$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: q4q9JQudh7ZNAdmynni5PGC+ndAyucUsmK4K628Uy8o= Subject key identifier: 70:C4:E5:B3:B9:0D:56:07:AA:2D:B7:F0:CD:1D:7D:B4:0A:58:36:2E Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0897 Signing time: Fri 30 May 2025 20:46:56 +0000 Manifest this update: Fri 30 May 2025 20:46:56 +0000 Manifest next update: Fri 06 Jun 2025 20:46:56 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: xSkPpNRnD+N5EsNd+VDpCm2q4Eo329hKOcnoQocUZdQ=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: May 30 20:46:56 2025 GMT Not After : Jun 6 20:46:56 2025 GMT Subject: CN=683a1940-d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:74:21:8f:e6:f7:90:a2:87:81:83:4b:0e: 4e:27:85:6b:89:8f:5a:f4:ea:cd:00:12:2c:ee:82: 3e:f7:8d:c3:c4:19:f3:92:a8:55:cf:98:9f:db:f9: 3a:64:00:b5:02:64:38:8f:9a:4b:3c:47:c6:fc:7a: ba:01:13:7c:b0:4c:87:68:e5:64:e2:e7:40:52:85: a0:0b:42:5d:9f:32:15:5f:ac:4a:f5:ac:e9:1d:d8: 1c:27:25:c7:b4:0f:df:cb:df:63:0a:9f:67:f4:4c: a6:d2:4e:51:69:e9:84:65:1f:17:0a:1a:f1:de:df: c7:8c:41:31:94:70:2c:e1:da:c0:85:b6:2c:1b:5b: fc:0a:28:6d:ce:30:f5:2c:98:04:f9:c8:0f:5c:8b: fd:b1:14:85:61:4a:13:0b:33:68:97:a3:1b:81:f6: fc:c8:7e:6d:0a:13:a2:8e:b1:fa:e5:50:5a:53:3d: 55:a7:8e:3b:c0:d5:21:ba:de:6d:e1:b3:7e:dd:a8: 45:e2:ef:5d:f0:56:27:b5:69:41:ee:23:c7:6f:9f: d6:f1:4f:78:1e:db:e5:7a:7b:89:03:c4:e1:85:76: 2b:86:31:a6:8f:bf:a7:18:6d:40:33:2c:bc:2e:92: 11:ac:68:b6:32:04:24:71:1e:ff:32:e3:b9:74:f2: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:E5:B3:B9:0D:56:07:AA:2D:B7:F0:CD:1D:7D:B4:0A:58:36:2E X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2e:e0:78:2a:fe:02:7a:2c:05:95:39:32:61:14:31:77:6f: 2c:7d:5c:6c:c6:da:62:94:61:9c:e5:08:62:a3:16:ea:6c:bb: cd:08:c9:d0:30:11:fc:56:5a:9e:34:ae:96:32:72:90:54:f0: 5b:6c:e0:d7:e1:dd:03:5d:a5:af:72:3a:0b:4f:70:96:f5:34: a6:0c:91:4f:79:4b:d2:8f:0e:80:00:46:ea:9a:36:81:47:0f: 8d:78:01:4a:2b:c7:80:ba:c2:ec:ac:62:bf:2a:0d:cd:85:f1: 36:d7:1a:77:c0:35:c0:ec:7f:f2:6c:38:b4:a4:23:75:3a:30: 58:d3:a5:3b:db:6e:96:9d:a0:02:5c:83:13:99:60:cf:a9:d8: ff:e0:fc:46:29:62:97:0a:be:ee:79:ec:56:e8:a0:fa:48:83: 23:4b:df:32:59:f6:e3:e2:14:4c:c1:bb:25:03:dc:41:e5:98: 87:d7:cb:6e:56:7d:ac:52:9d:a5:fe:41:3d:91:30:bc:74:13: bf:49:ce:22:d4:93:5f:97:4e:69:bf:00:de:c9:6c:dd:f2:93: c2:4f:4e:42:c2:36:32:35:0e:98:76:64:4d:a3:7b:01:d5:c6: b1:d6:7e:d7:66:b5:d2:cc:8a:9b:37:45:42:26:db:f7:7f:45: 64:c3:84:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNTMwMjA0NjU2WhcNMjUwNjA2MjA0NjU2WjAYMRYwFAYD VQQDEw02ODNhMTk0MC1kOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxJ0IY/m95Cih4GDSw5OJ4VriY9a9OrNABIs7oI+943DxBnzkqhVz5if2/k6 ZAC1AmQ4j5pLPEfG/Hq6ARN8sEyHaOVk4udAUoWgC0JdnzIVX6xK9azpHdgcJyXH tA/fy99jCp9n9Eym0k5RaemEZR8XChrx3t/HjEExlHAs4drAhbYsG1v8CihtzjD1 LJgE+cgPXIv9sRSFYUoTCzNol6Mbgfb8yH5tChOijrH65VBaUz1Vp447wNUhut5t 4bN+3ahF4u9d8FYntWlB7iPHb5/W8U94HtvlenuJA8ThhXYrhjGmj7+nGG1AMyy8 LpIRrGi2MgQkcR7/MuO5dPL3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDE5bO5 DVYHqi238M0dfbQKWDYuMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbLuB4Kv4CeiwFlTkyYRQxd28sfVxsxtpilGGc5QhioxbqbLvNCMnQ MBH8VlqeNK6WMnKQVPBbbODX4d0DXaWvcjoLT3CW9TSmDJFPeUvSjw6AAEbqmjaB Rw+NeAFKK8eAusLsrGK/Kg3NhfE21xp3wDXA7H/ybDi0pCN1OjBY06U7226WnaAC XIMTmWDPqdj/4PxGKWKXCr7ueexW6KD6SIMjS98yWfbj4hRMwbslA9xB5ZiH18tu Vn2sUp2l/kE9kTC8dBO/Sc4i1JNfl05pvwDeyWzd8pPCT05CwjYyNQ6YdmRNo3sB 1cax1n7XZrXSzIqbN0VCJtv3f0Vkw4Tn -----END CERTIFICATE-----Generated at Sat May 31 17:34:21 2025 by rpki-client