$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: KUeLtAmJpPyhKfmuKLOGgMiJ70ZtsV4mlrsYGWzbn8A= Subject key identifier: 1E:F0:D0:B7:3B:11:10:6F:23:68:42:C4:AA:A9:30:E4:B0:77:24:D5 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C44 Signing time: Fri 30 May 2025 18:35:17 +0000 Manifest this update: Fri 30 May 2025 18:35:17 +0000 Manifest next update: Fri 06 Jun 2025 18:35:17 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: 6Kwyp/Yb0SScWF5MLkBY+6Eaak/Sl/jy8XE4vABkIiw=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: May 30 18:35:17 2025 GMT Not After : Jun 6 18:35:17 2025 GMT Subject: CN=6839fa65-4218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:0e:2f:a3:03:9e:3f:ee:30:d0:21:53:5d: d3:21:64:7c:12:24:a7:03:37:f5:69:4b:a5:5a:3a: b8:3e:45:c3:1f:f3:e4:15:89:23:36:50:3f:5a:47: 33:c3:fb:e0:5f:12:2b:12:f5:e2:d3:c8:7f:1e:05: dc:cd:77:05:cc:1e:6f:1d:b3:d2:ef:70:13:59:e2: 56:26:ba:5e:c9:00:99:b5:8c:12:e6:74:14:89:68: 67:69:93:7c:da:71:aa:40:b8:6b:e2:05:e2:5a:24: b8:6a:41:37:25:f8:c7:a7:6d:02:68:71:cd:0c:64: bb:dc:83:2b:e6:a7:a7:48:38:1b:bf:1e:45:f7:6b: 56:d6:8f:03:c3:9b:bc:16:2d:67:21:b2:1e:cf:ec: 33:cf:67:8b:f7:af:b8:17:ff:2b:15:29:02:f7:25: 13:69:df:4a:74:71:4a:1a:f5:8e:06:a8:46:dc:58: a9:8b:a6:25:2e:aa:10:25:01:3c:bf:77:8f:c3:5d: 1f:d6:97:39:7b:f6:92:00:da:82:13:47:43:e1:9d: e6:2d:1a:88:00:72:aa:3d:29:c2:21:fa:5a:fd:11: 1d:d1:94:f8:26:4e:78:3c:0c:8d:7c:ad:a7:b9:f3: 30:d6:40:0b:fa:fc:c3:9e:8e:ac:07:ab:53:6b:f1: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:D0:B7:3B:11:10:6F:23:68:42:C4:AA:A9:30:E4:B0:77:24:D5 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ec:5e:a0:0e:4c:cf:55:69:f8:06:71:75:36:9e:57:54:1b: 60:a0:74:e5:3e:a8:7e:53:d7:b9:75:0b:ab:6f:6a:4d:20:0f: 57:8e:1c:f8:e6:c6:82:ca:3b:c0:e4:4c:48:70:92:d7:a4:5a: 93:55:4b:c6:f2:39:28:e1:3d:4a:7c:9b:a0:c2:83:fe:3c:b8: f5:70:5d:26:30:ba:75:c3:8b:05:bf:ac:f3:1c:3f:ba:3b:99: 9a:15:74:64:05:48:67:38:18:0f:be:68:28:aa:ed:56:a8:24: 24:8b:84:70:31:4d:97:21:00:7a:d2:31:8e:84:20:1a:80:13: a8:91:da:0a:44:74:98:09:13:c4:99:95:49:74:e3:74:a6:66: 86:93:db:64:f1:c5:02:31:4c:9e:23:0b:c1:a4:58:e9:9b:42: e1:ac:54:ac:a6:13:70:3c:43:ef:15:d5:ce:b3:12:4e:bf:4f: d3:79:d8:6b:46:52:54:b3:d6:53:dc:a0:14:14:50:e9:b5:88: 48:62:69:ee:af:04:7a:b4:08:aa:3c:67:82:ee:da:01:96:e4: 72:e4:c2:17:7b:9a:a8:3a:c9:d9:aa:cd:fd:1f:c4:43:16:dd: 49:d7:54:7e:11:00:d1:fb:82:99:15:17:fb:5c:2a:ac:1f:c1: f1:2c:c2:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUwNTMwMTgzNTE3WhcNMjUwNjA2MTgzNTE3WjAYMRYwFAYD VQQDEw02ODM5ZmE2NS00MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTkOL6MDnj/uMNAhU13TIWR8EiSnAzf1aUulWjq4PkXDH/PkFYkjNlA/Wkcz w/vgXxIrEvXi08h/HgXczXcFzB5vHbPS73ATWeJWJrpeyQCZtYwS5nQUiWhnaZN8 2nGqQLhr4gXiWiS4akE3JfjHp20CaHHNDGS73IMr5qenSDgbvx5F92tW1o8Dw5u8 Fi1nIbIez+wzz2eL96+4F/8rFSkC9yUTad9KdHFKGvWOBqhG3Fipi6YlLqoQJQE8 v3ePw10f1pc5e/aSANqCE0dD4Z3mLRqIAHKqPSnCIfpa/REd0ZT4Jk54PAyNfK2n ufMw1kAL+vzDno6sB6tTa/FLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7w0Lc7 ERBvI2hCxKqpMOSwdyTVMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ7F6gDkzPVWn4BnF1Np5XVBtgoHTlPqh+U9e5dQurb2pNIA9Xjhz4 5saCyjvA5ExIcJLXpFqTVUvG8jko4T1KfJugwoP+PLj1cF0mMLp1w4sFv6zzHD+6 O5maFXRkBUhnOBgPvmgoqu1WqCQki4RwMU2XIQB60jGOhCAagBOokdoKRHSYCRPE mZVJdON0pmaGk9tk8cUCMUyeIwvBpFjpm0LhrFSsphNwPEPvFdXOsxJOv0/Tedhr RlJUs9ZT3KAUFFDptYhIYmnurwR6tAiqPGeC7toBluRy5MIXe5qoOsnZqs39H8RD Ft1J11R+EQDR+4KZFRf7XCqsH8HxLMKT -----END CERTIFICATE-----Generated at Sat May 31 16:36:45 2025 by rpki-client