$ rpki-client -vvf rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft File: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft (raw, json) Hash identifier: 82GH7GeQTfqKVKBQvg4LKz+IOVd9LTwJWchh3wwpWaI= Subject key identifier: 51:03:91:D1:44:01:91:BE:FD:23:5E:45:30:73:72:53:74:75:44:DE Authority key identifier: F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 Certificate issuer: /CN=A9114CE7/serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft Manifest number: 01D6 Signing time: Tue 13 May 2025 02:03:10 +0000 Manifest this update: Tue 13 May 2025 02:03:09 +0000 Manifest next update: Tue 20 May 2025 02:03:09 +0000 Files and hashes: 1: 8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl (hash: TxgYlXRb6+dr83iVo0821nAv0g/dlyvwjeZcmXdvPnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114CE7, serialNumber=F28D6D11C3C5546E4241818A73B470EECA6D7283 Validity Not Before: May 13 02:03:09 2025 GMT Not After : May 20 02:03:09 2025 GMT Subject: CN=6822a85d-7ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:0b:bc:8c:28:2a:3e:74:d8:1b:41:ae:ac: 31:2d:c9:8d:98:2b:f7:5c:23:02:62:5a:5f:15:fa: b2:82:a0:4a:d8:8a:3f:04:28:6d:67:aa:dc:cf:6c: e2:6b:1b:2a:8d:34:bf:11:f3:08:f4:1c:44:51:1a: 07:09:4d:3d:47:4d:a3:5e:52:3c:67:5c:f0:da:03: e7:99:76:6d:21:1e:bc:e7:a4:48:bd:1a:19:05:85: 82:86:31:9e:56:32:f9:08:92:70:4e:15:d4:6a:07: 32:a5:bd:5f:f5:a2:fa:d6:52:9f:4e:4f:28:90:8d: 5d:89:00:1c:82:31:b0:88:63:ec:1e:c8:8d:8f:25: a6:6a:f1:7a:fe:cf:c5:70:e4:c5:e5:ac:66:90:51: 48:b2:4a:06:29:f9:75:c1:cd:72:fc:11:60:8b:95: bd:ff:a7:ee:57:3d:2e:09:56:6a:a9:cf:07:70:05: 09:ef:5a:3f:23:91:48:c9:b9:ce:1c:79:de:11:84: 58:94:f2:58:7e:c6:66:7e:07:7b:0d:a6:bc:de:a3: b9:c3:ac:bf:fd:50:21:fd:bd:08:bf:86:e1:a7:13: c6:07:b9:86:16:d7:28:12:bb:09:e3:03:3e:14:33: 77:74:29:bf:20:a0:85:85:28:56:a8:33:39:40:41: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:91:D1:44:01:91:BE:FD:23:5E:45:30:73:72:53:74:75:44:DE X509v3 Authority Key Identifier: keyid:F2:8D:6D:11:C3:C5:54:6E:42:41:81:8A:73:B4:70:EE:CA:6D:72:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8o1tEcPFVG5CQYGKc7Rw7sptcoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114CE7/5B2B131C60CD11ED84F75F4CC4F9AE02/8o1tEcPFVG5CQYGKc7Rw7sptcoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:66:9a:b0:63:d6:fb:ec:3a:50:75:5c:af:8e:2e:96:8d:35: 35:f8:d4:e2:21:a9:b2:6b:9f:89:db:12:91:25:dd:61:ed:54: 4f:71:3e:eb:84:87:0c:2c:2b:1e:b6:c4:f9:3d:27:e4:2c:fb: f2:e5:3e:3f:3c:e8:f7:59:51:66:65:45:b7:16:3f:f5:41:fa: 2c:9e:37:86:e5:4d:2d:40:e8:2f:17:0d:6e:76:e0:9e:8b:96: 4a:b8:28:56:e1:5d:7d:22:69:8c:9b:7c:57:e7:59:6f:f1:93: da:d7:ce:ee:00:04:2b:0f:f6:4b:b3:ec:1e:0d:87:e5:43:5f: c5:ea:10:53:ec:46:0a:60:80:ee:e5:07:6f:f9:60:74:c1:96: 25:0e:de:74:d2:54:e6:3f:c1:dc:cf:4b:60:f2:62:db:3f:a6: 00:41:b7:b3:f2:46:cb:da:ef:ef:aa:9d:6f:c8:2e:7b:ab:16: 3f:d4:ff:04:64:26:9f:65:5f:b1:d7:5e:26:b6:13:63:73:e2: 1e:b9:d9:c9:da:cd:da:8b:b6:92:0f:40:b2:b0:52:e1:8b:df: 32:cb:e9:24:a2:1c:35:3e:a1:66:a6:a6:b9:38:12:47:14:ff: 6d:d4:10:0b:94:cc:99:bd:96:f4:ea:f7:34:77:bd:19:3a:1b: 0a:6c:eb:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRDRTcxMTAvBgNVBAUTKEYyOEQ2RDExQzNDNTU0NkU0MjQxODE4QTczQjQ3MEVF Q0E2RDcyODMwHhcNMjUwNTEzMDIwMzA5WhcNMjUwNTIwMDIwMzA5WjAYMRYwFAYD VQQDEw02ODIyYTg1ZC03ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lILvIwoKj502BtBrqwxLcmNmCv3XCMCYlpfFfqygqBK2Io/BChtZ6rcz2zi axsqjTS/EfMI9BxEURoHCU09R02jXlI8Z1zw2gPnmXZtIR6856RIvRoZBYWChjGe VjL5CJJwThXUagcypb1f9aL61lKfTk8okI1diQAcgjGwiGPsHsiNjyWmavF6/s/F cOTF5axmkFFIskoGKfl1wc1y/BFgi5W9/6fuVz0uCVZqqc8HcAUJ71o/I5FIybnO HHneEYRYlPJYfsZmfgd7Daa83qO5w6y//VAh/b0Iv4bhpxPGB7mGFtcoErsJ4wM+ FDN3dCm/IKCFhShWqDM5QEEv/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEDkdFE AZG+/SNeRTBzclN0dUTeMB8GA1UdIwQYMBaAFPKNbRHDxVRuQkGBinO0cO7KbXKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNENFNy81QjJCMTMxQzYw Q0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZHNUNRWUdLYzdSdzdzcHRj b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhvMXRFY1BGVkc1Q1FZR0tjN1J3N3NwdGNvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NENFNy81QjJCMTMxQzYwQ0QxMUVEODRGNzVGNENDNEY5QUUwMi84bzF0RWNQRlZH NUNRWUdLYzdSdzdzcHRjb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxZpqwY9b77DpQdVyvji6WjTU1+NTiIamya5+J2xKRJd1h7VRPcT7r hIcMLCsetsT5PSfkLPvy5T4/POj3WVFmZUW3Fj/1QfosnjeG5U0tQOgvFw1uduCe i5ZKuChW4V19ImmMm3xX51lv8ZPa187uAAQrD/ZLs+weDYflQ1/F6hBT7EYKYIDu 5Qdv+WB0wZYlDt500lTmP8Hcz0tg8mLbP6YAQbez8kbL2u/vqp1vyC57qxY/1P8E ZCafZV+x114mthNjc+IeudnJ2s3ai7aSD0CysFLhi98yy+kkohw1PqFmpqa5OBJH FP9t1BALlMyZvZb06vc0d70ZOhsKbOvu -----END CERTIFICATE-----Generated at Wed May 14 11:32:48 2025 by rpki-client