$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: muKFa81fh70b6pZlEbaDgqktZxVZVZ4Ar+VAJOuI5V4= Subject key identifier: 80:F2:22:92:66:8E:B1:3F:A5:EA:F4:01:B7:14:5A:56:95:1F:10:03 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 013A Signing time: Sat 31 May 2025 04:04:48 +0000 Manifest this update: Sat 31 May 2025 04:04:48 +0000 Manifest next update: Sat 07 Jun 2025 04:04:48 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: QV/9oRHJG3sitCR7WLKPSfPORhf059ANl7qA9eBCJ8Y=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: May 31 04:04:48 2025 GMT Not After : Jun 7 04:04:48 2025 GMT Subject: CN=683a7fe0-d8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:16:5d:10:49:f5:c5:72:c1:85:fe:62:d2: b7:07:55:0c:7b:e3:d9:d2:d1:3a:fb:11:c1:e6:52: 9e:8d:9c:ce:be:a8:27:da:0a:d7:b5:69:94:ea:6a: 00:28:04:36:70:a9:8b:2d:07:08:a8:e0:57:b1:ea: a3:48:7c:8f:e4:b7:06:4a:b9:c8:f0:e3:ae:f2:71: fc:ee:f3:80:fb:83:9f:f3:31:91:b2:92:f6:7f:1a: 12:3a:ca:4f:68:d5:b8:5f:6b:53:42:be:97:9e:31: d5:dd:c8:5e:15:ee:12:60:56:04:2e:2a:80:f5:cc: a3:73:6c:d5:c5:4a:da:e2:e3:d8:9b:69:66:da:3f: 0f:75:3b:f9:9b:d4:95:9b:11:42:9e:42:ba:25:cf: 4f:a6:2d:3d:32:4e:8c:e5:a8:50:43:15:17:2a:ca: cc:07:6d:5c:c8:12:28:62:de:1c:10:7c:8d:62:e0: 50:8d:3a:5f:a2:30:30:a3:60:78:e5:f7:d0:65:f5: c2:e7:5b:ac:e2:29:44:90:f8:13:07:3f:f6:37:96: 22:f3:98:80:85:f9:87:e6:a0:d5:47:00:89:a4:21: 36:a5:8a:75:9a:40:56:e7:b8:aa:82:fb:83:97:a7: ba:27:ae:c6:3c:f0:53:0d:4a:db:77:a9:66:af:d9: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:22:92:66:8E:B1:3F:A5:EA:F4:01:B7:14:5A:56:95:1F:10:03 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:e0:e9:98:04:40:00:e7:b6:b7:68:43:d3:2c:4e:b8:dd: 39:81:5f:74:dc:c1:67:12:9f:5e:d5:f5:2f:a8:38:81:0c:ec: 6b:46:f8:68:1b:f5:33:f4:bd:09:4f:42:97:bd:3c:5b:b1:65: 68:1a:03:fe:48:87:f0:59:2b:e5:dd:18:92:15:92:64:83:60: da:4a:93:c2:d2:65:24:42:9b:16:58:40:f1:93:d5:9c:b8:26: 9f:63:d9:27:13:6d:0e:77:cb:88:b8:9d:e9:6e:86:66:5c:f9: 2d:4f:bc:a6:0a:06:c6:4c:83:54:17:c8:25:74:e6:d8:38:79: 01:78:6e:c9:d9:1e:09:0e:e8:d4:39:77:cf:89:bc:bb:e1:45: a0:e6:b8:e7:cf:ab:2f:66:e4:dd:1b:a5:11:e6:a2:7e:12:21: 14:14:0a:7f:04:2c:e0:6c:46:75:b4:a0:2a:1c:0a:2a:b2:da: 3d:52:63:b6:1a:28:3a:24:5c:d4:2f:a3:53:94:92:27:a1:1e: 3d:db:04:ce:40:77:6b:f3:85:75:ce:e4:36:19:e2:34:c2:64: 02:81:2a:bb:ad:88:7e:db:00:a5:65:9e:96:5e:c0:f2:c1:84: fc:c2:25:75:62:8f:8b:3f:87:f8:66:63:5f:2a:b8:54:42:92: 12:74:db:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUwNTMxMDQwNDQ4WhcNMjUwNjA3MDQwNDQ4WjAYMRYwFAYD VQQDEw02ODNhN2ZlMC1kOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4s0WXRBJ9cVywYX+YtK3B1UMe+PZ0tE6+xHB5lKejZzOvqgn2grXtWmU6moA KAQ2cKmLLQcIqOBXseqjSHyP5LcGSrnI8OOu8nH87vOA+4Of8zGRspL2fxoSOspP aNW4X2tTQr6XnjHV3cheFe4SYFYELiqA9cyjc2zVxUra4uPYm2lm2j8PdTv5m9SV mxFCnkK6Jc9Ppi09Mk6M5ahQQxUXKsrMB21cyBIoYt4cEHyNYuBQjTpfojAwo2B4 5ffQZfXC51us4ilEkPgTBz/2N5Yi85iAhfmH5qDVRwCJpCE2pYp1mkBW57iqgvuD l6e6J67GPPBTDUrbd6lmr9mLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDyIpJm jrE/per0AbcUWlaVHxADMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1+DpmARAAOe2t2hD0yxOuN05gV903MFnEp9e1fUvqDiBDOxrRvho G/Uz9L0JT0KXvTxbsWVoGgP+SIfwWSvl3RiSFZJkg2DaSpPC0mUkQpsWWEDxk9Wc uCafY9knE20Od8uIuJ3pboZmXPktT7ymCgbGTINUF8gldObYOHkBeG7J2R4JDujU OXfPiby74UWg5rjnz6svZuTdG6UR5qJ+EiEUFAp/BCzgbEZ1tKAqHAoqsto9UmO2 Gig6JFzUL6NTlJInoR492wTOQHdr84V1zuQ2GeI0wmQCgSq7rYh+2wClZZ6WXsDy wYT8wiV1Yo+LP4f4ZmNfKrhUQpISdNtp -----END CERTIFICATE-----Generated at Sat May 31 16:59:25 2025 by rpki-client