$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: Wx2zTYGaaBcsJE7Qq8VlNCIlhbcOXcbdilhdztRMtlI= Subject key identifier: F2:92:5C:77:B5:A3:17:17:1C:E2:C7:B8:EA:9F:D1:08:85:ED:F3:76 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 8D Signing time: Mon 02 Jun 2025 14:24:04 +0000 Manifest this update: Mon 02 Jun 2025 14:24:04 +0000 Manifest next update: Mon 09 Jun 2025 14:24:04 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: enSkbjJL6V+q1BvG2SxfCC/ufe300SeluSkbcyYQza0=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Jun 2 14:24:04 2025 GMT Not After : Jun 9 14:24:04 2025 GMT Subject: CN=683db404-bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:82:17:0c:d8:fc:15:57:70:b3:d6:9a:d8: c5:67:35:d5:cb:81:45:4a:5d:aa:3f:43:4e:a0:e3: cb:d4:00:9a:f0:b8:26:c9:8c:f4:04:82:c4:ce:b7: d4:d7:59:f8:c1:d3:f6:1f:a1:a0:72:29:20:ea:25: 8e:6e:7d:4a:6c:d5:09:bc:e1:45:4c:5a:63:2a:f1: b3:71:8b:9c:70:87:c7:2a:5e:f4:d0:d7:a2:30:8d: ff:59:f3:9e:6f:33:c9:43:43:12:e3:28:22:80:21: 9e:05:f2:13:51:65:ba:43:2d:a3:c3:01:0f:c5:c7: de:db:af:b9:e9:96:04:e7:f6:cd:74:79:85:73:4f: e0:c7:85:2a:86:d2:14:06:45:68:c0:77:32:62:f9: a7:41:e1:d7:a2:6d:23:fc:e9:22:77:0f:d5:4d:3d: 3d:38:ec:1f:6a:f8:20:0a:80:e6:22:55:97:28:fb: 12:03:b3:ae:e5:6c:2b:7c:2c:77:ee:fd:af:83:4e: 8a:e5:ee:59:07:c6:ed:74:44:de:f7:81:36:00:1e: 4e:bd:8d:f6:36:ac:4b:b7:a8:2a:a8:06:d9:05:45: 40:b9:7b:5e:0c:1d:92:eb:61:e3:53:5a:c7:9e:f1: 38:e7:e5:17:41:c9:de:86:54:98:f1:2f:d1:16:44: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:5C:77:B5:A3:17:17:1C:E2:C7:B8:EA:9F:D1:08:85:ED:F3:76 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0b:d3:c0:c8:72:5e:24:1f:2b:ec:88:16:15:b8:a5:f7:a8: 8c:2e:3c:e8:3c:5f:11:c0:57:c2:c8:79:7d:06:5f:a9:bd:50: 7b:ea:a8:90:8f:fe:bf:14:7b:37:14:53:e7:a0:03:45:ae:fa: ef:ad:60:61:68:88:f4:42:54:50:96:77:8d:c5:4f:17:87:e3: 23:b5:0b:c0:94:cc:70:2c:b0:83:3f:eb:19:83:56:d7:71:76: a2:7a:7a:27:b0:ee:5c:c6:70:1f:9a:a7:91:56:8c:e2:7d:bf: ec:2f:7a:95:a2:d4:5a:19:40:52:a9:e4:6c:39:d2:03:7e:15: 9c:5b:a2:90:2c:d5:82:2b:c6:c5:ab:f5:61:c4:7a:b3:a2:f7: 51:2e:fc:ea:32:97:96:33:87:12:5e:f3:8f:1d:be:4f:b6:77: 8c:13:27:18:ac:a6:ec:5d:0c:85:c3:69:2d:55:32:d7:cc:4a: 56:96:f6:1b:ec:2e:bf:28:ae:36:90:d6:f9:fe:fa:8e:32:66: c1:3d:2e:fb:39:59:81:85:fb:bf:a9:20:ae:50:85:82:71:87: 6d:62:18:b8:2c:fa:85:e6:18:37:1d:4f:f4:d7:b4:93:bb:71: e3:1d:f8:7d:90:54:89:65:44:16:6a:23:15:6a:12:f8:a3:39: 2e:bd:c8:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwNjAyMTQyNDA0WhcNMjUwNjA5MTQyNDA0WjAYMRYwFAYD VQQDEw02ODNkYjQwNC1iY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysKCFwzY/BVXcLPWmtjFZzXVy4FFSl2qP0NOoOPL1ACa8LgmyYz0BILEzrfU 11n4wdP2H6Ggcikg6iWObn1KbNUJvOFFTFpjKvGzcYuccIfHKl700NeiMI3/WfOe bzPJQ0MS4ygigCGeBfITUWW6Qy2jwwEPxcfe26+56ZYE5/bNdHmFc0/gx4UqhtIU BkVowHcyYvmnQeHXom0j/Okidw/VTT09OOwfavggCoDmIlWXKPsSA7Ou5WwrfCx3 7v2vg06K5e5ZB8btdETe94E2AB5OvY32NqxLt6gqqAbZBUVAuXteDB2S62HjU1rH nvE45+UXQcnehlSY8S/RFkRoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKSXHe1 oxcXHOLHuOqf0QiF7fN2MB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDC9PAyHJeJB8r7IgWFbil96iMLjzoPF8RwFfCyHl9Bl+pvVB76qiQ j/6/FHs3FFPnoANFrvrvrWBhaIj0QlRQlneNxU8Xh+MjtQvAlMxwLLCDP+sZg1bX cXaienonsO5cxnAfmqeRVozifb/sL3qVotRaGUBSqeRsOdIDfhWcW6KQLNWCK8bF q/VhxHqzovdRLvzqMpeWM4cSXvOPHb5PtneMEycYrKbsXQyFw2ktVTLXzEpWlvYb 7C6/KK42kNb5/vqOMmbBPS77OVmBhfu/qSCuUIWCcYdtYhi4LPqF5hg3HU/017ST u3HjHfh9kFSJZUQWaiMVahL4ozkuvchs -----END CERTIFICATE-----Generated at Mon Jun 2 18:42:59 2025 by rpki-client