$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: 7lSDUFGVp0H6dN/2wjbiZ/TpdyhEw3TUQ9h/eb7Q/xY= Subject key identifier: A9:AF:1A:B3:EC:18:C7:17:F1:1D:E2:E7:E7:0F:6A:C6:E0:59:5E:8C Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CA9 Signing time: Mon 02 Jun 2025 18:18:26 +0000 Manifest this update: Mon 02 Jun 2025 18:18:25 +0000 Manifest next update: Mon 09 Jun 2025 18:18:25 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: RpfZBo/Kzv0FBnhUXhQmQTWhwY6zUC5q8FhQZwmZXec=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Jun 2 18:18:25 2025 GMT Not After : Jun 9 18:18:25 2025 GMT Subject: CN=683deaf2-5b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:02:be:2b:71:6d:5d:f4:0e:a5:57:ff:b4: 71:a6:2b:fb:fa:b4:86:95:44:66:6f:8b:c9:83:3e: e4:2d:9b:ff:92:66:88:9b:05:ff:28:2a:f7:8a:07: 2f:e0:bf:5c:68:92:2f:3d:66:e3:82:a9:7e:6b:65: 6c:a1:7f:4c:e8:4b:f2:e3:96:85:69:95:02:57:bc: 1c:83:c2:05:a1:ad:f6:4f:ff:41:33:56:2e:d4:d6: 28:16:b6:22:7a:88:0a:b2:1e:74:52:0d:9d:f2:6a: c2:4f:eb:b8:8e:3a:f9:40:9c:10:73:16:7a:84:ea: de:a1:57:eb:a3:ef:49:43:2e:2e:c6:83:b0:9a:6f: be:77:61:77:58:9f:fc:56:82:b5:45:d7:a0:7b:84: 66:e5:4a:53:8c:dd:a7:92:33:83:66:04:d6:ed:a8: 35:25:6e:a2:25:cb:ff:ae:e4:3c:b6:c5:57:db:47: 11:59:44:52:c4:36:80:da:75:50:f5:c9:00:fc:63: b4:ec:db:fe:a5:b9:2a:fd:39:08:b6:e7:05:c7:a6: 03:23:4a:31:b6:7f:7e:2c:81:ed:49:53:46:74:0e: 76:7d:c7:c4:70:6f:71:a6:c8:24:09:06:a0:86:ff: 5c:00:0f:31:88:75:71:9b:81:8e:08:b5:e6:a9:98: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:1A:B3:EC:18:C7:17:F1:1D:E2:E7:E7:0F:6A:C6:E0:59:5E:8C X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a5:e8:9b:0e:2e:61:c9:7c:bf:f2:90:a8:26:58:bd:2d:d0: 7d:b4:d2:fa:72:5b:09:68:cb:f6:7d:a6:a7:c8:22:35:7a:57: 28:2a:20:5e:91:40:a8:f4:cd:2a:e9:ed:d1:3e:5c:88:84:31: b5:cd:24:e8:22:71:6b:57:a7:c6:31:76:3b:ae:b6:98:eb:04: 50:f8:6d:82:79:41:58:5c:08:bb:24:56:0d:db:77:63:cb:8b: cc:03:92:73:af:c7:ee:ec:7b:1b:d4:93:a8:b4:41:94:2c:e6: f3:88:46:ff:4a:91:de:f6:aa:c6:ce:8b:ff:d2:69:e5:72:85: 27:19:93:86:d8:94:16:e3:49:34:70:9f:47:30:f0:a2:6b:af: 80:18:64:12:a4:8d:29:c5:57:b3:c6:ff:8e:f1:90:1f:61:07: 21:8a:f6:e8:7a:67:29:d7:63:01:2e:ce:11:78:33:b2:49:ec: 91:2b:31:cc:65:63:22:c3:d4:56:73:28:60:f1:68:00:2c:90: fa:9b:94:bd:4e:b2:24:9f:78:56:4b:90:26:c4:ba:5e:fb:ce: 70:16:ba:8d:ef:4d:e5:f5:d5:00:20:76:32:20:43:2b:14:ea: ca:bd:54:35:90:44:f1:f5:f7:43:bd:a4:49:2d:dd:55:76:ad: 07:e6:4b:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwNjAyMTgxODI1WhcNMjUwNjA5MTgxODI1WjAYMRYwFAYD VQQDEw02ODNkZWFmMi01YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5twCvitxbV30DqVX/7Rxpiv7+rSGlURmb4vJgz7kLZv/kmaImwX/KCr3igcv 4L9caJIvPWbjgql+a2VsoX9M6Evy45aFaZUCV7wcg8IFoa32T/9BM1Yu1NYoFrYi eogKsh50Ug2d8mrCT+u4jjr5QJwQcxZ6hOreoVfro+9JQy4uxoOwmm++d2F3WJ/8 VoK1Rdege4Rm5UpTjN2nkjODZgTW7ag1JW6iJcv/ruQ8tsVX20cRWURSxDaA2nVQ 9ckA/GO07Nv+pbkq/TkItucFx6YDI0oxtn9+LIHtSVNGdA52fcfEcG9xpsgkCQag hv9cAA8xiHVxm4GOCLXmqZgJlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmvGrPs GMcX8R3i5+cPasbgWV6MMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXpeibDi5hyXy/8pCoJli9LdB9tNL6clsJaMv2faanyCI1elcoKiBe kUCo9M0q6e3RPlyIhDG1zSToInFrV6fGMXY7rraY6wRQ+G2CeUFYXAi7JFYN23dj y4vMA5Jzr8fu7Hsb1JOotEGULObziEb/SpHe9qrGzov/0mnlcoUnGZOG2JQW40k0 cJ9HMPCia6+AGGQSpI0pxVezxv+O8ZAfYQchivboemcp12MBLs4ReDOySeyRKzHM ZWMiw9RWcyhg8WgALJD6m5S9TrIkn3hWS5AmxLpe+85wFrqN703l9dUAIHYyIEMr FOrKvVQ1kETx9fdDvaRJLd1Vdq0H5kvt -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:21 2025 by rpki-client