$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: e0eT5OluzJxNVWWmbWjk4XJyZ0ijkjw0zq0Q9X41Egw= Subject key identifier: CB:05:13:0B:11:EA:32:CB:8A:90:1F:7E:47:37:56:0A:AD:6D:C3:C8 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 0199 Signing time: Sat 31 May 2025 03:07:18 +0000 Manifest this update: Sat 31 May 2025 03:07:17 +0000 Manifest next update: Sat 07 Jun 2025 03:07:17 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: 9R7anVBYN+83j1byupOm2QwFt/L8ktX7pTjTXJg2wU0=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: May 31 03:07:17 2025 GMT Not After : Jun 7 03:07:17 2025 GMT Subject: CN=683a7266-a839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:2e:9c:b2:a6:5a:f8:5a:62:2e:69:85:8d: 56:d5:f4:c3:ad:47:04:28:06:ee:97:4a:30:c0:7e: 48:76:17:71:2c:8a:f6:dd:8a:e0:70:b3:44:d3:79: a9:c7:75:f0:e2:a5:4a:11:a7:d8:1e:2c:43:da:0b: a0:7b:48:4d:e0:28:a7:46:43:06:89:2b:83:b4:64: 02:62:fc:ae:8d:a7:db:d8:cc:2c:18:7f:73:97:b5: f9:f5:f0:a3:a2:e6:2e:51:a6:ae:84:0d:ee:ef:72: 76:5b:8c:34:b4:56:5b:e0:bc:c5:f7:c3:62:45:15: a2:81:a8:c3:e4:90:e3:bd:fa:4f:4f:00:b0:59:87: 0f:ee:7c:16:9a:ab:66:66:88:c2:1b:70:ac:d0:b7: 9a:d4:1a:0c:a4:e8:36:0b:26:b3:a3:5a:fd:59:8c: d2:d3:a4:75:e7:ff:9b:8a:71:c7:cb:09:5a:aa:56: 66:aa:d8:df:b8:05:2b:45:95:6f:f4:f3:de:e7:32: dc:d1:f1:8c:0b:43:3b:5e:59:b3:64:fb:eb:2f:83: bb:6e:07:3f:90:42:aa:3e:6b:3b:5b:14:2c:b6:10: 03:ae:0d:95:c8:65:56:7f:fb:ad:af:e6:29:b8:98: 0b:61:92:01:34:fc:c5:3b:cd:05:09:47:2a:17:d2: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:13:0B:11:EA:32:CB:8A:90:1F:7E:47:37:56:0A:AD:6D:C3:C8 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:99:88:d7:d3:cd:ac:7d:f7:de:31:a1:73:da:0b:e0:8a:47: 81:e5:83:5c:3c:b0:33:67:25:90:02:fd:c2:da:e1:cc:89:86: ed:51:72:09:05:06:0f:7b:83:b3:5e:42:15:f7:b8:0f:0a:8d: bb:4b:bf:a0:fe:9a:27:10:b0:3e:78:04:ca:bb:62:fd:b5:90: 93:23:9e:56:43:e1:42:27:3b:eb:f2:5a:a0:55:d5:2c:ad:47: eb:73:68:ea:09:ef:41:66:53:e3:fc:b5:52:5f:79:c8:90:f8: 07:14:e9:9d:6a:bf:79:26:99:d4:4a:73:d0:3a:b2:45:c3:38: 99:4b:8b:d6:4e:ff:8b:45:62:77:ee:1e:76:32:6d:0c:1a:47: 2f:a3:62:9d:16:44:40:b3:f3:79:90:80:7d:a4:3f:c0:b9:a3: a7:83:ed:85:e3:4c:d3:7f:0f:43:71:bd:25:6c:33:a8:70:10: 6c:ab:d7:33:98:be:af:3e:40:8d:a8:23:8e:76:ed:09:96:65: e4:b9:a7:d1:78:b8:ed:c3:0d:e7:d7:f5:a9:73:a9:a3:59:ec: 2f:fc:d5:48:43:0e:a0:49:43:3d:05:ab:3b:b8:ff:21:3e:95: 4e:3e:66:da:20:04:61:a4:9f:b5:8e:a1:aa:48:a0:b5:9d:aa: 85:51:f3:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwNTMxMDMwNzE3WhcNMjUwNjA3MDMwNzE3WjAYMRYwFAYD VQQDEw02ODNhNzI2Ni1hODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IcunLKmWvhaYi5phY1W1fTDrUcEKAbul0owwH5IdhdxLIr23YrgcLNE03mp x3Xw4qVKEafYHixD2guge0hN4CinRkMGiSuDtGQCYvyujafb2MwsGH9zl7X59fCj ouYuUaauhA3u73J2W4w0tFZb4LzF98NiRRWigajD5JDjvfpPTwCwWYcP7nwWmqtm ZojCG3Cs0Lea1BoMpOg2Cyazo1r9WYzS06R15/+binHHywlaqlZmqtjfuAUrRZVv 9PPe5zLc0fGMC0M7XlmzZPvrL4O7bgc/kEKqPms7WxQsthADrg2VyGVWf/utr+Yp uJgLYZIBNPzFO80FCUcqF9LN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsFEwsR 6jLLipAffkc3VgqtbcPIMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTmYjX082sfffeMaFz2gvgikeB5YNcPLAzZyWQAv3C2uHMiYbtUXIJ BQYPe4OzXkIV97gPCo27S7+g/ponELA+eATKu2L9tZCTI55WQ+FCJzvr8lqgVdUs rUfrc2jqCe9BZlPj/LVSX3nIkPgHFOmdar95JpnUSnPQOrJFwziZS4vWTv+LRWJ3 7h52Mm0MGkcvo2KdFkRAs/N5kIB9pD/AuaOng+2F40zTfw9Dcb0lbDOocBBsq9cz mL6vPkCNqCOOdu0JlmXkuafReLjtww3n1/Wpc6mjWewv/NVIQw6gSUM9Bas7uP8h PpVOPmbaIARhpJ+1jqGqSKC1naqFUfOm -----END CERTIFICATE-----Generated at Sat May 31 16:47:45 2025 by rpki-client