$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: i2bMEOI03NRamWucFisvAFKAITN19mMTaV7qDJ10iO0= Subject key identifier: C1:B9:87:F7:32:C5:BF:EE:E8:63:0A:70:E3:0D:F9:31:AD:78:63:E4 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 0980 Signing time: Fri 30 May 2025 20:58:44 +0000 Manifest this update: Fri 30 May 2025 20:58:44 +0000 Manifest next update: Fri 06 Jun 2025 20:58:44 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: fn+NQJueHwwgo8UhnPQcl2qioQ9rgk7Vm2xbb7k07Dw=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: May 30 20:58:44 2025 GMT Not After : Jun 6 20:58:44 2025 GMT Subject: CN=683a1c04-b77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:b4:91:ab:6f:64:44:49:a2:81:4a:b4:94: 63:0c:d8:9f:a6:ef:40:a5:4a:07:75:ed:3a:63:79: fb:77:f6:07:57:49:23:10:60:ff:aa:aa:27:99:3f: 58:f3:b9:b7:d5:67:a2:04:e8:6a:33:40:70:e5:9d: bf:cd:1e:db:ff:01:76:65:18:48:e9:50:de:01:3e: 8b:03:da:05:24:d9:6b:08:57:2b:b8:a8:90:9c:d0: 97:81:56:29:aa:af:14:6f:d4:53:b3:7b:5e:3a:f2: e7:d0:7c:c5:50:03:84:e7:33:91:86:1f:15:1f:27: f4:d5:05:d8:68:03:cb:c2:29:03:01:dd:77:b8:69: f8:7d:11:ea:1c:b2:be:72:88:73:c7:e9:a2:aa:47: 14:54:e4:ac:54:cf:4d:f3:58:0d:49:79:2a:3e:52: fd:02:a9:92:aa:19:e2:9d:00:0e:81:99:4b:75:0b: ed:f7:7a:6f:7e:00:c4:c7:ee:aa:bc:8e:b9:76:5a: 5f:93:2c:e7:d1:4d:1c:2b:64:a3:30:60:dd:f5:4d: f8:94:87:62:a4:9e:0c:f2:d9:13:57:ee:d0:4f:a1: 50:2a:28:c5:69:f0:9f:4b:4d:cf:a8:95:c7:79:87: a5:51:7a:25:ee:a1:84:61:ea:91:2f:59:12:13:fd: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:87:F7:32:C5:BF:EE:E8:63:0A:70:E3:0D:F9:31:AD:78:63:E4 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0b:86:8a:c7:ee:e7:18:9b:be:2c:84:07:95:23:f8:92:40: a6:d2:dd:be:98:db:58:c5:1c:2a:7d:88:2c:f3:88:56:9c:33: 8b:ea:4c:f6:1a:9d:c6:b6:75:bc:0a:31:35:ff:1c:b0:f0:8a: 99:95:bc:d8:dd:8e:57:fb:16:75:38:38:5f:53:cc:3b:1f:ec: 24:a6:a1:35:1e:56:ad:be:c2:c8:37:20:59:34:56:6a:4c:05: a6:39:73:81:47:9c:f4:73:66:06:24:72:35:18:9f:3f:70:b7: ed:57:dc:c1:9b:e9:7a:dc:b5:95:fd:1c:53:c7:78:30:a9:e6: bf:20:c9:e3:fd:8f:1e:6e:24:47:f0:bc:37:0c:a5:76:14:4d: 66:91:78:b1:dc:3d:2c:d4:53:d2:18:5c:7b:30:d6:51:61:de: 0d:54:83:a0:ce:95:a1:42:0e:c2:da:16:51:07:6c:a4:aa:ae: 1d:8f:6b:6c:22:59:4e:b8:d0:9e:92:c8:18:69:86:18:97:b3: 16:3d:fb:8e:50:18:da:ce:a5:5a:7c:52:22:aa:54:a0:35:c8: e0:d4:c0:e1:d5:c0:21:68:65:8e:9f:45:fe:7c:c6:9d:89:63: 59:7f:d7:55:11:02:a7:32:4c:a3:25:8e:ba:85:da:32:10:cc: 8b:f9:5b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwNTMwMjA1ODQ0WhcNMjUwNjA2MjA1ODQ0WjAYMRYwFAYD VQQDEw02ODNhMWMwNC1iNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOu0katvZERJooFKtJRjDNifpu9ApUoHde06Y3n7d/YHV0kjEGD/qqonmT9Y 87m31WeiBOhqM0Bw5Z2/zR7b/wF2ZRhI6VDeAT6LA9oFJNlrCFcruKiQnNCXgVYp qq8Ub9RTs3teOvLn0HzFUAOE5zORhh8VHyf01QXYaAPLwikDAd13uGn4fRHqHLK+ cohzx+miqkcUVOSsVM9N81gNSXkqPlL9AqmSqhninQAOgZlLdQvt93pvfgDEx+6q vI65dlpfkyzn0U0cK2SjMGDd9U34lIdipJ4M8tkTV+7QT6FQKijFafCfS03PqJXH eYelUXol7qGEYeqRL1kSE/1MAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG5h/cy xb/u6GMKcOMN+TGteGPkMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADC4aKx+7nGJu+LIQHlSP4kkCm0t2+mNtYxRwqfYgs84hWnDOL6kz2 Gp3GtnW8CjE1/xyw8IqZlbzY3Y5X+xZ1ODhfU8w7H+wkpqE1HlatvsLINyBZNFZq TAWmOXOBR5z0c2YGJHI1GJ8/cLftV9zBm+l63LWV/RxTx3gwqea/IMnj/Y8ebiRH 8Lw3DKV2FE1mkXix3D0s1FPSGFx7MNZRYd4NVIOgzpWhQg7C2hZRB2ykqq4dj2ts IllOuNCeksgYaYYYl7MWPfuOUBjazqVafFIiqlSgNcjg1MDh1cAhaGWOn0X+fMad iWNZf9dVEQKnMkyjJY66hdoyEMyL+VuM -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client