$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: YgK/nB8LhElL3KW+sveAWfy0XKtiXQQO/lk52FoMzaM= Subject key identifier: 79:AD:28:C1:4B:14:2C:08:FC:5D:A7:8B:4D:C0:72:D8:28:5D:D2:79 Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: 8A Signing time: Sat 31 May 2025 06:11:55 +0000 Manifest this update: Sat 31 May 2025 06:11:54 +0000 Manifest next update: Sat 07 Jun 2025 06:11:54 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: MgTrI2wNd5K0D2hW1drcmg+rxfiZBZVy/lGD/Q16Lgc=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: May 31 06:11:54 2025 GMT Not After : Jun 7 06:11:54 2025 GMT Subject: CN=683a9dab-756c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1d:39:0e:3f:42:35:35:5f:90:65:ac:20:8c: 17:07:13:e9:54:62:8e:34:3a:87:07:70:79:86:82: 49:9d:87:07:8f:9b:80:99:4e:3f:3d:aa:b3:f3:98: 89:3c:f4:69:39:3c:0e:6e:31:81:e5:ba:35:cb:64: b9:b1:69:10:7d:43:e0:78:54:5a:34:d3:af:12:c6: e1:77:82:b7:a5:ca:13:c5:b1:64:23:6d:8f:32:72: 07:42:8e:d0:fb:ac:ad:1f:c7:c7:01:67:d1:86:ea: 59:47:ab:f7:00:10:b4:f6:2a:b2:c2:0a:f5:5f:71: f6:c0:e9:47:b1:6b:d3:07:e1:5e:e8:32:21:7d:ba: b8:9b:ee:4d:a0:4d:60:bc:37:b9:bf:20:07:c8:92: 5d:4f:ae:73:89:57:cf:c1:7e:0c:3c:bb:4f:6c:cd: c8:d6:78:83:61:44:f4:bc:3c:20:32:2c:8a:1e:fd: 5c:66:cc:01:2a:61:39:7f:4e:82:fb:1c:44:8a:39: 9c:63:ec:2f:4c:e1:f9:3c:d3:90:08:39:8f:51:eb: ae:33:f4:a2:66:2a:d9:24:82:fb:5a:2b:9e:3f:b8: c1:b3:05:0e:0d:c6:b0:dd:97:a3:5d:ac:87:96:80: 19:74:05:8c:1f:1b:39:c0:74:a9:0f:f2:31:41:25: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AD:28:C1:4B:14:2C:08:FC:5D:A7:8B:4D:C0:72:D8:28:5D:D2:79 X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:36:5d:70:d6:90:ea:57:8c:6b:ae:3b:af:9e:8b:16:76:31: 34:dc:8b:54:c7:ab:6b:dd:33:9b:1b:e5:67:ed:66:f0:55:2f: 49:e8:47:d3:05:13:6a:63:5c:39:3d:a8:e0:e1:b1:b4:8e:57: d4:cf:49:43:9f:9a:4f:39:97:4a:3f:fd:44:a7:db:61:17:78: a3:33:c8:4c:83:5e:8b:24:af:d6:01:46:e8:5f:a5:12:37:7e: c0:8b:49:e2:b7:2b:96:a4:9c:bb:3b:3a:54:a4:a4:e3:97:f6: cd:0b:82:e1:73:eb:b2:3f:9b:e2:d9:77:62:36:6e:42:c8:77: 59:71:dd:8e:03:40:bb:96:bf:11:79:a0:f7:47:df:1b:cb:f2: 57:5f:55:df:b5:cd:49:e3:dd:c7:5d:4f:e9:75:ce:00:dc:a6: 9c:8d:c4:9c:01:f5:bc:db:52:5a:dc:78:42:fb:8c:b6:94:2c: 98:2e:77:26:02:fe:02:06:5d:e3:15:23:3f:1c:18:30:55:af: b4:fb:20:59:fa:8f:9e:e7:12:1b:5f:7b:73:2b:eb:eb:56:48: 48:24:38:30:67:f4:5b:fe:f7:20:34:37:cc:17:4d:4d:e9:8c: e9:a5:50:a1:23:9a:3f:7b:46:5e:d4:55:05:c3:8d:a1:88:50: 76:09:63:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUwNTMxMDYxMTU0WhcNMjUwNjA3MDYxMTU0WjAYMRYwFAYD VQQDEw02ODNhOWRhYi03NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4B05Dj9CNTVfkGWsIIwXBxPpVGKONDqHB3B5hoJJnYcHj5uAmU4/Paqz85iJ PPRpOTwObjGB5bo1y2S5sWkQfUPgeFRaNNOvEsbhd4K3pcoTxbFkI22PMnIHQo7Q +6ytH8fHAWfRhupZR6v3ABC09iqywgr1X3H2wOlHsWvTB+Fe6DIhfbq4m+5NoE1g vDe5vyAHyJJdT65ziVfPwX4MPLtPbM3I1niDYUT0vDwgMiyKHv1cZswBKmE5f06C +xxEijmcY+wvTOH5PNOQCDmPUeuuM/SiZirZJIL7WiueP7jBswUODcaw3ZejXayH loAZdAWMHxs5wHSpD/IxQSUYXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmtKMFL FCwI/F2ni03ActgoXdJ5MB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtNl1w1pDqV4xrrjuvnosWdjE03ItUx6tr3TObG+Vn7WbwVS9J6EfT BRNqY1w5Pajg4bG0jlfUz0lDn5pPOZdKP/1Ep9thF3ijM8hMg16LJK/WAUboX6US N37Ai0nityuWpJy7OzpUpKTjl/bNC4Lhc+uyP5vi2XdiNm5CyHdZcd2OA0C7lr8R eaD3R98by/JXX1Xftc1J493HXU/pdc4A3KacjcScAfW821Ja3HhC+4y2lCyYLncm Av4CBl3jFSM/HBgwVa+0+yBZ+o+e5xIbX3tzK+vrVkhIJDgwZ/Rb/vcgNDfMF01N 6YzppVChI5o/e0Ze1FUFw42hiFB2CWMc -----END CERTIFICATE-----Generated at Sat May 31 17:57:45 2025 by rpki-client