:f7:89:0c:71:42:a8: 84:50:80:65:37:20:a1:68:a1:99:c2:61:c7:96:39: db:f9:2d:66:7f:1a:01:6a:3d:40:66:29:72:fe:39: 94:35:3b:11:ca:de:95:10:8a:ef:f7:63:83:61:b9: 70:a1:a6:5f:cf:e3:f5:df:d4:82:07:81:ba:13:e6: 03:80:d2:f7:4c:a2:7e:22:f8:8c:98:12:34:b1:5a: 58:0d:7b:dc:98:4c:53:36:36:06:78:b1:b5:71:3e: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:5B:70:A4:3B:77:AC:5A:D3:27:F7:21:42:BA:25:E1:DF:0F:95 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:b2:51:08:7e:59:c7:19:90:4f:d4:43:aa:93:d7:b3:95: 92:d2:a2:16:bc:0c:8d:09:d2:b2:e6:9a:05:f0:07:2c:91:6f: bf:aa:d8:df:f5:a2:4e:2d:8a:9d:1e:5c:17:32:4c:6b:21:22: 1d:25:a4:df:6d:f5:44:24:8b:40:4a:ab:4d:34:c0:89:fb:70: a9:dd:88:86:aa:23:21:a5:b3:22:b2:4c:7a:f8:05:10:99:a3: 8f:f1:1c:85:78:7a:93:ff:0a:c1:de:c0:11:19:b0:80:ce:15: 60:e2:b4:68:6a:a9:d7:5a:86:b3:f5:10:be:1e:c2:da:7f:67: 6a:75:bd:fc:59:98:a5:f0:53:c3:79:85:7a:cf:f3:33:1a:0c: 8f:70:1d:c0:86:f6:3e:b5:7b:fc:3b:37:6f:df:5e:92:7b:9e: 24:cc:84:16:f4:25:77:1c:2a:a7:b1:dc:2f:83:78:10:02:1c: 84:15:0f:03:c7:e2:c3:05:7b:55:d3:6f:3a:87:b7:a0:bd:bc: da:a8:84:c9:8a:e3:9c:da:e5:dd:e5:7a:a3:d2:95:dc:ba:2d: dd:73:c2:6b:ed:d8:31:89:f2:00:6d:94:4a:e6:ce:f4:68:e7: 61:63:9c:b7:26:a3:1c:d0:28:9d:e4:dd:b1:ee:a3:ff:4f:21: ad:0c:ef:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUwNDE3MDQzODQ0WhcNMjUwNDI0MDQzODQ0WjAYMRYwFAYD VQQDEw02ODAwODVkNC05NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLbVpCaIxY7htmv4k6Xa1MdFUM7nhmuEResitU6KGsyUkqi4uHz9B+xq5TFz rPiCOr8YiXgI4ZeBuk9ceddNPWFk+Xr7R5m5V/28ctBqAir6/j1Fa93HlRoColAv oCi8ccJKKhJrSGjq11Tgd0uQgx86yfaNleAlWwsC35R0Zlsg6Xr3OfAB69r1w5vd IkeZmqcWbrfly1uVfZb6Gkj3iQxxQqiEUIBlNyChaKGZwmHHljnb+S1mfxoBaj1A Zily/jmUNTsRyt6VEIrv92ODYblwoaZfz+P139SCB4G6E+YDgNL3TKJ+IviMmBI0 sVpYDXvcmExTNjYGeLG1cT7wawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC6W3Ck O3esWtMn9yFCuiXh3w+VMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDdLJRCH5ZxxmQT9RDqpPXs5WS0qIWvAyNCdKy5poF8AcskW+/qtjf 9aJOLYqdHlwXMkxrISIdJaTfbfVEJItASqtNNMCJ+3Cp3YiGqiMhpbMiskx6+AUQ maOP8RyFeHqT/wrB3sARGbCAzhVg4rRoaqnXWoaz9RC+HsLaf2dqdb38WZil8FPD eYV6z/MzGgyPcB3AhvY+tXv8Ozdv316Se54kzIQW9CV3HCqnsdwvg3gQAhyEFQ8D x+LDBXtV0286h7egvbzaqITJiuOc2uXd5Xqj0pXcui3dc8Jr7dgxifIAbZRK5s70 aOdhY5y3JqMc0Cid5N2x7qP/TyGtDO/m -----END CERTIFICATE-----Generated at Sat Apr 19 00:58:32 2025 by rpki-client