$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: /bBV252Sd64cQJNuv80fQafOZHDgJsbtVyEfU+hPkt4= Subject key identifier: 90:EE:69:26:F3:F5:16:68:3D:DC:78:F7:F3:87:19:7A:FC:76:7A:6C Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0431 Signing time: Sat 31 May 2025 00:32:38 +0000 Manifest this update: Sat 31 May 2025 00:32:38 +0000 Manifest next update: Sat 07 Jun 2025 00:32:38 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: ooN2wKv238ZdoHPwfSrhGjxSdko9NlhB7H6Ed/tmohA=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: May 31 00:32:38 2025 GMT Not After : Jun 7 00:32:38 2025 GMT Subject: CN=683a4e26-22ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:f4:1e:60:de:f4:59:0c:4f:bd:c1:57:fa: 56:69:36:93:c2:51:10:fe:26:8b:03:ca:81:9f:23: c8:a8:06:32:d4:0a:aa:d6:d6:45:d9:83:5e:55:4b: 03:c7:24:14:90:1a:60:6c:ee:24:e5:cb:f6:9e:8b: dd:2a:28:89:49:17:34:f4:93:65:37:b5:ba:08:df: 31:ec:f2:b4:3c:80:ae:bd:80:1b:0f:67:f0:25:7f: 5d:c3:0c:4e:1b:2e:4d:8c:61:ba:5a:24:cc:5b:58: bf:85:51:3a:90:63:09:f6:81:12:f5:ff:1c:5f:a3: f6:46:5b:bb:38:34:81:90:da:bc:8b:16:0e:46:4d: d8:0b:b6:72:ba:7e:2a:5b:43:32:32:4c:3f:49:86: 7e:21:7f:c9:23:b1:f1:01:3d:cd:e3:cd:6b:1c:3c: 7f:eb:fc:58:95:cd:6b:9b:b6:71:53:6f:4f:32:58: a0:c2:4b:1f:d4:35:a2:12:0b:12:ef:44:51:b8:66: 9c:17:76:de:b5:1d:ab:54:33:ac:c4:c2:cb:e4:ca: 1b:68:62:a0:4b:cd:8e:32:67:e6:c9:5e:4c:aa:03: 70:7e:a7:a3:d5:85:33:a0:22:d2:bd:01:30:ad:c8: 31:bb:97:ca:d4:0f:94:1b:8a:56:63:61:29:3d:54: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EE:69:26:F3:F5:16:68:3D:DC:78:F7:F3:87:19:7A:FC:76:7A:6C X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:03:c0:b8:f6:a4:75:94:c7:8c:a5:6b:08:94:a5:b7:8d:0c: 64:e5:07:6d:04:9d:1a:6d:c6:67:ef:50:1c:49:17:4d:36:66: f6:ac:5c:e4:c9:00:a1:ff:10:0d:75:f9:63:fe:10:30:83:f2: f6:75:51:a9:3f:eb:f1:d9:5e:2c:31:3d:4d:8c:de:c5:00:31: da:f4:0d:11:a2:7a:04:1f:a3:20:64:1d:22:c3:1c:34:9d:9f: 4d:73:1d:80:98:77:a7:63:48:5a:38:7d:21:bd:36:20:9a:c9: e3:93:c4:fe:5e:f7:a2:ef:be:25:41:f6:d1:10:4d:ec:cc:d2: ae:58:c4:2e:ad:0c:df:d9:2d:9c:57:98:ad:70:1b:ad:62:fe: 01:c3:1c:85:cd:4e:3e:42:1a:84:a5:0d:c7:f6:e7:ae:31:f7: f0:5b:9b:12:e8:1c:b4:48:ca:e6:c6:82:2c:d6:4e:7c:fd:a5: e6:56:d6:01:9e:83:5a:c8:fb:1d:70:f4:42:28:c4:e9:b3:e9: 15:8f:0c:06:8d:ad:fe:cd:30:eb:b7:54:a5:d4:1d:78:a3:b8: cc:3d:5d:67:a9:c7:df:95:5e:cd:6c:0a:7c:4f:80:21:7a:b0: 66:aa:7c:96:b6:6a:30:80:ad:0f:a3:16:aa:e9:d5:ab:a5:56: 8d:ef:7e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwNTMxMDAzMjM4WhcNMjUwNjA3MDAzMjM4WjAYMRYwFAYD VQQDEw02ODNhNGUyNi0yMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XT0HmDe9FkMT73BV/pWaTaTwlEQ/iaLA8qBnyPIqAYy1Aqq1tZF2YNeVUsD xyQUkBpgbO4k5cv2novdKiiJSRc09JNlN7W6CN8x7PK0PICuvYAbD2fwJX9dwwxO Gy5NjGG6WiTMW1i/hVE6kGMJ9oES9f8cX6P2Rlu7ODSBkNq8ixYORk3YC7Zyun4q W0MyMkw/SYZ+IX/JI7HxAT3N481rHDx/6/xYlc1rm7ZxU29PMligwksf1DWiEgsS 70RRuGacF3betR2rVDOsxMLL5MobaGKgS82OMmfmyV5MqgNwfqej1YUzoCLSvQEw rcgxu5fK1A+UG4pWY2EpPVQ7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDuaSbz 9RZoPdx49/OHGXr8dnpsMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkA8C49qR1lMeMpWsIlKW3jQxk5QdtBJ0abcZn71AcSRdNNmb2rFzk yQCh/xANdflj/hAwg/L2dVGpP+vx2V4sMT1NjN7FADHa9A0RonoEH6MgZB0iwxw0 nZ9Ncx2AmHenY0haOH0hvTYgmsnjk8T+Xvei774lQfbREE3szNKuWMQurQzf2S2c V5itcButYv4BwxyFzU4+QhqEpQ3H9ueuMffwW5sS6By0SMrmxoIs1k58/aXmVtYB noNayPsdcPRCKMTps+kVjwwGja3+zTDrt1Sl1B14o7jMPV1nqcfflV7NbAp8T4Ah erBmqnyWtmowgK0Poxaq6dWrpVaN734j -----END CERTIFICATE-----Generated at Sat May 31 17:27:56 2025 by rpki-client