$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: IdbAfEbAzM7Dbtmh6Re2ZBGtBw9OC0Hk1YvRSxwqZ5U= Subject key identifier: C2:83:5D:80:FB:FF:B3:F9:0D:39:4E:21:DC:B3:B1:86:86:E8:2D:7A Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 092C Signing time: Mon 12 May 2025 20:08:40 +0000 Manifest this update: Mon 12 May 2025 20:08:39 +0000 Manifest next update: Mon 19 May 2025 20:08:39 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: QYi1p4ErkUHXKG7DH5i3ZVc4qWkdO0mSPpojsXGcuOE=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: May 12 20:08:39 2025 GMT Not After : May 19 20:08:39 2025 GMT Subject: CN=68225547-826f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:14:32:06:a6:3e:84:80:81:b9:80:58:ad: 47:02:d6:bc:3f:54:c1:64:22:c5:c1:7e:0f:79:a9: a1:5d:7f:0b:dc:54:68:b9:4f:c3:19:74:3f:0f:24: ed:d2:b9:e8:63:b1:ac:0f:9d:a7:61:76:e7:85:45: 55:d8:6f:41:17:3c:39:ae:25:4c:5e:43:77:a0:41: ac:bc:4e:72:6e:08:b7:f5:16:1a:f1:f3:bc:fe:02: db:b0:5c:05:05:d5:e4:61:ea:bc:d4:5b:5a:08:6a: f5:08:3d:e6:fd:7c:30:97:8e:7f:e8:a8:e4:9d:6a: 7f:2d:e5:08:2d:b5:7e:66:42:9d:86:74:d5:45:60: 7d:81:e0:b1:de:5d:a0:ad:7a:b2:c6:91:e4:62:70: 68:17:36:ce:ed:6f:ca:c7:68:4a:47:77:8f:16:60: 1a:e3:b5:60:2f:ca:d1:a0:54:68:47:ec:6d:07:59: f7:c2:ce:89:2a:e5:d8:4a:28:77:16:fd:60:ac:6b: 07:97:96:b5:25:4e:88:ce:32:d5:91:32:14:2f:b4: 97:3b:bc:12:b4:d6:96:5c:2f:12:d1:8e:0b:90:2f: 6e:1d:24:4f:6a:a9:28:1e:37:7e:40:03:fc:6c:85: 64:ff:56:c0:39:40:3c:69:4c:c0:71:a8:df:c5:62: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:83:5D:80:FB:FF:B3:F9:0D:39:4E:21:DC:B3:B1:86:86:E8:2D:7A X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:76:67:7d:7c:3a:1b:b8:11:0f:61:03:a3:70:5a:ef:03:68: bf:a1:c1:d3:24:66:bf:c9:e2:5a:36:32:9a:99:c7:34:66:38: a9:74:fc:dd:05:97:07:92:94:82:24:80:34:5b:5a:11:2d:2a: 34:97:0f:f5:9d:1f:44:fa:46:f4:86:0f:c2:5f:83:44:5c:74: ed:bc:8c:74:77:2b:7f:e8:27:f2:b4:38:37:14:f2:03:5a:38: 0b:64:70:be:0e:5e:5f:83:43:0b:15:ec:c0:03:4f:34:2f:71: e0:1e:f9:de:c9:d0:00:9c:7b:28:19:9c:a3:81:9f:bb:10:d1: 63:41:94:c7:c4:f4:a3:aa:01:76:05:d7:6b:ac:c6:a7:34:d4: 9f:37:10:65:81:59:1f:65:69:7b:e8:9d:df:76:52:92:3c:3e: b9:d1:9b:36:da:d8:04:b8:f3:20:8b:20:ca:4f:ff:42:fd:71: 41:de:59:12:fa:1d:c2:5c:9a:ee:30:28:ae:d0:35:e3:6f:97: 8c:bd:e6:43:73:0d:7e:62:b1:c8:86:b0:4e:4b:db:83:8b:14: 6c:e0:a7:25:5a:67:60:0b:ba:71:9f:f4:63:48:c6:1c:18:bf: 58:40:d2:56:71:c8:6b:01:29:12:3a:43:5d:b3:f6:e1:c5:91: 4a:70:ea:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNTEyMjAwODM5WhcNMjUwNTE5MjAwODM5WjAYMRYwFAYD VQQDEw02ODIyNTU0Ny04MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqMUMgamPoSAgbmAWK1HAta8P1TBZCLFwX4PeamhXX8L3FRouU/DGXQ/DyTt 0rnoY7GsD52nYXbnhUVV2G9BFzw5riVMXkN3oEGsvE5ybgi39RYa8fO8/gLbsFwF BdXkYeq81FtaCGr1CD3m/Xwwl45/6KjknWp/LeUILbV+ZkKdhnTVRWB9geCx3l2g rXqyxpHkYnBoFzbO7W/Kx2hKR3ePFmAa47VgL8rRoFRoR+xtB1n3ws6JKuXYSih3 Fv1grGsHl5a1JU6IzjLVkTIUL7SXO7wStNaWXC8S0Y4LkC9uHSRPaqkoHjd+QAP8 bIVk/1bAOUA8aUzAcajfxWJQawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKDXYD7 /7P5DTlOIdyzsYaG6C16MB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCddmd9fDobuBEPYQOjcFrvA2i/ocHTJGa/yeJaNjKamcc0ZjipdPzd BZcHkpSCJIA0W1oRLSo0lw/1nR9E+kb0hg/CX4NEXHTtvIx0dyt/6CfytDg3FPID WjgLZHC+Dl5fg0MLFezAA080L3HgHvneydAAnHsoGZyjgZ+7ENFjQZTHxPSjqgF2 BddrrManNNSfNxBlgVkfZWl76J3fdlKSPD650Zs22tgEuPMgiyDKT/9C/XFB3lkS +h3CXJruMCiu0DXjb5eMveZDcw1+YrHIhrBOS9uDixRs4KclWmdgC7pxn/RjSMYc GL9YQNJWcchrASkSOkNds/bhxZFKcOoZ -----END CERTIFICATE-----Generated at Tue May 13 18:11:13 2025 by rpki-client