$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: 5p5oHTtEeaZpy7T8BQx1PkLInJg6j8J7JQAcpCK6XKg= Subject key identifier: 19:D0:43:EB:1A:93:60:CD:A5:88:EC:23:B5:71:E6:45:92:4E:3E:F6 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0CF7 Signing time: Fri 30 May 2025 18:17:37 +0000 Manifest this update: Fri 30 May 2025 18:17:36 +0000 Manifest next update: Fri 06 Jun 2025 18:17:36 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: lhEtub4C1ZAjETXCYTmJX1jg/usK5V+knC3orJ0S8ik=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: May 30 18:17:36 2025 GMT Not After : Jun 6 18:17:36 2025 GMT Subject: CN=6839f641-3ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ae:de:5e:48:af:90:28:aa:d1:f3:05:10:2d: 0a:53:84:5c:3c:cc:20:73:44:52:94:f9:0e:41:37: 18:52:d6:78:e4:d8:27:58:1d:cd:e1:f7:ba:e7:7f: 6f:e9:ad:4f:ec:3d:1c:ba:84:c7:cd:db:f9:7e:30: a3:e8:e7:62:b8:e9:0a:49:3f:8c:e9:ac:6d:fc:ef: 6b:87:e3:ec:37:d3:01:4e:ab:e9:59:51:ca:54:50: 33:39:07:e4:4b:18:c4:1e:79:2e:dd:d8:5d:88:d6: e6:38:f1:43:d1:b5:bb:b5:3d:a6:f2:19:81:f7:3f: f3:51:9f:62:ec:c1:f2:2d:da:ac:3f:2b:38:b1:02: 04:84:c1:15:f9:2c:fb:cd:32:a6:3d:d4:08:27:51: c0:87:5d:65:3a:d2:e3:ab:cb:cf:2e:6e:65:23:c6: 20:bf:59:c3:4a:73:d0:6b:46:3b:d5:0a:9c:37:d4: 9d:05:c7:a3:fa:37:c2:51:6d:18:ed:1d:d7:b3:6b: 9c:6a:f9:29:ed:38:15:2d:21:c6:54:55:e7:c0:b8: a0:8c:db:0d:e7:1a:c4:bb:50:e3:0e:9c:bd:f7:07: 69:f1:88:b9:04:02:e5:41:e2:10:18:53:b8:5d:0b: 7d:4e:8c:b7:4c:29:6a:33:a3:12:98:08:20:6b:6d: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D0:43:EB:1A:93:60:CD:A5:88:EC:23:B5:71:E6:45:92:4E:3E:F6 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:6f:e3:e6:d3:fb:2f:5c:11:d4:b3:05:eb:4c:c2:96:d7: 5b:ce:b1:63:fa:35:fb:aa:03:b3:2c:b0:b4:a3:e1:05:d4:b4: 97:b3:5f:75:3e:2a:db:b8:93:46:c3:e6:67:df:04:0a:4c:9a: 8c:09:d3:f4:a6:72:6a:86:ad:c9:af:26:e3:86:9e:63:3a:9a: 6c:76:9f:a8:30:98:8f:34:2a:ab:f8:98:a3:11:9c:2f:67:e6: ad:34:fd:f9:01:3d:92:36:d3:3b:cf:00:6b:95:7f:15:e1:bf: b0:05:d4:d5:a4:18:10:20:ef:51:3e:0d:8c:5b:3f:e0:2c:8f: 73:96:e7:8f:d0:92:9e:ff:59:bf:55:b3:c6:2c:c8:35:e2:4d: fe:98:85:52:9c:0c:84:37:ec:8d:36:7d:9a:f5:69:05:26:03: 73:13:44:03:c8:ce:f0:3f:56:05:7b:0f:b1:cd:56:88:2c:2a: 3a:03:9d:25:0a:87:ce:48:47:aa:66:05:f7:fd:d1:61:0f:ae: 34:08:cf:b0:7c:00:56:1f:0c:83:1f:c5:0c:25:4e:62:25:4f: f5:8d:19:06:35:2c:f1:1a:0d:ac:55:49:7b:00:86:b8:3a:f6: 13:bf:d8:01:e5:50:c6:15:64:47:9a:ba:e9:cf:b8:92:77:e7: 62:79:d7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUwNTMwMTgxNzM2WhcNMjUwNjA2MTgxNzM2WjAYMRYwFAYD VQQDEw02ODM5ZjY0MS0zYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4K7eXkivkCiq0fMFEC0KU4RcPMwgc0RSlPkOQTcYUtZ45NgnWB3N4fe6539v 6a1P7D0cuoTHzdv5fjCj6OdiuOkKST+M6axt/O9rh+PsN9MBTqvpWVHKVFAzOQfk SxjEHnku3dhdiNbmOPFD0bW7tT2m8hmB9z/zUZ9i7MHyLdqsPys4sQIEhMEV+Sz7 zTKmPdQIJ1HAh11lOtLjq8vPLm5lI8Ygv1nDSnPQa0Y71QqcN9SdBcej+jfCUW0Y 7R3Xs2ucavkp7TgVLSHGVFXnwLigjNsN5xrEu1DjDpy99wdp8Yi5BALlQeIQGFO4 XQt9Toy3TClqM6MSmAgga20QqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnQQ+sa k2DNpYjsI7Vx5kWSTj72MB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/vm/j5tP7L1wR1LMF60zCltdbzrFj+jX7qgOzLLC0o+EF1LSXs191 PirbuJNGw+Zn3wQKTJqMCdP0pnJqhq3Jrybjhp5jOppsdp+oMJiPNCqr+JijEZwv Z+atNP35AT2SNtM7zwBrlX8V4b+wBdTVpBgQIO9RPg2MWz/gLI9zlueP0JKe/1m/ VbPGLMg14k3+mIVSnAyEN+yNNn2a9WkFJgNzE0QDyM7wP1YFew+xzVaILCo6A50l CofOSEeqZgX3/dFhD640CM+wfABWHwyDH8UMJU5iJU/1jRkGNSzxGg2sVUl7AIa4 OvYTv9gB5VDGFWRHmrrpz7iSd+diedeL -----END CERTIFICATE-----Generated at Sat May 31 16:44:48 2025 by rpki-client