$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: cTx50F3BjGN/CWiY+nQryj6uZgPpHWX9WWL/sU4VL3I= Subject key identifier: 20:47:E1:D5:C5:EE:6A:55:5D:5B:BC:F3:ED:EF:4B:67:C7:28:C4:1F Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 01A7 Signing time: Sat 31 May 2025 02:56:21 +0000 Manifest this update: Sat 31 May 2025 02:56:20 +0000 Manifest next update: Sat 07 Jun 2025 02:56:20 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: THgYMIzWJTtSAHJ0lU55phnLL1Y/S3Ks9lhCUjD1SWI=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: May 31 02:56:20 2025 GMT Not After : Jun 7 02:56:20 2025 GMT Subject: CN=683a6fd4-7aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:20:ba:5e:a8:08:09:7d:80:bc:98:f2:05: 95:82:0b:69:57:c9:ca:be:d8:3b:d2:6d:5f:9f:44: ac:3e:00:2a:65:7c:ee:0c:79:10:a4:fb:e8:c4:5a: 05:81:3d:86:50:96:6e:c9:59:35:e6:e2:13:d2:bf: 90:6b:ff:58:c6:93:0a:01:55:b8:14:d4:00:0f:51: b0:a4:e2:02:97:bf:58:22:46:90:b1:80:38:89:92: ff:f0:69:fa:c0:60:c5:e7:2c:c6:d9:47:f5:89:fb: 26:e4:47:19:a9:a7:7f:a9:52:2a:12:01:a0:71:32: 21:b5:44:a5:6d:1c:2b:fc:37:76:fa:b5:72:9b:e0: 84:94:4b:c6:87:06:c0:41:8a:b8:8c:00:5f:fa:7a: ff:b9:44:93:9f:4e:e9:b7:50:13:c5:e8:4a:82:80: 44:52:5a:da:23:4d:da:72:ab:25:af:f3:2a:e1:f9: 77:3e:ce:61:c8:99:0a:f3:28:cc:96:69:51:6f:4b: 5d:75:1b:e2:ed:a7:84:ef:3b:82:33:23:a3:a3:68: 74:16:c3:a1:19:f2:50:a2:73:01:5a:e2:02:54:5d: 24:d4:2d:47:53:bf:8a:9d:92:84:8b:b0:4c:56:0f: 31:95:cf:7a:7f:ae:1e:71:82:41:28:70:18:c2:19: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:E1:D5:C5:EE:6A:55:5D:5B:BC:F3:ED:EF:4B:67:C7:28:C4:1F X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:44:11:20:5e:51:c6:19:30:18:3f:d1:3d:4b:5f:a4:80:c1: 17:62:d3:96:8b:74:68:0c:71:d5:85:64:6e:c3:24:51:a9:f6: 77:be:83:f6:1d:8d:ff:57:72:fb:5c:26:0c:e4:8c:b1:ae:d8: 99:73:60:86:cd:01:21:d5:ce:3f:37:13:ff:97:8a:a1:f0:6c: 9a:40:af:48:a7:f3:c5:eb:59:c3:11:e5:21:3d:be:61:58:c1: db:38:07:05:b3:c8:4c:21:a7:0e:e9:9e:f9:73:6f:57:2f:45: 75:16:52:d0:04:4a:c7:76:04:da:ef:38:e7:59:e3:95:80:99: 78:6a:87:75:08:05:5c:48:d9:b3:68:99:a4:42:10:4d:d0:c1: 07:6b:b7:3f:83:d0:77:23:43:bc:61:50:56:e4:20:00:c8:6b: 5d:48:97:38:3b:52:47:05:32:e9:d4:8a:96:52:15:c9:d6:8a: ac:45:f9:39:c9:e2:eb:b5:d2:13:10:08:21:21:0a:ca:30:3d: 2d:f3:13:fe:23:fb:6e:73:63:a8:b4:2c:48:e4:6f:6b:7f:23: c4:57:f4:fc:35:63:b2:af:2a:47:56:8a:18:97:6a:12:90:04: cd:2e:b8:83:38:05:3f:57:b3:ec:c2:12:45:a2:31:2c:8c:4a: e3:e6:07:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwNTMxMDI1NjIwWhcNMjUwNjA3MDI1NjIwWjAYMRYwFAYD VQQDEw02ODNhNmZkNC03YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ0gul6oCAl9gLyY8gWVggtpV8nKvtg70m1fn0SsPgAqZXzuDHkQpPvoxFoF gT2GUJZuyVk15uIT0r+Qa/9YxpMKAVW4FNQAD1GwpOICl79YIkaQsYA4iZL/8Gn6 wGDF5yzG2Uf1ifsm5EcZqad/qVIqEgGgcTIhtUSlbRwr/Dd2+rVym+CElEvGhwbA QYq4jABf+nr/uUSTn07pt1ATxehKgoBEUlraI03acqslr/Mq4fl3Ps5hyJkK8yjM lmlRb0tddRvi7aeE7zuCMyOjo2h0FsOhGfJQonMBWuICVF0k1C1HU7+KnZKEi7BM Vg8xlc96f64ecYJBKHAYwhk/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBH4dXF 7mpVXVu88+3vS2fHKMQfMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYRBEgXlHGGTAYP9E9S1+kgMEXYtOWi3RoDHHVhWRuwyRRqfZ3voP2 HY3/V3L7XCYM5IyxrtiZc2CGzQEh1c4/NxP/l4qh8GyaQK9Ip/PF61nDEeUhPb5h WMHbOAcFs8hMIacO6Z75c29XL0V1FlLQBErHdgTa7zjnWeOVgJl4aod1CAVcSNmz aJmkQhBN0MEHa7c/g9B3I0O8YVBW5CAAyGtdSJc4O1JHBTLp1IqWUhXJ1oqsRfk5 yeLrtdITEAghIQrKMD0t8xP+I/tuc2OotCxI5G9rfyPEV/T8NWOyrypHVooYl2oS kATNLriDOAU/V7PswhJFojEsjErj5gc5 -----END CERTIFICATE-----Generated at Sat May 31 17:37:48 2025 by rpki-client