$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: 28fLXsit3glCa7Z9MEqGk39ofmnKPAlcPpO44nXuVn0= Subject key identifier: EA:90:DE:38:70:B9:A5:33:C2:77:70:53:E4:D6:ED:19:CA:6E:5C:03 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 81 Signing time: Sat 10 May 2025 14:22:46 +0000 Manifest this update: Sat 10 May 2025 14:22:45 +0000 Manifest next update: Sat 17 May 2025 14:22:45 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: KSVxPjNN61Ti0+K06aeAH+p9wfZquYvq2vk0PdGnd9g=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: May 10 14:22:45 2025 GMT Not After : May 17 14:22:45 2025 GMT Subject: CN=681f6136-ec60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:78:45:97:52:00:e8:11:89:e7:35:bd:2c:1c: ab:f5:67:2f:85:23:d2:ab:cd:85:32:fb:71:43:59: 1b:f1:ac:69:3d:2d:0e:36:c9:4c:a9:3f:6b:4b:2f: 9b:b4:be:f7:b7:24:f8:67:98:c5:e4:b4:70:26:6f: 40:3f:70:73:73:fb:5f:b9:8d:c7:60:12:8f:af:e8: 05:0c:57:20:b7:2f:3b:fc:c6:13:d4:e1:90:2d:67: a6:ef:2b:c2:01:b8:8e:f0:b5:5e:9a:7c:3d:7b:c7: 6e:ba:87:7b:79:b0:ea:93:33:83:55:8a:94:60:e7: 42:ce:00:3c:a6:48:01:70:48:be:24:bb:a3:3a:3a: bc:0f:0a:24:b3:d6:49:33:ca:63:f5:5e:e7:a8:18: 7d:29:40:d4:48:f3:1b:aa:b5:5b:e6:92:d9:95:d5: b3:e7:13:fe:14:d0:eb:98:7f:39:68:d3:91:88:30: 4b:06:f3:cc:75:4a:79:56:d1:ce:6c:d4:65:7c:f6: 60:0b:34:90:82:88:06:b5:ef:23:b6:c5:a9:1a:1c: de:9c:53:32:a6:55:5c:5c:16:a7:f5:1d:d6:69:e5: 53:6a:37:ef:c6:0a:9a:44:b0:a5:50:81:c0:54:29: cc:22:56:49:ea:cd:e2:09:d9:28:8d:02:bf:5a:7a: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:90:DE:38:70:B9:A5:33:C2:77:70:53:E4:D6:ED:19:CA:6E:5C:03 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:27:1a:48:07:02:30:ef:d4:80:e8:ae:63:73:b1:5e:d5:67: 60:33:79:88:f9:62:59:22:3d:cd:68:e3:2d:0b:82:22:ad:77: 50:12:2f:dd:f9:74:e9:7d:73:3b:c1:b2:4f:49:cf:fc:66:e8: 8e:f8:06:07:13:21:00:b0:99:24:17:4d:65:9e:83:4c:37:44: 8e:a0:43:86:bb:1d:e1:42:59:e9:07:de:13:05:d5:30:fa:a2: 1f:24:c4:7e:2c:8e:aa:0e:31:f7:27:b6:58:61:f4:f5:50:9a: 62:a0:d4:b2:d5:29:aa:5a:ec:b3:f0:a5:f5:74:f4:c9:6e:1e: 2b:5a:65:68:21:21:fc:bc:7b:18:21:26:67:35:54:15:42:14: 68:27:fc:20:73:6f:61:e7:e0:76:ae:b8:7a:5e:42:28:f0:5e: fe:18:d4:7d:d1:7e:54:48:9c:89:fd:bf:5b:26:e7:0c:ff:63: 2b:16:4b:37:ef:83:38:ef:e2:1f:e7:22:70:0f:62:10:34:92: d4:15:3e:3e:17:47:a0:84:84:3c:a0:68:f1:bc:19:f2:e6:e2: 30:93:e1:25:ce:d4:d9:ab:44:2b:15:8c:5c:de:72:50:ab:31: 0f:97:4f:25:a5:f6:74:ea:d5:a0:f9:08:2e:f3:d2:54:30:a7: 9c:4b:3e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwNTEwMTQyMjQ1WhcNMjUwNTE3MTQyMjQ1WjAYMRYwFAYD VQQDEw02ODFmNjEzNi1lYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XhFl1IA6BGJ5zW9LByr9WcvhSPSq82FMvtxQ1kb8axpPS0ONslMqT9rSy+b tL73tyT4Z5jF5LRwJm9AP3Bzc/tfuY3HYBKPr+gFDFcgty87/MYT1OGQLWem7yvC AbiO8LVemnw9e8duuod7ebDqkzODVYqUYOdCzgA8pkgBcEi+JLujOjq8Dwoks9ZJ M8pj9V7nqBh9KUDUSPMbqrVb5pLZldWz5xP+FNDrmH85aNORiDBLBvPMdUp5VtHO bNRlfPZgCzSQgogGte8jtsWpGhzenFMyplVcXBan9R3WaeVTajfvxgqaRLClUIHA VCnMIlZJ6s3iCdkojQK/WnpE6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqQ3jhw uaUzwndwU+TW7RnKblwDMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzJxpIBwIw79SA6K5jc7Fe1WdgM3mI+WJZIj3NaOMtC4IirXdQEi/d +XTpfXM7wbJPSc/8ZuiO+AYHEyEAsJkkF01lnoNMN0SOoEOGux3hQlnpB94TBdUw +qIfJMR+LI6qDjH3J7ZYYfT1UJpioNSy1SmqWuyz8KX1dPTJbh4rWmVoISH8vHsY ISZnNVQVQhRoJ/wgc29h5+B2rrh6XkIo8F7+GNR90X5USJyJ/b9bJucM/2MrFks3 74M47+If5yJwD2IQNJLUFT4+F0eghIQ8oGjxvBny5uIwk+ElztTZq0QrFYxc3nJQ qzEPl08lpfZ06tWg+Qgu89JUMKecSz5h -----END CERTIFICATE-----Generated at Sat May 10 16:39:04 2025 by rpki-client