$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: t2wAJghlt59c9xP1+7Fwh2S+5tOTBzR7yRwxdbGXQZE= Subject key identifier: F7:01:DA:0E:8E:1F:D2:1F:95:80:24:5C:D2:5F:09:B4:AD:93:7D:EB Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A09 Signing time: Fri 30 May 2025 20:02:56 +0000 Manifest this update: Fri 30 May 2025 20:02:54 +0000 Manifest next update: Fri 06 Jun 2025 20:02:54 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: HiakidWLVNZbYq11QIFNsM6HB+s4oIDaJ5ATpWKxxuQ=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2586 (0xa1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: May 30 20:02:54 2025 GMT Not After : Jun 6 20:02:54 2025 GMT Subject: CN=683a0eef-8575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:82:54:8d:a2:e6:d4:72:81:ee:94:da:e2: cb:5e:e3:7e:b7:66:61:b5:d4:bc:96:60:ec:01:c1: 35:ad:66:0f:c0:bf:a6:36:20:11:25:63:17:33:52: 60:04:f3:35:7e:b6:b3:ad:42:e9:4c:e8:25:4a:db: 61:48:7d:12:68:e5:81:7d:4b:f6:aa:2d:b0:25:ff: 3b:01:a1:8d:18:c5:57:82:9c:95:e4:d4:b7:46:66: 8a:d3:85:8c:1f:47:f6:8c:52:53:4f:06:ca:44:17: 14:73:54:97:4c:42:ea:f9:0b:df:36:c2:f5:c4:e1: 29:c3:c1:59:0f:dd:b1:9f:88:21:7c:c9:b4:56:ea: f3:47:b7:41:31:81:b5:98:84:ae:43:b3:74:11:0e: 8c:66:1f:32:41:95:81:18:5d:b4:bb:73:eb:20:59: fb:20:7f:00:29:ad:26:81:95:8b:b1:f3:7f:95:80: 2d:d6:3f:af:90:57:f0:f5:9e:2b:0a:4a:4e:a7:6d: af:3a:a5:6c:9e:5b:b8:f0:8d:94:d1:76:30:8c:a4: c7:4e:90:2e:98:04:7e:f3:68:8d:f8:4c:c7:87:5d: e6:48:70:90:2f:9b:71:6a:c8:d4:c4:da:95:d4:56: e4:17:c9:b1:cf:3b:e7:ac:95:24:7f:d4:d4:67:f9: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:01:DA:0E:8E:1F:D2:1F:95:80:24:5C:D2:5F:09:B4:AD:93:7D:EB X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c3:e4:44:1a:fe:cc:e2:42:c7:2a:6d:5e:8d:1f:32:dc:26: 1a:ec:b9:27:2d:77:b8:30:6b:9c:fc:f1:0f:c3:a3:8d:5a:6c: b0:ba:a1:80:76:cf:75:40:72:c2:d1:cc:cd:d8:00:85:a3:84: 12:e5:15:18:7a:1d:97:74:3a:08:a4:40:43:8e:3c:6f:85:a5: 0e:40:5f:b3:b9:fc:78:35:d8:76:89:7d:f3:d0:17:c7:62:67: d2:66:d9:36:e5:8a:34:67:59:9b:a6:18:a5:02:a5:01:cf:17: 4c:52:08:df:41:b9:b9:c0:83:c8:fb:88:c5:5a:7c:41:78:58: f8:b9:b7:e1:23:82:9c:c5:74:69:c2:b5:7c:50:29:36:22:91: e6:68:41:33:25:3a:cb:04:57:86:28:53:ff:4f:a6:fe:ce:ff: 0c:81:44:d9:03:8d:88:e0:be:62:62:6d:60:ca:2b:d9:90:57: c2:92:2e:8e:86:89:b2:53:29:9c:98:19:ce:2c:e1:d1:48:8a: c7:a1:e7:a6:ca:9d:e2:a3:59:f4:ae:da:3e:50:a9:56:64:13: d8:12:07:86:11:e0:2c:96:76:5f:39:33:57:60:0e:d7:45:bb: a9:fa:e0:65:2f:8b:ac:e6:72:45:7f:77:e7:35:9d:ee:bd:af: 02:ea:5e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUwNTMwMjAwMjU0WhcNMjUwNjA2MjAwMjU0WjAYMRYwFAYD VQQDEw02ODNhMGVlZi04NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3byCVI2i5tRyge6U2uLLXuN+t2ZhtdS8lmDsAcE1rWYPwL+mNiARJWMXM1Jg BPM1frazrULpTOglStthSH0SaOWBfUv2qi2wJf87AaGNGMVXgpyV5NS3RmaK04WM H0f2jFJTTwbKRBcUc1SXTELq+QvfNsL1xOEpw8FZD92xn4ghfMm0VurzR7dBMYG1 mISuQ7N0EQ6MZh8yQZWBGF20u3PrIFn7IH8AKa0mgZWLsfN/lYAt1j+vkFfw9Z4r CkpOp22vOqVsnlu48I2U0XYwjKTHTpAumAR+82iN+EzHh13mSHCQL5txasjUxNqV 1FbkF8mxzzvnrJUkf9TUZ/ki5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcB2g6O H9IflYAkXNJfCbStk33rMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmw+REGv7M4kLHKm1ejR8y3CYa7LknLXe4MGuc/PEPw6ONWmywuqGA ds91QHLC0czN2ACFo4QS5RUYeh2XdDoIpEBDjjxvhaUOQF+zufx4Ndh2iX3z0BfH YmfSZtk25Yo0Z1mbphilAqUBzxdMUgjfQbm5wIPI+4jFWnxBeFj4ubfhI4KcxXRp wrV8UCk2IpHmaEEzJTrLBFeGKFP/T6b+zv8MgUTZA42I4L5iYm1gyivZkFfCki6O homyUymcmBnOLOHRSIrHoeemyp3io1n0rto+UKlWZBPYEgeGEeAslnZfOTNXYA7X Rbup+uBlL4us5nJFf3fnNZ3uva8C6l4W -----END CERTIFICATE-----Generated at Sat May 31 16:46:49 2025 by rpki-client