$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: MgWVQnINDP49DdOqr1vbgiXHWRLLmnZN8QevxgfZI3s= Subject key identifier: FD:25:F2:A6:BD:2D:CB:59:AE:19:D5:1E:8E:66:0D:67:E9:DB:4C:38 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0936 Signing time: Fri 30 May 2025 20:57:09 +0000 Manifest this update: Fri 30 May 2025 20:57:09 +0000 Manifest next update: Fri 06 Jun 2025 20:57:09 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: UVXpfxXi7amMS2s82pz/j/B+QBtBb1K+1YnfDhZegNI=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: May 30 20:57:09 2025 GMT Not After : Jun 6 20:57:09 2025 GMT Subject: CN=683a1ba5-9318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:a3:f7:d5:70:99:de:d4:44:3f:30:1e:93: f3:f5:06:e3:28:bf:4e:85:52:bb:83:7b:21:84:9e: 94:29:98:7c:1f:55:af:17:b4:94:96:62:61:c3:f0: aa:46:cf:de:02:fa:79:21:f7:28:cf:52:d7:5e:ff: c1:c4:01:fb:c4:0a:9b:37:6c:d5:23:18:10:d5:80: 6f:ec:2c:ec:ad:44:65:75:52:63:61:10:4e:1b:48: 0b:55:b9:54:db:94:2f:e6:14:41:9d:48:4a:8c:61: fc:2b:61:fe:48:d8:18:e9:55:eb:0d:12:95:10:6b: ae:29:b5:ae:d4:9f:49:c7:0b:ea:0d:62:61:6b:5d: 9a:63:a6:69:46:cf:22:2e:0e:2e:84:f7:57:7a:8b: d4:4e:d6:c5:f8:55:b6:c7:1d:e4:84:a8:dd:4d:f1: 30:1f:bb:bc:ea:f3:f2:c7:94:87:d8:58:f3:9b:49: 76:79:f4:80:af:de:c9:87:19:5a:ae:4a:4c:dd:58: 4a:f9:fb:50:b3:0c:6e:8d:ee:83:28:9b:86:29:57: df:7f:a1:82:1b:0d:76:5d:f9:2b:45:e1:00:d3:0a: 3d:ec:10:f8:f4:36:9f:a5:31:63:fc:97:17:af:6d: 2a:93:de:d1:80:00:c9:f9:49:f3:35:46:2a:c1:ff: eb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:25:F2:A6:BD:2D:CB:59:AE:19:D5:1E:8E:66:0D:67:E9:DB:4C:38 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:eb:d4:86:c5:67:d8:d5:d9:85:2a:7e:16:e5:3c:7d:2c:72: ba:49:ff:92:57:99:34:46:41:73:fd:52:ef:d0:d9:20:a2:41: fe:47:4a:f8:ad:e5:aa:7c:66:ed:ba:8b:cb:9e:d0:b3:3f:13: e5:aa:3f:17:d1:5e:55:9f:53:f6:51:ab:8d:25:cd:8e:2e:d8: a1:c0:03:19:35:fd:0e:2f:b5:29:07:81:b3:84:d7:74:7d:fc: bb:c4:22:4c:91:ed:a9:3f:8e:2b:79:9f:d1:8f:09:a9:6d:fe: 38:52:19:e6:bd:e7:86:e6:d4:97:d2:d6:77:1a:6c:3b:52:40: 4f:4e:31:83:f5:da:0a:0d:7e:db:5a:78:0b:8a:16:1a:af:84: ca:07:50:8f:3b:d8:c4:3e:7d:56:fd:cb:ea:c5:bb:63:e2:d4: f2:01:66:fa:45:d8:d7:74:29:67:a0:5c:66:57:e4:c9:bd:62: 57:f2:73:0e:58:18:02:b4:9a:8b:57:5d:7c:03:49:09:ca:93: fa:6f:37:1d:2c:58:ad:38:95:d0:82:ca:36:c7:12:ce:af:1d: 8c:fc:8a:57:45:66:1d:a3:f9:a0:a5:47:f7:e7:e7:8f:e2:37: 3f:4e:22:ee:12:f1:ac:73:1a:f5:4c:32:34:57:de:53:20:15: 21:9a:98:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNTMwMjA1NzA5WhcNMjUwNjA2MjA1NzA5WjAYMRYwFAYD VQQDEw02ODNhMWJhNS05MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAml2j99Vwmd7URD8wHpPz9QbjKL9OhVK7g3shhJ6UKZh8H1WvF7SUlmJhw/Cq Rs/eAvp5Ifcoz1LXXv/BxAH7xAqbN2zVIxgQ1YBv7CzsrURldVJjYRBOG0gLVblU 25Qv5hRBnUhKjGH8K2H+SNgY6VXrDRKVEGuuKbWu1J9JxwvqDWJha12aY6ZpRs8i Lg4uhPdXeovUTtbF+FW2xx3khKjdTfEwH7u86vPyx5SH2Fjzm0l2efSAr97Jhxla rkpM3VhK+ftQswxuje6DKJuGKVfff6GCGw12XfkrReEA0wo97BD49DafpTFj/JcX r20qk97RgADJ+UnzNUYqwf/rNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0l8qa9 LctZrhnVHo5mDWfp20w4MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY69SGxWfY1dmFKn4W5Tx9LHK6Sf+SV5k0RkFz/VLv0NkgokH+R0r4 reWqfGbtuovLntCzPxPlqj8X0V5Vn1P2UauNJc2OLtihwAMZNf0OL7UpB4GzhNd0 ffy7xCJMke2pP44reZ/Rjwmpbf44UhnmveeG5tSX0tZ3Gmw7UkBPTjGD9doKDX7b WngLihYar4TKB1CPO9jEPn1W/cvqxbtj4tTyAWb6RdjXdClnoFxmV+TJvWJX8nMO WBgCtJqLV118A0kJypP6bzcdLFitOJXQgso2xxLOrx2M/IpXRWYdo/mgpUf35+eP 4jc/TiLuEvGscxr1TDI0V95TIBUhmpgr -----END CERTIFICATE-----Generated at Sat May 31 16:56:10 2025 by rpki-client