$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft File: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json) Hash identifier: 7h1Y1NzFuCqbpZdquFKpHiMumMgP1ng5D9AdPPQalTE= Subject key identifier: 6D:D4:D9:7F:05:C1:77:4E:18:63:69:86:3D:52:51:9A:D3:D3:B6:F0 Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E Certificate issuer: /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Certificate serial: 0B2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft Manifest number: 0B22 Signing time: Fri 30 May 2025 19:25:43 +0000 Manifest this update: Fri 30 May 2025 19:25:42 +0000 Manifest next update: Fri 06 Jun 2025 19:25:42 +0000 Files and hashes: 1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: 7ILRDBRrhFpN8K52eJrry7wKgx23BHC5X9aR65hlAjc=) 2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Validity Not Before: May 30 19:25:42 2025 GMT Not After : Jun 6 19:25:42 2025 GMT Subject: CN=683a0636-6139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:82:5a:1f:75:94:57:67:64:62:06:6b:af: 1b:ec:e6:7b:d8:2e:0d:fa:12:d6:1e:66:c8:b8:49: 46:2e:eb:14:27:5a:4e:34:c9:e9:2f:b4:ef:5a:ec: ee:97:ba:86:7c:74:99:35:33:29:66:5e:f4:1f:c9: 9b:64:f0:0b:d8:77:ad:94:85:2d:d8:08:f9:fe:b8: f2:ad:5e:38:58:44:43:bb:dd:79:01:eb:57:44:ea: d3:8f:37:24:bc:9f:15:51:44:2f:62:5a:b2:0c:83: b6:8b:f1:eb:54:8c:16:df:84:d9:47:55:cc:5b:0c: 68:7a:14:44:20:d8:86:0b:37:f0:53:b7:96:c4:b7: 1b:b1:84:02:d5:4d:e4:f4:ef:42:c9:71:67:79:da: 3f:54:59:56:35:f2:65:62:32:0f:98:3a:2c:02:c2: 40:a0:39:b1:31:a9:42:9d:ee:60:31:99:ba:e5:93: 50:a2:1f:86:d8:de:57:c4:a2:af:ed:77:97:c3:83: f5:cf:9d:a1:c3:56:0e:21:42:57:e4:5d:eb:f3:e5: aa:f4:df:6e:e8:a5:d4:eb:83:c8:6c:53:a4:e6:5b: d2:62:80:d5:c1:2c:a9:92:5c:df:13:40:3d:39:84: be:01:69:9f:7a:c8:51:c4:aa:41:a4:0a:82:6c:c3: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D4:D9:7F:05:C1:77:4E:18:63:69:86:3D:52:51:9A:D3:D3:B6:F0 X509v3 Authority Key Identifier: keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:35:6f:80:f4:74:aa:c5:b9:92:a4:c0:8f:c5:d8:73:a0:ea: 0b:bb:79:35:ff:78:ff:a0:1b:52:0a:7d:f0:69:98:8e:2c:62: 4e:6f:79:92:97:d9:78:47:2a:08:04:36:10:bb:cc:6b:78:8f: eb:38:b2:9d:41:c4:07:31:72:e7:b8:f5:78:46:11:61:14:43: 3f:81:56:af:76:bb:4a:83:30:8a:5b:2e:01:b6:11:d1:70:e7: 84:35:e9:94:db:13:c8:da:50:ec:2f:42:05:ef:e9:07:33:ae: cf:52:1f:7f:62:8d:56:0e:cc:87:59:43:36:74:f8:9c:b4:3f: 35:cc:dc:80:e9:c1:d1:ca:98:44:7d:83:4d:e6:0b:47:ca:b8: 4d:d9:1a:0d:23:8c:15:1b:e0:d0:3e:7d:cf:f5:b7:6f:98:06: 8c:d8:61:b1:58:1b:61:df:3b:a5:14:d2:77:37:8f:f1:06:d6: f4:8d:6d:f7:85:cf:84:ad:e7:89:a6:f0:bc:94:bd:f5:37:bf: 1f:89:c4:1f:c5:1e:b9:9c:f6:8a:b4:1c:e1:be:1a:2f:b2:f4: 40:b0:6f:ed:f5:e4:2b:08:f0:d1:71:18:7e:36:9f:9c:cf:b7: 91:08:04:2c:e6:5c:9c:b6:40:75:44:5c:58:58:ce:86:aa:6c: ce:4e:18:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM0MTUxMTAvBgNVBAUTKEYwQ0IzNUYxNDVFNjFCMUMyMDQzQUZEMUJBNEUzNTQx NDdDNEI1NUUwHhcNMjUwNTMwMTkyNTQyWhcNMjUwNjA2MTkyNTQyWjAYMRYwFAYD VQQDEw02ODNhMDYzNi02MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPuCWh91lFdnZGIGa68b7OZ72C4N+hLWHmbIuElGLusUJ1pONMnpL7TvWuzu l7qGfHSZNTMpZl70H8mbZPAL2HetlIUt2Aj5/rjyrV44WERDu915AetXROrTjzck vJ8VUUQvYlqyDIO2i/HrVIwW34TZR1XMWwxoehREINiGCzfwU7eWxLcbsYQC1U3k 9O9CyXFnedo/VFlWNfJlYjIPmDosAsJAoDmxMalCne5gMZm65ZNQoh+G2N5XxKKv 7XeXw4P1z52hw1YOIUJX5F3r8+Wq9N9u6KXU64PIbFOk5lvSYoDVwSypklzfE0A9 OYS+AWmfeshRxKpBpAqCbMNpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3U2X8F wXdOGGNphj1SUZrT07bwMB8GA1UdIwQYMBaAFPDLNfFF5hscIEOv0bpONUFHxLVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzQxNS8xMDcyMDk0ODNE RkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4d2dRNl9SdWs0MVFVZkV0 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNczE4VVhtR3h3Z1E2X1J1azQxUVVmRXRWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzQxNS8xMDcyMDk0ODNERkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4 d2dRNl9SdWs0MVFVZkV0VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAINW+A9HSqxbmSpMCPxdhzoOoLu3k1/3j/oBtSCn3waZiOLGJOb3mS l9l4RyoIBDYQu8xreI/rOLKdQcQHMXLnuPV4RhFhFEM/gVavdrtKgzCKWy4BthHR cOeENemU2xPI2lDsL0IF7+kHM67PUh9/Yo1WDsyHWUM2dPictD81zNyA6cHRyphE fYNN5gtHyrhN2RoNI4wVG+DQPn3P9bdvmAaM2GGxWBth3zulFNJ3N4/xBtb0jW33 hc+EreeJpvC8lL31N78ficQfxR65nPaKtBzhvhovsvRAsG/t9eQrCPDRcRh+Np+c z7eRCAQs5lyctkB1RFxYWM6GqmzOThir -----END CERTIFICATE-----Generated at Sat May 31 17:20:41 2025 by rpki-client