$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: GCffB5GyT5pzm5hmwevNuKPguJpeLhxJwjI9zP1G4Bw= Subject key identifier: A4:7B:62:BA:17:73:D2:9A:FE:59:7F:DA:A1:E4:9C:92:56:A5:8B:82 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F52 Signing time: Fri 30 May 2025 17:48:20 +0000 Manifest this update: Fri 30 May 2025 17:48:19 +0000 Manifest next update: Fri 06 Jun 2025 17:48:19 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: sK5bf4CtFf8nUe10xOM/G0LTVn+Iou9frzDvAY8Yv7s=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3954 (0xf72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: May 30 17:48:19 2025 GMT Not After : Jun 6 17:48:19 2025 GMT Subject: CN=6839ef64-673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:99:51:d5:de:3c:b1:36:07:59:bd:db:e0: 03:14:4d:4b:1b:d6:ba:e9:8e:ac:9d:94:c0:a3:52: d0:e8:da:04:8d:f7:58:fa:60:1a:10:23:7d:00:6d: b6:c1:29:bc:69:d8:b5:d8:87:e4:76:f5:e9:0c:c2: 06:61:b0:f4:dd:bb:e2:cb:f1:d1:a3:bc:92:86:ac: 9c:c6:d8:a4:bc:be:1b:48:82:17:e7:34:9e:67:0e: 0c:25:9c:3b:c5:2d:37:ff:b1:b4:4c:80:73:f8:bf: 16:8a:75:2e:68:5b:cf:a8:47:42:da:d7:d0:8e:4d: 56:01:d0:fa:a6:66:a1:3b:a0:d3:4b:37:51:63:89: 13:23:61:75:a0:65:31:37:6c:77:70:b6:77:e4:03: 0f:df:36:37:55:df:e0:17:1b:ec:14:7c:bf:47:bc: 17:ca:9f:d8:db:26:ae:f1:2c:5f:f6:29:8d:b9:84: c9:25:2d:6f:fd:1d:b4:d2:7b:86:39:cf:e6:3a:1a: 61:2f:d9:9f:4c:7e:cf:0b:8b:e2:bd:9a:d4:60:52: 38:11:63:ae:d8:e4:39:c4:a1:8f:5f:47:51:01:6a: cd:75:00:e4:18:6a:ca:4b:37:b6:06:4b:e6:de:fd: 85:19:ff:8c:b0:e1:63:17:0c:7e:7a:ae:9d:1e:8e: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:62:BA:17:73:D2:9A:FE:59:7F:DA:A1:E4:9C:92:56:A5:8B:82 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:18:66:e0:2a:13:f8:fe:c4:16:2d:a0:03:e6:2c:08:6b: 39:9b:40:86:9a:c0:c7:8a:ae:b2:56:c3:78:05:2f:99:13:a3: 9b:f6:03:87:b4:7b:fa:a7:5f:fe:b6:cf:0c:4e:a5:b7:68:47: b1:19:18:c8:ca:41:9b:2a:ec:15:02:ec:e6:63:87:49:66:8d: 62:94:70:82:56:80:58:99:14:70:1a:f7:8b:58:a9:a9:02:a9: 06:d9:5d:64:95:52:88:c7:ac:b8:aa:f7:80:e0:2a:fb:13:55: 42:36:bd:a0:b7:34:d6:00:76:6c:ec:e9:3f:56:2b:93:7f:ae: e1:73:fe:17:31:79:69:32:09:e2:a3:02:ae:ac:21:98:1a:ee: 90:0f:f2:7e:fd:b6:63:00:78:d2:db:d9:0b:dd:2a:65:50:86: b0:15:59:77:a1:4a:0b:09:90:9a:0f:4f:a1:c2:62:68:c1:1b: db:e0:19:17:c5:e5:08:fe:34:32:db:29:56:98:82:53:cb:fe: ea:23:b1:14:f4:9a:4f:65:7e:7f:1a:03:1f:1d:43:a9:a8:74: 8b:f8:a5:75:0d:10:76:e5:42:d6:38:89:5d:29:3c:ad:38:37: 70:b7:07:7f:64:38:14:1d:f4:6d:0b:5e:3b:95:53:c1:3f:a8: 4e:10:74:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwNTMwMTc0ODE5WhcNMjUwNjA2MTc0ODE5WjAYMRYwFAYD VQQDEw02ODM5ZWY2NC02NzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP+ZUdXePLE2B1m92+ADFE1LG9a66Y6snZTAo1LQ6NoEjfdY+mAaECN9AG22 wSm8adi12IfkdvXpDMIGYbD03bviy/HRo7yShqycxtikvL4bSIIX5zSeZw4MJZw7 xS03/7G0TIBz+L8WinUuaFvPqEdC2tfQjk1WAdD6pmahO6DTSzdRY4kTI2F1oGUx N2x3cLZ35AMP3zY3Vd/gFxvsFHy/R7wXyp/Y2yau8Sxf9imNuYTJJS1v/R200nuG Oc/mOhphL9mfTH7PC4vivZrUYFI4EWOu2OQ5xKGPX0dRAWrNdQDkGGrKSze2Bkvm 3v2FGf+MsOFjFwx+eq6dHo52lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKR7YroX c9Ka/ll/2qHknJJWpYuCMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8jxhm4CoT+P7EFi2gA+YsCGs5m0CGmsDHiq6yVsN4BS+ZE6Ob9gOH tHv6p1/+ts8MTqW3aEexGRjIykGbKuwVAuzmY4dJZo1ilHCCVoBYmRRwGveLWKmp AqkG2V1klVKIx6y4qveA4Cr7E1VCNr2gtzTWAHZs7Ok/ViuTf67hc/4XMXlpMgni owKurCGYGu6QD/J+/bZjAHjS29kL3SplUIawFVl3oUoLCZCaD0+hwmJowRvb4BkX xeUI/jQy2ylWmIJTy/7qI7EU9JpPZX5/GgMfHUOpqHSL+KV1DRB25ULWOIldKTyt ODdwtwd/ZDgUHfRtC147lVPBP6hOEHRb -----END CERTIFICATE-----Generated at Sat May 31 17:07:43 2025 by rpki-client