$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: NYLCP4Ms0vd3jYIc9mi5AQypD5aQ95mzfmI0n7af7eM= Subject key identifier: 01:83:A2:0F:AF:B4:A7:E0:97:31:36:55:1B:90:FA:CD:93:1B:19:1E Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: 0101 Signing time: Sat 31 May 2025 04:45:19 +0000 Manifest this update: Sat 31 May 2025 04:45:18 +0000 Manifest next update: Sat 07 Jun 2025 04:45:18 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: oSHfCB1PSYzAAdbo47ZLYrinzae9u65zvaOEZOKwqpI=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: May 31 04:45:18 2025 GMT Not After : Jun 7 04:45:18 2025 GMT Subject: CN=683a895e-6263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:94:62:b8:f9:4b:dd:59:cb:fe:85:ef:92: cf:56:13:45:d4:99:1e:0c:0f:a4:0e:fc:e0:71:80: fb:dd:7c:d2:75:9b:78:ac:98:6b:7c:6b:32:93:a6: 37:65:ab:f3:06:36:99:d2:10:b0:9c:76:2d:ee:37: ad:b3:72:8b:a0:62:14:f4:d0:87:7d:3d:92:96:14: 7e:23:2d:be:76:ec:65:c9:94:7f:f2:f9:1d:7c:d9: a4:84:e7:2b:e7:23:77:d2:1d:e9:94:53:d4:c0:c5: a9:30:90:a0:cc:0b:59:1d:38:b8:33:c9:5e:60:5a: 70:94:9b:2d:32:84:0e:c6:45:58:e4:51:0d:76:0a: 1f:38:c7:8d:a7:68:82:e9:69:58:2b:01:09:46:f6: 38:99:67:5d:59:db:ee:cd:70:52:21:b3:84:30:d3: 66:ad:f5:c7:df:f4:09:5b:e9:93:4e:5c:e2:1c:f2: df:0e:9d:75:b6:04:a3:b1:06:16:cc:34:c6:b1:65: 86:d8:b9:6c:d3:5c:2b:c2:a2:3e:1d:97:b8:66:1d: 99:87:4d:64:87:69:f9:3f:a2:c4:35:f1:27:fd:4c: a0:41:95:ea:eb:d7:57:ae:e5:5c:1b:1f:5b:32:29: d8:75:15:b4:eb:44:52:49:b4:c5:28:33:90:85:57: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:A2:0F:AF:B4:A7:E0:97:31:36:55:1B:90:FA:CD:93:1B:19:1E X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:99:74:da:cb:2f:57:54:1d:cc:cb:5c:78:3c:98:c7:95: 33:73:bd:18:dd:4c:29:00:db:69:c6:b1:e5:05:a9:d9:d0:0b: ce:11:30:aa:8e:da:c3:a8:12:07:83:b6:5c:66:6c:3e:ee:17: a3:2c:af:c9:54:89:23:e0:77:95:79:b5:ce:f0:54:0f:26:2a: 66:55:6d:45:26:1c:3d:1d:19:8f:bc:22:3a:5d:e8:85:93:de: 66:3e:f4:14:2b:6d:b2:f6:c3:63:6b:bf:85:74:17:a3:36:31: bd:ea:44:67:14:1f:94:71:30:1d:aa:10:4d:99:9f:7f:99:81: a1:75:0c:47:31:f8:9c:be:05:27:80:22:72:31:c6:db:49:42: c3:29:1f:8c:e1:d3:b2:bd:20:b8:47:d7:62:38:53:5d:27:f9: 9d:cd:85:95:44:01:b1:38:af:ae:20:b2:6a:62:c7:0c:b5:c9: 7d:d1:cc:c1:bb:58:56:59:01:a1:c3:1d:99:8b:e2:2a:f7:0f: ce:4b:c6:12:a6:8d:a6:34:8b:e4:26:84:9b:7c:c9:49:c5:c0: f6:f6:a2:fa:97:f9:8b:c9:b0:6b:20:4d:5b:4c:16:80:4e:fc: 4c:9f:73:b6:97:9c:95:3a:36:be:8f:ef:9b:6f:84:d1:71:09: d3:44:f7:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUwNTMxMDQ0NTE4WhcNMjUwNjA3MDQ0NTE4WjAYMRYwFAYD VQQDEw02ODNhODk1ZS02MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNeUYrj5S91Zy/6F75LPVhNF1JkeDA+kDvzgcYD73XzSdZt4rJhrfGsyk6Y3 ZavzBjaZ0hCwnHYt7jets3KLoGIU9NCHfT2SlhR+Iy2+duxlyZR/8vkdfNmkhOcr 5yN30h3plFPUwMWpMJCgzAtZHTi4M8leYFpwlJstMoQOxkVY5FENdgofOMeNp2iC 6WlYKwEJRvY4mWddWdvuzXBSIbOEMNNmrfXH3/QJW+mTTlziHPLfDp11tgSjsQYW zDTGsWWG2Lls01wrwqI+HZe4Zh2Zh01kh2n5P6LENfEn/UygQZXq69dXruVcGx9b MinYdRW060RSSbTFKDOQhVc3wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGDog+v tKfglzE2VRuQ+s2TGxkeMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6y5l02ssvV1QdzMtceDyYx5Uzc70Y3UwpANtpxrHlBanZ0AvOETCq jtrDqBIHg7ZcZmw+7hejLK/JVIkj4HeVebXO8FQPJipmVW1FJhw9HRmPvCI6XeiF k95mPvQUK22y9sNja7+FdBejNjG96kRnFB+UcTAdqhBNmZ9/mYGhdQxHMficvgUn gCJyMcbbSULDKR+M4dOyvSC4R9diOFNdJ/mdzYWVRAGxOK+uILJqYscMtcl90czB u1hWWQGhwx2Zi+Iq9w/OS8YSpo2mNIvkJoSbfMlJxcD29qL6l/mLybBrIE1bTBaA TvxMn3O2l5yVOja+j++bb4TRcQnTRPeE -----END CERTIFICATE-----Generated at Sat May 31 17:01:12 2025 by rpki-client