$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: p72YlcISWuLmSlG6LWTF4U0BKTFIfXSVtZmkZ9sHEDM= Subject key identifier: 0A:55:5C:BC:B9:51:3D:1C:30:B8:67:C0:3D:D5:29:14:8E:A2:AE:D0 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 83 Signing time: Thu 13 Mar 2025 04:38:18 +0000 Manifest this update: Thu 13 Mar 2025 04:38:17 +0000 Manifest next update: Thu 20 Mar 2025 04:38:17 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: 5THrABZHmDC9461tx4hrUPyVTfJuW51PCW5RW3bSKIM=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: SBjUcQwgq8eYibunzuM6B0MYbh92vDqaJjZbumGPIz4=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A Validity Not Before: Mar 13 04:38:17 2025 GMT Not After : Mar 20 04:38:17 2025 GMT Subject: CN=67d26139-f794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:56:af:7e:bc:97:71:f7:8f:0f:86:e6:67:e4: 28:fa:ca:a5:7d:06:13:8e:c9:2c:c7:00:df:71:6a: fe:c6:ed:ac:1d:f6:a0:d8:20:5f:77:bd:61:c6:97: 28:ed:1d:88:49:7c:f7:ba:3a:da:36:64:60:5a:e7: ec:b0:81:64:f1:28:01:ea:3d:9d:7d:d7:0d:98:58: 22:e2:fb:8d:3d:bb:37:cc:63:d5:3a:76:fa:96:48: 20:d3:2e:83:7e:e5:b3:c4:86:37:6f:ed:68:4f:e5: dd:3a:7b:6e:14:1e:0a:67:6f:ca:4d:d2:7a:92:15: 71:40:64:b7:45:21:39:9a:16:c8:a5:df:97:f4:68: ca:45:35:58:55:8f:1b:27:35:25:fe:8f:00:b4:8d: 8f:b9:0e:de:2e:bc:2d:66:1e:4c:e4:d7:c7:0e:c8: 28:f1:69:82:1b:4d:d6:c6:8e:08:72:78:6a:4d:2d: 65:6e:11:98:32:eb:d7:c1:99:1b:93:ed:6c:8d:36: 4d:8d:3d:4d:a6:15:a0:c3:14:98:26:8d:80:0d:04: 56:00:ee:2f:36:aa:9b:16:fd:da:07:98:f4:2b:f1: 9e:5f:09:4f:c5:84:da:ee:e5:98:8e:cb:73:d4:24: ab:fa:d0:05:68:05:3e:ad:11:b8:9c:b6:9f:41:9d: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:5C:BC:B9:51:3D:1C:30:B8:67:C0:3D:D5:29:14:8E:A2:AE:D0 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3c:8f:9c:46:24:58:2e:11:d1:ee:dc:8c:0b:f9:5f:e1:9e: 3b:b3:78:22:0b:37:c4:d6:ad:02:a0:d7:a3:4e:b6:30:d0:6d: 10:e8:37:a6:84:d5:5b:cf:d6:58:cc:94:27:91:e0:98:47:46: bd:b9:7f:30:80:46:39:ad:46:ae:b2:90:49:ca:b3:df:9d:2c: 87:1e:63:9a:8a:c4:13:98:69:dc:e2:fd:cd:e5:ad:5a:4b:d6: 50:6b:49:9b:e6:ca:52:61:1a:80:3f:ee:86:5f:a4:31:bf:5f: 9f:59:3e:b7:d1:54:e6:9e:d1:90:ca:89:6f:7f:c4:83:fa:a9: 09:c0:3f:3c:c3:74:75:0c:d9:ef:e9:50:67:6e:76:f5:e6:e3: 34:84:ca:79:3a:35:b4:82:25:a2:f2:66:f5:3f:4f:2e:dc:b7: 8a:d0:2f:71:e6:0c:d5:84:1d:30:25:d8:74:a4:5e:2d:a8:ec: fd:3c:74:c3:22:a5:2a:44:3e:6d:b9:34:4e:e9:d0:4b:e3:1c: 31:6d:9c:32:e3:0c:fa:1b:91:89:36:12:fb:3c:bf:ab:36:09: d3:28:04:1b:da:1c:46:b7:7e:f1:b1:24:ac:2e:2a:f0:aa:ce: 25:9d:24:ea:fe:78:74:4d:18:e9:d2:a2:4e:ad:d3:cb:25:07: 67:12:82:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjUwMzEzMDQzODE3WhcNMjUwMzIwMDQzODE3WjAYMRYwFAYD VQQDEw02N2QyNjEzOS1mNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lavfryXcfePD4bmZ+Qo+sqlfQYTjsksxwDfcWr+xu2sHfag2CBfd71hxpco 7R2ISXz3ujraNmRgWufssIFk8SgB6j2dfdcNmFgi4vuNPbs3zGPVOnb6lkgg0y6D fuWzxIY3b+1oT+XdOntuFB4KZ2/KTdJ6khVxQGS3RSE5mhbIpd+X9GjKRTVYVY8b JzUl/o8AtI2PuQ7eLrwtZh5M5NfHDsgo8WmCG03Wxo4IcnhqTS1lbhGYMuvXwZkb k+1sjTZNjT1NphWgwxSYJo2ADQRWAO4vNqqbFv3aB5j0K/GeXwlPxYTa7uWYjstz 1CSr+tAFaAU+rRG4nLafQZ3PIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApVXLy5 UT0cMLhnwD3VKRSOoq7QMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPI+cRiRYLhHR7tyMC/lf4Z47s3giCzfE1q0CoNejTrYw0G0Q6Dem hNVbz9ZYzJQnkeCYR0a9uX8wgEY5rUauspBJyrPfnSyHHmOaisQTmGnc4v3N5a1a S9ZQa0mb5spSYRqAP+6GX6Qxv1+fWT630VTmntGQyolvf8SD+qkJwD88w3R1DNnv 6VBnbnb15uM0hMp5OjW0giWi8mb1P08u3LeK0C9x5gzVhB0wJdh0pF4tqOz9PHTD IqUqRD5tuTRO6dBL4xwxbZwy4wz6G5GJNhL7PL+rNgnTKAQb2hxGt37xsSSsLirw qs4lnSTq/nh0TRjp0qJOrdPLJQdnEoKR -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:49 2025 by rpki-client