$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft File: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft (raw, json) Hash identifier: s7Zx2ZqmMfpvsBr5U1ooh5i1CmL3ZtqkntLnbHbPC+0= Subject key identifier: AF:FE:9E:DC:B6:E4:8F:D3:55:C1:A4:8C:84:7B:2C:15:42:CB:1A:1E Authority key identifier: AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B Certificate issuer: /CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft Manifest number: C8 Signing time: Sat 03 May 2025 05:04:50 +0000 Manifest this update: Sat 03 May 2025 05:04:50 +0000 Manifest next update: Sat 10 May 2025 05:04:50 +0000 Files and hashes: 1: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl (hash: rfeVHP5t+VCs6tAocKUEeDmezX4/sITMropK6LQbrhA=) 2: F869F6E6F27D11EE83652C2FC4F9AE02.roa (hash: ew+XPEWx1FJtgNOojePOaLBaSb2GLaRwxpMAXTIzL38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D25, serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Validity Not Before: May 3 05:04:50 2025 GMT Not After : May 10 05:04:50 2025 GMT Subject: CN=6815a3f2-4874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:88:53:54:f2:ec:84:21:33:64:e1:b9:41: 9a:78:83:8f:a8:ce:f7:36:7b:da:c3:d4:a1:7b:85: 2c:cf:9d:d9:a8:3a:cf:15:06:69:2c:60:30:41:59: e2:ff:49:ec:49:c4:80:c8:fe:6a:4a:3f:66:e9:ee: 9c:91:73:09:3c:72:e0:3a:b9:27:e4:8d:50:81:22: f8:2b:80:21:3a:74:ed:c1:81:e8:48:1b:af:12:58: 61:d1:b1:b0:8d:7a:cf:49:2e:f2:54:38:cf:10:cc: 47:44:35:52:9a:f0:c6:df:ab:f7:94:cb:1d:16:86: d4:7c:0b:98:66:2c:16:2f:f4:10:3f:4f:55:8c:0d: 52:32:06:2f:be:90:49:57:cd:c3:f1:cc:58:b9:cf: 69:91:f9:90:4e:1c:73:84:6f:8c:69:06:1f:40:a2: 78:bc:db:b0:63:07:da:aa:b8:f3:0d:21:7f:69:3b: 65:7b:3e:4f:97:e8:cd:41:11:57:06:fa:c5:e7:7d: 62:c1:13:a2:05:8a:1a:42:38:cb:0b:03:52:e4:f8: 6f:43:82:70:da:af:b0:9a:50:7a:92:23:be:26:68: 69:5d:30:db:90:08:e4:9b:0b:37:30:86:fd:14:5b: 20:d1:f9:a9:48:fd:08:25:86:90:4a:d8:72:3a:61: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:9E:DC:B6:E4:8F:D3:55:C1:A4:8C:84:7B:2C:15:42:CB:1A:1E X509v3 Authority Key Identifier: keyid:AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:54:eb:1e:02:73:17:d6:bf:c6:ec:96:70:60:db:ca:f3: 32:3e:60:6b:44:b4:04:49:f8:44:23:e0:ca:d3:16:eb:03:50: e5:f7:35:44:cf:fd:02:7a:3d:e9:8f:da:fd:48:95:a8:a6:ed: a8:97:96:88:b2:ea:2b:ab:2c:32:7a:73:22:80:c3:8c:5f:b6: 28:5f:c5:84:3d:c3:84:25:12:66:49:94:e3:54:57:d9:e4:7a: 97:1e:e7:07:29:23:2a:b0:78:f6:6c:13:7f:b3:9c:29:17:e5: 50:fd:5e:04:a1:3f:f5:ca:e4:ab:25:bb:6a:3b:61:b1:d3:ba: 8d:13:3f:b5:0d:8a:37:3f:1a:04:41:4f:b9:ad:58:28:62:9e: 46:b0:2d:58:4f:a5:bc:ea:a5:1f:f2:4e:49:c3:a9:df:f7:78: 2a:8a:06:78:12:99:d9:7a:dc:63:dd:d8:bb:3c:99:67:32:fc: a6:ac:39:2e:e1:bf:ad:42:75:aa:01:5a:60:49:94:98:34:ec: 0e:e5:c7:59:ad:71:ff:d0:12:84:b7:ba:6d:a0:4d:87:fa:1f: 4e:ff:89:e7:1a:f9:fb:dc:32:bf:ce:ba:b1:fd:62:d8:a5:e3: 41:95:3b:62:01:ef:28:8d:3f:e9:12:7e:a5:b1:e7:99:8d:6a: 55:a9:22:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMjUxMTAvBgNVBAUTKEFENkVFN0JBMTk1ODY1MEZBQTg0NkM4M0QwQThBNEIz NjVEQUY1NUIwHhcNMjUwNTAzMDUwNDUwWhcNMjUwNTEwMDUwNDUwWjAYMRYwFAYD VQQDEw02ODE1YTNmMi00ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueWIU1Ty7IQhM2ThuUGaeIOPqM73Nnvaw9She4Usz53ZqDrPFQZpLGAwQVni /0nsScSAyP5qSj9m6e6ckXMJPHLgOrkn5I1QgSL4K4AhOnTtwYHoSBuvElhh0bGw jXrPSS7yVDjPEMxHRDVSmvDG36v3lMsdFobUfAuYZiwWL/QQP09VjA1SMgYvvpBJ V83D8cxYuc9pkfmQThxzhG+MaQYfQKJ4vNuwYwfaqrjzDSF/aTtlez5Pl+jNQRFX BvrF531iwROiBYoaQjjLCwNS5PhvQ4Jw2q+wmlB6kiO+JmhpXTDbkAjkmws3MIb9 FFsg0fmpSP0IJYaQSthyOmFKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/+nty2 5I/TVcGkjIR7LBVCyxoeMB8GA1UdIwQYMBaAFK1u57oZWGUPqoRsg9CopLNl2vVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQyNS84RjlGMDM4NkYy N0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpRLXFoR3lEMEtpa3MyWGE5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXN251aGxZWlEtcWhHeUQwS2lrczJYYTlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQyNS84RjlGMDM4NkYyN0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpR LXFoR3lEMEtpa3MyWGE5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeW1TrHgJzF9a/xuyWcGDbyvMyPmBrRLQESfhEI+DK0xbrA1Dl9zVE z/0Cej3pj9r9SJWopu2ol5aIsuorqywyenMigMOMX7YoX8WEPcOEJRJmSZTjVFfZ 5HqXHucHKSMqsHj2bBN/s5wpF+VQ/V4EoT/1yuSrJbtqO2Gx07qNEz+1DYo3PxoE QU+5rVgoYp5GsC1YT6W86qUf8k5Jw6nf93gqigZ4EpnZetxj3di7PJlnMvymrDku 4b+tQnWqAVpgSZSYNOwO5cdZrXH/0BKEt7ptoE2H+h9O/4nnGvn73DK/zrqx/WLY peNBlTtiAe8ojT/pEn6lseeZjWpVqSIz -----END CERTIFICATE-----Generated at Mon May 5 03:00:49 2025 by rpki-client