$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: rHtY+4IdTj7A9fBvHfjhULkk9Y9Adb3ari/Lgiposds= Subject key identifier: 43:3A:C4:FE:51:8B:90:48:2E:2A:85:09:EB:F0:0E:89:02:A9:86:0B Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0446 Signing time: Sat 31 May 2025 00:25:19 +0000 Manifest this update: Sat 31 May 2025 00:25:18 +0000 Manifest next update: Sat 07 Jun 2025 00:25:18 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: Ih6s/aZZnrJ5z3aeOlRNUHLQDBketPOEeTWAphiEL+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: May 31 00:25:18 2025 GMT Not After : Jun 7 00:25:18 2025 GMT Subject: CN=683a4c6f-b4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:1d:9c:bb:9e:96:07:3f:7a:e9:89:47:f4: 5a:99:38:17:ad:74:cd:4e:c1:53:2f:d1:fb:d0:fd: 36:52:36:30:93:44:48:2d:46:45:0f:9e:45:61:32: fe:d6:b8:88:23:4e:2c:5e:59:32:f6:ee:bc:78:b4: 75:d6:f0:ed:13:c7:a7:9c:5d:6c:03:8f:24:0d:10: 57:41:88:82:ab:9c:55:98:ac:e8:18:c4:75:e0:32: 60:69:da:5c:38:1c:fb:66:f8:36:ca:5c:b0:a5:7d: 3e:cd:29:78:cc:7b:28:90:0e:1c:68:f5:fc:5f:2b: 4e:b2:43:0a:98:9d:2e:0c:72:2c:36:39:20:ac:37: 63:ff:8f:ce:4f:ea:7f:08:47:17:46:53:62:a6:34: 94:bb:3f:e5:71:98:5b:77:39:17:89:ac:43:88:36: 9a:82:31:1a:18:63:20:a5:c7:75:b7:59:28:d8:4a: 6b:da:23:ac:f9:b0:54:0d:9a:88:61:fb:f2:8c:5e: 44:07:56:03:3a:78:20:4a:54:9b:73:e2:24:0d:69: 41:84:aa:53:8e:b5:0d:29:4f:89:17:5d:bc:48:bf: 25:49:42:3b:c4:ca:88:5a:f0:f6:8a:74:6b:c6:49: 8d:ba:fe:7c:ee:e0:d9:ae:2d:e8:12:dc:78:ef:cc: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:C4:FE:51:8B:90:48:2E:2A:85:09:EB:F0:0E:89:02:A9:86:0B X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:6d:1d:64:91:0d:9f:eb:ab:48:39:9b:0f:5a:3b:23:67: 84:ca:69:75:17:4e:2e:02:75:a6:a3:72:42:d8:9e:07:f9:8a: 09:f4:1e:aa:a4:95:ee:fc:4c:31:15:48:94:ab:0d:ff:88:55: f8:b4:46:0a:f7:5a:8e:34:a5:b7:21:ed:39:66:9a:c0:62:d1: 81:b6:3c:53:ea:b3:80:13:0d:b1:5b:3e:70:83:de:83:36:01: 9b:f9:f9:b1:0a:ed:88:d2:10:88:f2:43:70:b3:ed:4d:bf:32: 29:93:b8:7f:d5:fc:ba:25:86:02:57:56:a3:5f:81:f2:f9:16: 80:fa:93:a0:0a:5c:fe:85:43:43:56:52:ac:2f:c2:17:6f:dd: f3:79:da:dd:f8:b8:01:9a:0e:53:4d:09:1b:b8:f4:e9:34:b6: 17:65:28:b8:2c:4e:00:b9:d0:da:ae:7e:11:67:2a:23:2c:96: 80:6f:4a:c6:96:75:a2:7c:9d:a6:9f:5e:f9:4b:07:1d:f0:2d: 12:59:05:c1:91:44:49:d8:5e:8c:8a:d1:c0:a1:1d:ba:b9:f6: 6f:0b:20:06:b6:17:07:1d:7e:2b:f4:a1:9f:8f:71:33:b2:eb: db:f2:9e:9f:e3:77:1c:86:43:ef:70:65:a3:71:ab:db:48:66: d7:e7:d7:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNTMxMDAyNTE4WhcNMjUwNjA3MDAyNTE4WjAYMRYwFAYD VQQDEw02ODNhNGM2Zi1iNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ8dnLuelgc/eumJR/RamTgXrXTNTsFTL9H70P02UjYwk0RILUZFD55FYTL+ 1riII04sXlky9u68eLR11vDtE8ennF1sA48kDRBXQYiCq5xVmKzoGMR14DJgadpc OBz7Zvg2ylywpX0+zSl4zHsokA4caPX8XytOskMKmJ0uDHIsNjkgrDdj/4/OT+p/ CEcXRlNipjSUuz/lcZhbdzkXiaxDiDaagjEaGGMgpcd1t1ko2Epr2iOs+bBUDZqI YfvyjF5EB1YDOnggSlSbc+IkDWlBhKpTjrUNKU+JF128SL8lSUI7xMqIWvD2inRr xkmNuv587uDZri3oEtx478xalwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM6xP5R i5BILiqFCevwDokCqYYLMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/20dZJENn+urSDmbD1o7I2eEyml1F04uAnWmo3JC2J4H+YoJ9B6q pJXu/EwxFUiUqw3/iFX4tEYK91qONKW3Ie05ZprAYtGBtjxT6rOAEw2xWz5wg96D NgGb+fmxCu2I0hCI8kNws+1NvzIpk7h/1fy6JYYCV1ajX4Hy+RaA+pOgClz+hUND VlKsL8IXb93zedrd+LgBmg5TTQkbuPTpNLYXZSi4LE4AudDarn4RZyojLJaAb0rG lnWifJ2mn175Swcd8C0SWQXBkURJ2F6MitHAoR26ufZvCyAGthcHHX4r9KGfj3Ez suvb8p6f43cchkPvcGWjcavbSGbX59cO -----END CERTIFICATE-----Generated at Sat May 31 17:54:56 2025 by rpki-client