$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json) Hash identifier: 59zAAPpZFsRnE6QSrbRir6AczbIDhMWJZ5LSWblZEac= Subject key identifier: B1:57:F2:8E:BD:40:A0:8D:2F:3A:2E:39:A4:5C:EC:5D:DE:48:96:C3 Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft Manifest number: 0624 Signing time: Fri 30 May 2025 23:00:30 +0000 Manifest this update: Fri 30 May 2025 23:00:29 +0000 Manifest next update: Fri 06 Jun 2025 23:00:29 +0000 Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: OA5pM0hFxEmf1dGeVF/kcJ1OuT0MxbPuEXDIkaVruKI=) 2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=) 3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=) 4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: May 30 23:00:29 2025 GMT Not After : Jun 6 23:00:29 2025 GMT Subject: CN=683a388d-70d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:41:4c:88:1b:c5:b1:b8:ae:2f:2a:9d:a4: 72:67:98:59:ee:ca:27:6a:ec:aa:ce:02:b9:2e:08: 99:4d:82:79:9e:ff:b4:c8:62:de:d8:1a:ac:7b:91: 5a:d5:e0:94:c2:dd:4c:91:7d:97:5c:a5:c7:21:3c: 3b:c7:e3:36:56:0f:e9:96:ab:f4:02:d4:52:e0:5b: 69:3f:4c:96:1a:58:cc:60:4e:fb:b6:98:07:6c:24: 41:18:91:e9:1b:83:f0:ab:8c:1a:b3:e7:07:32:2c: ae:6b:52:4a:82:c8:1d:cb:d5:8a:9c:98:6e:66:1b: b3:71:99:d4:52:60:3c:e5:a2:e6:d7:1c:3b:0e:3e: 9c:36:b1:03:c9:7d:b7:c0:e4:6e:bd:e7:e1:c3:97: ac:c6:74:00:77:c8:d6:29:d0:7d:76:26:84:1f:0b: 90:83:aa:43:c7:a0:70:e8:4c:f8:7b:31:6a:e9:76: e8:3d:71:35:69:c2:08:97:a8:6c:0f:fe:05:58:63: fd:9c:a4:72:b7:76:bb:58:6f:7b:78:63:f5:5c:62: a5:77:b2:4f:c7:63:db:b2:10:6b:64:21:a2:4d:84: 6a:e8:1e:9b:a1:f4:2b:9e:c8:fb:65:a6:5b:c6:28: cd:fe:c3:90:4a:04:74:c8:64:3f:07:b1:fe:29:f3: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:F2:8E:BD:40:A0:8D:2F:3A:2E:39:A4:5C:EC:5D:DE:48:96:C3 X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0c:ca:31:6f:8e:ff:1b:ac:86:73:f4:4c:73:57:4d:96:ed: ab:e2:22:8a:b0:42:67:e3:b8:50:f1:b7:a9:35:a6:93:10:c3: 29:f3:ab:68:a4:70:9e:54:4b:f6:48:b6:d4:5d:24:74:de:00: 8c:62:29:95:33:9d:8a:88:dd:6a:92:bd:a8:27:b3:1e:d2:3e: af:53:69:6a:7a:cb:95:30:e9:79:69:6a:e5:2e:b3:df:37:ca: a0:d1:73:52:e8:8b:d7:02:61:0d:44:f6:b7:01:f0:f8:f3:4f: 87:ca:8c:a3:21:60:ac:0c:09:33:b5:98:6e:88:a5:0a:91:cc: 53:0f:97:5c:ec:b3:8f:7b:23:9d:56:9e:49:6a:85:51:01:1b: 1f:a6:40:8b:fa:d9:08:ab:57:99:aa:fa:09:ca:50:80:5a:35: 15:39:48:c2:a1:57:21:bb:bc:84:de:86:97:a3:dd:cd:be:39: 4b:bd:2b:fb:90:40:a2:27:0f:63:b3:86:5d:82:d0:3e:28:55: 71:84:25:68:df:ba:54:78:70:6b:a4:5d:60:f3:6e:44:f6:e6: 26:03:a6:d0:c3:98:9c:59:b6:b0:eb:35:ed:c0:52:5e:39:ca: b8:f3:9b:f4:f0:a3:03:ba:fa:37:15:e6:9c:09:f0:89:7f:e9: 2d:de:b0:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjUwNTMwMjMwMDI5WhcNMjUwNjA2MjMwMDI5WjAYMRYwFAYD VQQDEw02ODNhMzg4ZC03MGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iNBTIgbxbG4ri8qnaRyZ5hZ7sonauyqzgK5LgiZTYJ5nv+0yGLe2Bqse5Fa 1eCUwt1MkX2XXKXHITw7x+M2Vg/plqv0AtRS4FtpP0yWGljMYE77tpgHbCRBGJHp G4Pwq4was+cHMiyua1JKgsgdy9WKnJhuZhuzcZnUUmA85aLm1xw7Dj6cNrEDyX23 wORuvefhw5esxnQAd8jWKdB9diaEHwuQg6pDx6Bw6Ez4ezFq6XboPXE1acIIl6hs D/4FWGP9nKRyt3a7WG97eGP1XGKld7JPx2PbshBrZCGiTYRq6B6bofQrnsj7ZaZb xijN/sOQSgR0yGQ/B7H+KfPOLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFX8o69 QKCNLzouOaRc7F3eSJbDMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaDMoxb47/G6yGc/RMc1dNlu2r4iKKsEJn47hQ8bepNaaTEMMp86to pHCeVEv2SLbUXSR03gCMYimVM52KiN1qkr2oJ7Me0j6vU2lqesuVMOl5aWrlLrPf N8qg0XNS6IvXAmENRPa3AfD480+HyoyjIWCsDAkztZhuiKUKkcxTD5dc7LOPeyOd Vp5JaoVRARsfpkCL+tkIq1eZqvoJylCAWjUVOUjCoVchu7yE3oaXo93NvjlLvSv7 kECiJw9js4ZdgtA+KFVxhCVo37pUeHBrpF1g825E9uYmA6bQw5icWbaw6zXtwFJe Ocq485v08KMDuvo3FeacCfCJf+kt3rCf -----END CERTIFICATE-----Generated at Sat May 31 17:16:18 2025 by rpki-client