$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: dl9eszAhSanyvqWL5RfVwacIsKpjCRKrvXYZfKdVbxk= Subject key identifier: 21:EC:B6:8B:E8:D3:09:F8:06:C3:6D:E0:65:74:29:6E:B4:65:8C:3B Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0CEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0CD9 Signing time: Fri 04 Apr 2025 18:14:39 +0000 Manifest this update: Fri 04 Apr 2025 18:14:38 +0000 Manifest next update: Fri 11 Apr 2025 18:14:38 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: 08GgqX1gDEozHLU2DpFE6LfSEtInvZ4fBogG6P9viBc=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: /DiL7fsaC6fY9lff2JZZK7Yh+rRZRWI9dVgzlNELU4U=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: DjLvleFkqk2UcBaYlPkFuqLKT/dYJjEENGItR2OkX0A=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: bSOKtCqELVOl/SRyiuzpOoESsu/f4pkne0nYfp2NKDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7 Validity Not Before: Apr 4 18:14:38 2025 GMT Not After : Apr 11 18:14:38 2025 GMT Subject: CN=67f0218f-4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:c3:18:af:e2:eb:27:99:1b:ba:89:e7:d3: 19:de:42:62:4c:6a:72:e8:57:4a:f4:9e:15:08:e7: 20:54:2e:e7:1f:d8:88:c0:f8:68:cc:74:00:4a:b4: ae:b3:67:c2:30:e9:6d:9c:da:76:ca:53:6e:d1:9a: c7:31:5c:62:59:e3:95:a9:29:b7:b1:63:00:57:77: 5d:c8:69:5b:24:7d:71:d7:95:49:58:be:8c:af:72: 14:83:c2:8b:1e:67:85:a0:32:85:ed:6c:e1:53:00: ac:ff:5a:73:17:37:f0:a9:61:0e:6d:15:69:37:66: 40:37:e2:d1:93:66:94:bd:76:86:8f:14:53:f6:0b: ec:93:82:b2:8b:3e:88:95:11:70:8b:d8:fa:e5:1e: 18:54:17:bd:0f:18:d8:66:d0:5d:f3:8a:e1:ad:0f: a3:82:6e:70:9d:47:c2:f1:1b:56:5e:ff:9f:a5:14: 5d:6b:3f:21:c0:cb:f1:d8:2c:8e:94:bf:66:79:0c: 9d:19:11:b5:9f:7b:ee:e0:2a:6d:89:fc:e3:f5:3b: d5:09:22:c9:54:71:be:41:3b:52:56:e8:34:1f:d3: 71:c1:7a:43:b0:c2:b8:07:39:9b:7b:51:e2:98:0b: ac:cc:97:08:4c:3b:9e:f4:2b:56:65:fd:da:50:5a: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:B6:8B:E8:D3:09:F8:06:C3:6D:E0:65:74:29:6E:B4:65:8C:3B X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b1:68:80:9c:c6:79:4b:9d:c5:98:09:03:4e:20:8e:59:e0: 0d:de:83:50:45:1d:0b:52:23:85:3d:1d:07:58:18:f1:9c:26: 92:ac:75:76:fb:bc:f6:e4:c1:6a:a4:e1:60:32:26:e3:57:64: ec:12:b5:3f:e5:5c:7b:56:13:77:93:6b:96:07:9e:bb:ad:7f: 92:42:c6:d0:9c:d9:b3:05:ba:45:64:76:6c:f0:be:fa:d2:c4: 45:12:60:b2:86:81:77:2a:8c:83:7a:d1:47:b5:36:3c:52:20: 02:da:42:02:bf:ee:90:e5:f5:8b:17:10:cc:b1:22:e8:0e:60: 1f:62:fb:a9:a5:48:4d:ec:bf:86:be:ab:37:2c:59:df:c1:08: 55:bd:03:f6:d5:1b:d8:8e:80:44:65:71:59:e8:d0:95:63:44: a8:90:67:aa:3e:d3:8b:47:1d:17:34:e2:52:37:30:b3:fd:5b: 88:e4:16:57:bb:db:bd:0a:a8:5b:9e:b0:7b:15:73:71:b1:77: db:2c:41:d2:3b:f2:3f:ff:56:db:9c:4d:06:93:a9:18:23:80: 1a:02:06:ed:ae:e0:69:56:20:8a:e9:f9:c6:dc:ff:58:11:d1: 9d:32:55:7f:b8:87:30:64:e0:e3:59:17:01:c1:8d:62:6e:c2: f3:75:79:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUwNDA0MTgxNDM4WhcNMjUwNDExMTgxNDM4WjAYMRYwFAYD VQQDEw02N2YwMjE4Zi00YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bbDGK/i6yeZG7qJ59MZ3kJiTGpy6FdK9J4VCOcgVC7nH9iIwPhozHQASrSu s2fCMOltnNp2ylNu0ZrHMVxiWeOVqSm3sWMAV3ddyGlbJH1x15VJWL6Mr3IUg8KL HmeFoDKF7WzhUwCs/1pzFzfwqWEObRVpN2ZAN+LRk2aUvXaGjxRT9gvsk4Kyiz6I lRFwi9j65R4YVBe9DxjYZtBd84rhrQ+jgm5wnUfC8RtWXv+fpRRdaz8hwMvx2CyO lL9meQydGRG1n3vu4Cptifzj9TvVCSLJVHG+QTtSVug0H9NxwXpDsMK4Bzmbe1Hi mAuszJcITDue9CtWZf3aUFr9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHstovo 0wn4BsNt4GV0KW60ZYw7MB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNsWiAnMZ5S53FmAkDTiCOWeAN3oNQRR0LUiOFPR0HWBjxnCaSrHV2 +7z25MFqpOFgMibjV2TsErU/5Vx7VhN3k2uWB567rX+SQsbQnNmzBbpFZHZs8L76 0sRFEmCyhoF3KoyDetFHtTY8UiAC2kICv+6Q5fWLFxDMsSLoDmAfYvuppUhN7L+G vqs3LFnfwQhVvQP21RvYjoBEZXFZ6NCVY0SokGeqPtOLRx0XNOJSNzCz/VuI5BZX u9u9CqhbnrB7FXNxsXfbLEHSO/I//1bbnE0Gk6kYI4AaAgbtruBpViCK6fnG3P9Y EdGdMlV/uIcwZODjWRcBwY1ibsLzdXlP -----END CERTIFICATE-----Generated at Sat Apr 5 05:45:48 2025 by rpki-client