$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: rIrOz130AI5JcHddep+oTPeXZHzFxArrt/Jj8V++1lE= Subject key identifier: EB:BE:06:C0:24:5D:AD:1B:26:C3:46:6B:B1:EB:70:9A:F7:37:11:A1 Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 8C Signing time: Fri 09 May 2025 05:32:42 +0000 Manifest this update: Fri 09 May 2025 05:32:42 +0000 Manifest next update: Fri 16 May 2025 05:32:42 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: tjkRLJR4Vk73zgOL9pGF6Lc+sNbI1OqmJVhcacj1D8U=) 2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: 835GCMndjNXvDx8DWI9YwArs6Gdw+YBn2q/Ep2PzpX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: May 9 05:32:42 2025 GMT Not After : May 16 05:32:42 2025 GMT Subject: CN=681d937a-a988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:bf:2a:f5:6d:05:fa:3f:b9:41:97:6f:0b: 54:47:cb:91:f7:fa:e9:96:99:27:c0:8d:92:02:cc: 85:a3:5a:7e:b7:b1:ea:77:10:4e:70:16:a1:ec:e2: 5b:5e:5b:4b:6d:9f:15:a7:b5:7a:2c:03:6a:8b:7b: 43:a6:4f:ab:da:2d:5c:55:95:11:ca:7e:f2:de:1e: f4:d8:5c:b5:b2:d3:1a:f0:ac:ad:5e:32:65:30:a9: d9:53:a5:44:7f:23:66:2a:d9:2b:ee:85:b2:9c:10: 58:92:11:b6:b6:54:13:a2:1a:dc:c7:c2:48:42:5a: d1:e0:4e:0f:e9:a2:2f:9d:19:0a:ef:c7:7b:1c:1e: 87:3b:d8:f4:86:cf:f7:12:4b:d9:52:ae:b1:8c:c8: 30:6c:bf:50:e6:14:e3:36:af:d8:60:6b:7a:d8:74: f9:32:78:07:a1:6c:97:d4:c3:c6:f0:14:be:94:fe: a5:40:39:f8:4a:58:b9:77:20:3c:f7:13:f1:0c:b7: cb:e6:ce:98:e1:37:41:78:f5:f6:6c:00:48:22:81: 4c:9d:df:f0:f5:80:9a:c1:b6:b5:52:e2:17:10:c5: 74:73:fd:4e:57:ed:aa:ba:bd:bf:00:67:8f:4f:8f: ed:fc:b3:63:7a:86:1e:9d:9c:79:d3:87:d3:da:72: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BE:06:C0:24:5D:AD:1B:26:C3:46:6B:B1:EB:70:9A:F7:37:11:A1 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:82:b5:91:7c:af:0f:e9:2c:6a:30:ea:ed:34:80:e9:cd:14: 21:cb:87:0a:d2:ab:34:d7:2a:fc:a4:91:96:aa:5f:d9:10:4d: b2:07:dc:73:1b:ce:74:b4:10:88:14:fa:ee:e6:85:db:e2:08: f5:ae:27:83:a4:08:e6:67:df:e1:4b:07:64:d6:9d:3d:ff:2d: c7:9c:04:43:83:ee:02:2b:61:e4:46:fd:29:a4:a6:34:e4:e5: 75:c0:3e:65:b0:f5:0f:69:f5:8e:0d:11:e3:82:75:1d:e0:bc: 0a:fe:72:36:b9:41:3e:84:5e:48:59:c8:65:40:79:7b:9e:7e: c5:c2:dc:d3:59:a2:c7:17:e3:9f:cb:85:3b:9a:5e:2f:04:b8: af:52:da:e7:b4:0a:90:ba:05:11:f3:69:bd:fc:68:87:9e:98: 7c:84:70:2b:03:57:6b:c8:fc:48:19:b2:31:b0:4a:47:eb:aa: f1:f4:fd:ce:2a:aa:ae:0f:ed:51:08:87:67:33:35:f3:74:06: ab:f6:73:b4:86:c3:4a:20:0a:c5:da:bc:73:24:5f:0f:85:be: 4d:26:db:83:af:3c:0f:f2:75:b5:72:6b:2c:ec:44:ee:36:b1: 07:51:41:03:a2:0d:bf:1a:89:fb:d8:dd:a6:1d:d6:a9:66:2f: c5:bd:6f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUwNTA5MDUzMjQyWhcNMjUwNTE2MDUzMjQyWjAYMRYwFAYD VQQDEw02ODFkOTM3YS1hOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsC/KvVtBfo/uUGXbwtUR8uR9/rplpknwI2SAsyFo1p+t7HqdxBOcBah7OJb XltLbZ8Vp7V6LANqi3tDpk+r2i1cVZURyn7y3h702Fy1stMa8KytXjJlMKnZU6VE fyNmKtkr7oWynBBYkhG2tlQTohrcx8JIQlrR4E4P6aIvnRkK78d7HB6HO9j0hs/3 EkvZUq6xjMgwbL9Q5hTjNq/YYGt62HT5MngHoWyX1MPG8BS+lP6lQDn4Sli5dyA8 9xPxDLfL5s6Y4TdBePX2bABIIoFMnd/w9YCawba1UuIXEMV0c/1OV+2qur2/AGeP T4/t/LNjeoYenZx504fT2nKCNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOu+BsAk Xa0bJsNGa7HrcJr3NxGhMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7grWRfK8P6SxqMOrtNIDpzRQhy4cK0qs01yr8pJGWql/ZEE2yB9xz G850tBCIFPru5oXb4gj1rieDpAjmZ9/hSwdk1p09/y3HnARDg+4CK2HkRv0ppKY0 5OV1wD5lsPUPafWODRHjgnUd4LwK/nI2uUE+hF5IWchlQHl7nn7FwtzTWaLHF+Of y4U7ml4vBLivUtrntAqQugUR82m9/GiHnph8hHArA1dryPxIGbIxsEpH66rx9P3O KqquD+1RCIdnMzXzdAar9nO0hsNKIArF2rxzJF8Phb5NJtuDrzwP8nW1cmss7ETu NrEHUUEDog2/Gon72N2mHdapZi/FvW+o -----END CERTIFICATE-----Generated at Sun May 11 03:59:02 2025 by rpki-client