$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: MvVQIt+K6FkA3qAPMJbrNVSqCxoGx6FnIski9Z8WPTo= Subject key identifier: 66:7D:A9:9F:F4:4A:BB:20:10:B0:10:A7:43:82:CE:DE:BA:36:54:4C Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 09CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09AE Signing time: Fri 30 May 2025 20:59:07 +0000 Manifest this update: Fri 30 May 2025 20:59:07 +0000 Manifest next update: Fri 06 Jun 2025 20:59:07 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: BHmuV7XD2h27EK1Ti4MYO1D8BqabBCl9oSQ8hsV7S5A=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: May 30 20:59:07 2025 GMT Not After : Jun 6 20:59:07 2025 GMT Subject: CN=683a1c1b-275f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:48:44:42:86:0d:87:43:af:63:6d:3c:22: 56:89:b7:58:bc:0a:a5:75:e5:89:87:c7:9d:ca:7d: 34:1b:5b:22:9c:8d:bf:e8:b3:10:63:7b:7b:05:a1: 78:63:1a:72:ae:bd:05:e5:66:f5:18:eb:29:1e:5d: f0:eb:d5:d1:e4:42:d7:08:ab:ed:0c:55:30:a8:9d: e9:f3:36:21:37:32:47:da:11:f9:3c:44:f8:4a:7b: 48:22:8c:f2:b2:20:6c:2c:5a:86:6d:55:ff:9b:57: 77:7d:50:87:4c:5b:8f:00:26:fd:99:55:c1:c4:c7: 0f:7c:12:1a:a9:7e:5c:b5:eb:f2:7f:88:de:be:31: 8e:89:d5:eb:f1:ee:b4:8b:de:d3:ad:72:7f:3e:15: e3:1e:0e:50:56:72:44:fe:67:a2:ee:56:7f:22:70: bb:e0:36:10:9c:d5:da:71:28:58:1e:9a:76:1e:69: 9f:30:5f:c8:62:fa:20:2c:6f:d6:b1:f4:85:c4:86: cb:d6:1a:50:25:bf:13:42:85:7a:ef:58:37:5d:02: 07:f9:f0:8d:7f:79:cd:c4:9c:51:fa:57:a2:7e:97: 05:82:b8:2c:90:51:d1:e7:98:14:53:96:84:86:d4: fe:63:10:c6:1b:1a:94:97:25:e1:55:a2:34:09:1e: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:A9:9F:F4:4A:BB:20:10:B0:10:A7:43:82:CE:DE:BA:36:54:4C X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7d:c7:e6:94:5e:28:af:bf:55:cf:04:e2:0c:5e:3d:44:ec: 34:94:b6:d7:a4:1a:e9:02:aa:05:03:e1:c9:54:d7:0f:b5:6b: bd:e5:e7:7f:34:80:6e:9c:da:27:89:f0:04:52:ec:ff:e4:d2: 60:08:dd:bd:ef:f6:80:d5:d0:21:c8:0c:d7:97:d5:f5:ed:98: 12:2e:7f:f3:4a:b0:c3:80:1b:ad:6d:63:81:db:98:e5:4a:3a: c3:9a:df:f2:a3:6a:f7:19:cb:94:d8:97:e0:b2:94:52:ae:05: 70:b0:13:7d:36:1d:f1:ff:cf:b9:29:94:d7:97:2d:ca:60:dd: 15:c9:b9:25:00:ca:cb:50:20:c8:c7:a1:d8:41:00:db:b0:e2: 2b:d5:1d:dc:25:d0:d7:d6:e5:e8:45:f4:75:3d:75:4c:8b:2b: 74:5b:1c:e0:72:6d:33:3f:bf:2c:ef:f2:e4:63:27:6e:b4:4d: 98:e8:6e:f5:7e:10:cf:c5:ed:8d:7a:b0:69:24:89:aa:95:b0: 09:ca:ab:f7:90:c8:4a:7d:44:67:41:3d:8c:cc:ff:e0:3d:5a: 23:5e:db:f0:16:dc:75:9a:83:08:ed:88:71:5e:90:12:8a:83: bd:8d:be:05:94:cc:f8:9c:ed:b2:c1:38:2a:e4:d9:40:84:3c: 9e:53:4f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUwNTMwMjA1OTA3WhcNMjUwNjA2MjA1OTA3WjAYMRYwFAYD VQQDEw02ODNhMWMxYi0yNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NFIREKGDYdDr2NtPCJWibdYvAqldeWJh8edyn00G1sinI2/6LMQY3t7BaF4 Yxpyrr0F5Wb1GOspHl3w69XR5ELXCKvtDFUwqJ3p8zYhNzJH2hH5PET4SntIIozy siBsLFqGbVX/m1d3fVCHTFuPACb9mVXBxMcPfBIaqX5ctevyf4jevjGOidXr8e60 i97TrXJ/PhXjHg5QVnJE/mei7lZ/InC74DYQnNXacShYHpp2HmmfMF/IYvogLG/W sfSFxIbL1hpQJb8TQoV671g3XQIH+fCNf3nNxJxR+leifpcFgrgskFHR55gUU5aE htT+YxDGGxqUlyXhVaI0CR6DCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ9qZ/0 SrsgELAQp0OCzt66NlRMMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFfcfmlF4or79VzwTiDF49ROw0lLbXpBrpAqoFA+HJVNcPtWu95ed/ NIBunNonifAEUuz/5NJgCN297/aA1dAhyAzXl9X17ZgSLn/zSrDDgButbWOB25jl SjrDmt/yo2r3GcuU2JfgspRSrgVwsBN9Nh3x/8+5KZTXly3KYN0VybklAMrLUCDI x6HYQQDbsOIr1R3cJdDX1uXoRfR1PXVMiyt0Wxzgcm0zP78s7/LkYydutE2Y6G71 fhDPxe2NerBpJImqlbAJyqv3kMhKfURnQT2MzP/gPVojXtvwFtx1moMI7YhxXpAS ioO9jb4FlMz4nO2ywTgq5NlAhDyeU0+X -----END CERTIFICATE-----Generated at Sat May 31 17:18:54 2025 by rpki-client