$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: UQTY88CXePl8cRBqcY/hahBCddZ8d8oxFSO+JYU5Imk= Subject key identifier: 50:45:60:93:DD:8C:F4:7D:F0:71:3C:28:E7:B8:C0:1C:0B:23:6F:87 Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 3612 Signing time: Fri 30 May 2025 16:09:48 +0000 Manifest this update: Fri 30 May 2025 16:09:48 +0000 Manifest next update: Fri 06 Jun 2025 16:09:48 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: WPrO/BjYTiVXKxploWHLHpociL4ZkD1JXsw/FSn47ME=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: +veyd8W47YCvCuitg3o8ThOGXu4XRgXC3k1LgL4ZMH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: May 30 16:09:48 2025 GMT Not After : Jun 6 16:09:48 2025 GMT Subject: CN=6839d84c-3233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:e8:0d:16:df:77:0e:2a:21:24:00:89:2f: 52:f2:72:28:86:67:47:29:9b:a0:26:4e:cc:31:94: 19:66:a6:89:b2:f1:fb:21:dc:71:f2:3b:a4:42:54: 0b:56:f3:49:c4:be:89:e0:bd:60:20:53:42:03:c5: c6:be:26:00:43:f7:c6:a6:91:2f:69:70:45:65:ec: 84:8c:26:1e:7b:9c:3a:ac:0d:94:82:f0:cc:eb:d6: 64:05:bc:df:10:ef:91:ec:9c:ed:61:54:4b:ed:d3: b1:9f:7e:24:06:7d:fe:aa:95:f5:55:38:6e:34:5d: ec:57:25:32:b7:98:91:84:63:32:b8:fd:a8:ed:3b: f9:c6:5c:6e:dc:98:65:0f:20:29:2a:78:09:65:1f: 96:db:8a:dc:db:35:2f:98:e0:e0:3e:c0:7e:a3:1b: 0f:e4:54:c6:3c:9a:82:fe:4e:26:18:62:a1:63:bf: 77:1c:a1:61:cc:c3:69:e9:b6:de:30:64:64:b1:12: 18:17:fb:43:a0:ac:7e:20:8c:f1:e8:0b:87:16:60: 5e:7b:eb:7e:0c:53:fa:10:ef:51:15:c9:7e:be:6c: 96:a1:5c:a9:7c:46:b6:48:08:7d:0d:92:f5:cb:cb: 55:6b:25:dd:3b:05:35:e7:1f:d6:4a:3e:3e:2c:f0: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:45:60:93:DD:8C:F4:7D:F0:71:3C:28:E7:B8:C0:1C:0B:23:6F:87 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ec:9e:16:19:df:c5:73:aa:1c:c7:03:75:ef:ee:f8:01:83: 43:dc:58:a9:c5:15:c0:ad:4f:f9:a5:e0:de:f0:97:43:f2:0b: 02:4a:0b:ad:c1:f7:93:43:05:a0:b2:ea:a2:66:16:db:da:98: c4:08:eb:18:1e:a4:1f:c1:51:1c:8d:8c:3d:94:ac:a0:5d:0b: 19:f8:5d:56:0a:52:50:85:2d:20:8f:45:61:db:ea:dd:15:3e: e6:28:65:c1:da:39:13:31:86:ac:75:88:a7:79:4c:8a:f7:4b: ed:b2:22:43:0a:22:85:31:f8:cd:e9:ff:4c:a1:b4:15:af:e7: 34:aa:d4:ec:44:53:dc:c0:4c:a0:ba:d8:58:39:1c:4a:af:00: df:3a:f5:d3:e0:0b:3f:d4:89:bd:f6:48:99:c9:6e:b7:3c:04: 19:00:65:22:32:3e:27:f1:94:4a:e8:48:bb:ef:0c:ff:16:0a: 52:b3:7c:80:a6:58:31:19:a7:73:00:c5:08:28:7e:96:23:ea: 28:1c:1f:e3:af:e2:60:1b:9c:f8:d5:26:d7:86:b7:1f:38:b6: 75:d3:1b:66:d2:2e:f6:6a:9f:67:20:fc:29:02:a9:88:87:2c: 44:a8:c5:67:3c:1c:c7:94:9a:ce:69:75:77:66:25:a1:8f:be: d2:a1:11:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNTMwMTYwOTQ4WhcNMjUwNjA2MTYwOTQ4WjAYMRYwFAYD VQQDEw02ODM5ZDg0Yy0zMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV3oDRbfdw4qISQAiS9S8nIohmdHKZugJk7MMZQZZqaJsvH7Idxx8jukQlQL VvNJxL6J4L1gIFNCA8XGviYAQ/fGppEvaXBFZeyEjCYee5w6rA2UgvDM69ZkBbzf EO+R7JztYVRL7dOxn34kBn3+qpX1VThuNF3sVyUyt5iRhGMyuP2o7Tv5xlxu3Jhl DyApKngJZR+W24rc2zUvmODgPsB+oxsP5FTGPJqC/k4mGGKhY793HKFhzMNp6bbe MGRksRIYF/tDoKx+IIzx6AuHFmBee+t+DFP6EO9RFcl+vmyWoVypfEa2SAh9DZL1 y8tVayXdOwU15x/WSj4+LPC5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBFYJPd jPR98HE8KOe4wBwLI2+HMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM7J4WGd/Fc6ocxwN17+74AYND3FipxRXArU/5peDe8JdD8gsCSgut wfeTQwWgsuqiZhbb2pjECOsYHqQfwVEcjYw9lKygXQsZ+F1WClJQhS0gj0Vh2+rd FT7mKGXB2jkTMYasdYineUyK90vtsiJDCiKFMfjN6f9MobQVr+c0qtTsRFPcwEyg uthYORxKrwDfOvXT4As/1Im99kiZyW63PAQZAGUiMj4n8ZRK6Ei77wz/FgpSs3yA plgxGadzAMUIKH6WI+ooHB/jr+JgG5z41SbXhrcfOLZ10xtm0i72ap9nIPwpAqmI hyxEqMVnPBzHlJrOaXV3ZiWhj77SoRGm -----END CERTIFICATE-----Generated at Sat May 31 16:52:16 2025 by rpki-client