$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: yp7sXj9As+qngApcpR5KEkUjJsE9QuRvUv+h6gFsRI8= Subject key identifier: D0:75:B2:53:3B:0A:49:2D:F2:DA:6B:E1:07:C7:FF:37:53:E2:65:88 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: CB Signing time: Sat 31 May 2025 05:19:11 +0000 Manifest this update: Sat 31 May 2025 05:19:10 +0000 Manifest next update: Sat 07 Jun 2025 05:19:10 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: ydKHJ1rajitz8Aef7pCQbj5Rdu3Qn7fAUjt4RDWQ7K8=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: May 31 05:19:10 2025 GMT Not After : Jun 7 05:19:10 2025 GMT Subject: CN=683a914e-9fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:86:a0:2a:39:8d:fa:9c:be:c9:6a:3c:8c: f4:f4:22:f5:e7:79:e4:bc:3a:dd:8b:14:d4:d4:e4: d8:66:30:3d:9e:46:bc:13:4c:8e:a7:24:a4:8e:19: f1:2a:18:29:09:eb:33:32:3b:f8:38:3f:f2:5b:78: 1a:92:4c:a6:fe:3b:75:c4:0a:e0:0c:ea:ee:3f:75: 67:a5:1b:59:06:84:80:3d:b1:d7:ac:dc:26:78:c8: 94:20:51:b6:09:3f:4f:f1:e0:12:bd:c6:ae:68:f8: 8a:1c:1b:1d:a5:c3:ca:e1:b8:86:00:36:11:96:cb: de:11:95:aa:c4:bc:c3:24:36:c3:0a:69:52:a4:26: 8d:15:9d:97:72:41:1f:35:9b:df:64:a5:fb:98:fe: b5:b2:93:88:b7:56:2e:9d:6c:8f:16:a8:71:93:bd: 63:2a:c1:c1:bb:25:e4:8e:0b:d0:d9:55:e6:e8:2d: 75:c5:73:01:cf:59:d1:29:cb:fd:b7:f4:88:49:18: ef:2b:de:4a:da:dc:37:81:6c:97:0a:c7:a0:03:4c: 61:7b:75:41:ec:cb:ce:8d:21:53:b2:55:85:5f:81: 98:95:44:ad:7c:d4:df:e5:b5:77:a7:cd:ea:42:41: 2a:16:40:9b:56:a5:c3:50:03:c7:21:85:59:69:db: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:75:B2:53:3B:0A:49:2D:F2:DA:6B:E1:07:C7:FF:37:53:E2:65:88 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7a:4f:0d:bb:eb:1a:ab:db:26:b7:8b:85:6c:c8:2c:2f:79: 6c:82:e9:5c:07:cc:e9:26:59:3e:86:0c:71:78:b0:3d:8f:72: e2:df:53:94:8e:30:eb:6c:de:ff:bb:c0:9c:46:dc:2f:d9:52: f9:2e:82:ec:bf:ad:42:51:9a:34:61:42:5f:56:71:bf:fe:84: ac:aa:69:2e:9b:ba:23:f7:74:21:35:b6:fb:42:65:95:4e:9c: 86:33:ee:66:53:73:ca:1d:37:37:a3:1c:78:12:1e:4b:67:10: 47:ca:d6:d9:3a:a6:27:01:5f:44:8c:64:8d:3a:84:14:6a:0f: 44:17:91:54:d6:1b:d2:5a:a6:89:a6:a5:c9:cf:02:1c:33:a0: a7:d9:28:b4:d3:51:95:13:a9:f1:45:52:5c:c2:fc:9e:03:ce: 07:ce:16:6c:0c:5d:91:c3:10:cc:01:bf:b4:66:84:aa:2f:67: d7:6b:6d:75:3f:eb:ca:a3:4b:05:6f:84:04:f2:e4:01:7f:25: 05:a8:cc:5d:92:a6:9e:ef:b6:95:83:57:60:a0:2a:2e:ea:bc: 1e:f9:4f:b8:cb:e3:30:fe:3b:a7:ef:a0:07:66:d3:76:67:30: 84:b8:79:64:d6:ad:da:a5:f1:72:ea:05:2f:57:91:ae:31:c8: 56:6f:da:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwNTMxMDUxOTEwWhcNMjUwNjA3MDUxOTEwWjAYMRYwFAYD VQQDEw02ODNhOTE0ZS05ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsSGoCo5jfqcvslqPIz09CL153nkvDrdixTU1OTYZjA9nka8E0yOpySkjhnx KhgpCeszMjv4OD/yW3gakkym/jt1xArgDOruP3VnpRtZBoSAPbHXrNwmeMiUIFG2 CT9P8eASvcauaPiKHBsdpcPK4biGADYRlsveEZWqxLzDJDbDCmlSpCaNFZ2XckEf NZvfZKX7mP61spOIt1YunWyPFqhxk71jKsHBuyXkjgvQ2VXm6C11xXMBz1nRKcv9 t/SISRjvK95K2tw3gWyXCsegA0xhe3VB7MvOjSFTslWFX4GYlUStfNTf5bV3p83q QkEqFkCbVqXDUAPHIYVZadsyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB1slM7 Ckkt8tpr4QfH/zdT4mWIMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOek8Nu+saq9smt4uFbMgsL3lsgulcB8zpJlk+hgxxeLA9j3Li31OU jjDrbN7/u8CcRtwv2VL5LoLsv61CUZo0YUJfVnG//oSsqmkum7oj93QhNbb7QmWV TpyGM+5mU3PKHTc3oxx4Eh5LZxBHytbZOqYnAV9EjGSNOoQUag9EF5FU1hvSWqaJ pqXJzwIcM6Cn2Si001GVE6nxRVJcwvyeA84HzhZsDF2RwxDMAb+0ZoSqL2fXa211 P+vKo0sFb4QE8uQBfyUFqMxdkqae77aVg1dgoCou6rwe+U+4y+Mw/jun76AHZtN2 ZzCEuHlk1q3apfFy6gUvV5GuMchWb9rL -----END CERTIFICATE-----Generated at Sat May 31 17:08:50 2025 by rpki-client