$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: n7RoM/nQ1n2kQSt4GDnNS5+B3zWTYNwakyzgR3ui5HA= Subject key identifier: 2F:14:84:F3:4F:E3:B9:0E:A8:31:5F:AF:27:E7:87:A2:8A:69:9D:67 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 9C Signing time: Mon 05 May 2025 05:07:49 +0000 Manifest this update: Mon 05 May 2025 05:07:49 +0000 Manifest next update: Mon 12 May 2025 05:07:49 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: eYTRZbBt2E0cfTqZ2+XY4e3A1uFmVqkq91aK69DQBkg=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: May 5 05:07:49 2025 GMT Not After : May 12 05:07:49 2025 GMT Subject: CN=681847a5-bf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:ef:33:51:5a:02:46:20:3e:8e:2c:ff:9c: cc:3f:ce:fa:d5:e8:0f:f8:52:81:95:55:a1:43:ab: fd:c5:cd:69:52:46:61:d5:07:e4:41:22:7b:6d:26: fd:e2:8c:ac:99:ba:d0:83:c0:d7:2d:31:87:4e:f1: 0c:cd:19:5e:a6:60:03:68:8d:88:e0:8d:86:00:3e: af:6f:b5:4a:3b:4c:f0:cc:44:9d:35:e2:f8:99:f9: d6:40:96:40:bb:7a:79:e9:74:97:d3:d1:57:3a:29: 2c:77:0b:5f:87:d2:3c:b4:13:d0:b5:8e:dc:64:91: eb:f2:eb:68:8b:b6:c6:06:97:42:1b:3d:81:f6:3b: 96:2d:3e:ff:93:6c:b7:dd:67:f1:29:75:d6:4c:8e: 65:05:55:50:b9:dc:e4:52:42:64:58:22:5b:33:90: 23:40:86:a8:06:43:47:d6:cc:55:ab:d6:2a:69:a5: f5:79:a4:fb:c5:ce:3a:50:8e:62:3c:42:3a:a2:17: b5:1a:fb:62:d2:21:40:a5:73:53:e1:dd:1e:19:52: 96:ae:66:41:d0:b4:66:d4:6b:5f:47:c4:33:6a:c8: 42:3f:4a:08:f8:f3:71:72:c0:b8:29:e6:cc:54:6b: 1e:35:af:26:bc:0c:9d:dd:88:e0:44:45:8f:2c:df: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:84:F3:4F:E3:B9:0E:A8:31:5F:AF:27:E7:87:A2:8A:69:9D:67 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:94:de:58:10:5f:2e:73:4c:e9:6d:41:79:3b:5e:9a:f7:0a: 40:d0:ed:2a:a2:6f:37:51:31:3f:d5:d3:04:dd:64:76:ac:f4: 3c:6e:94:2c:12:1c:70:5d:a4:01:07:66:8a:01:6a:bf:04:eb: 2d:dc:32:db:2c:17:54:c9:57:4e:2e:b7:b4:04:56:cc:35:74: 8b:c6:5c:1b:c6:b1:c1:31:bf:42:ff:01:33:b6:cb:8d:af:b3: 64:48:11:0a:8a:02:f6:b5:e9:7b:ee:63:6b:fe:58:3b:a9:65: 1c:90:7a:26:2c:92:45:02:f2:e7:68:59:09:20:82:da:0d:10: ae:50:a7:d0:fa:04:4e:b5:c1:b4:03:d0:5b:3e:bc:bb:19:98: 60:cf:47:03:f7:2c:19:80:0a:f7:dd:9d:71:31:75:e7:44:22: aa:ed:98:42:da:cc:76:6e:45:cb:e4:f3:80:99:c1:99:f3:29: a2:66:c0:e7:17:f0:aa:4b:56:be:a1:a2:c8:dd:20:9a:98:01: 52:5f:6b:2c:2e:18:f3:de:f0:c1:05:71:52:c4:5b:db:65:ef: 2c:dd:54:b4:cd:92:2c:37:0f:15:6e:28:8e:c1:03:fe:5b:a9: 32:99:fd:f7:4d:b4:cf:74:68:c4:0e:6c:79:0f:65:7b:37:ea: 7e:1f:11:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwNTA1MDUwNzQ5WhcNMjUwNTEyMDUwNzQ5WjAYMRYwFAYD VQQDEw02ODE4NDdhNS1iZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OvvM1FaAkYgPo4s/5zMP8761egP+FKBlVWhQ6v9xc1pUkZh1QfkQSJ7bSb9 4oysmbrQg8DXLTGHTvEMzRlepmADaI2I4I2GAD6vb7VKO0zwzESdNeL4mfnWQJZA u3p56XSX09FXOiksdwtfh9I8tBPQtY7cZJHr8utoi7bGBpdCGz2B9juWLT7/k2y3 3WfxKXXWTI5lBVVQudzkUkJkWCJbM5AjQIaoBkNH1sxVq9YqaaX1eaT7xc46UI5i PEI6ohe1Gvti0iFApXNT4d0eGVKWrmZB0LRm1GtfR8QzashCP0oI+PNxcsC4KebM VGseNa8mvAyd3YjgREWPLN+nSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8UhPNP 47kOqDFfryfnh6KKaZ1nMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLlN5YEF8uc0zpbUF5O16a9wpA0O0qom83UTE/1dME3WR2rPQ8bpQs EhxwXaQBB2aKAWq/BOst3DLbLBdUyVdOLre0BFbMNXSLxlwbxrHBMb9C/wEztsuN r7NkSBEKigL2tel77mNr/lg7qWUckHomLJJFAvLnaFkJIILaDRCuUKfQ+gROtcG0 A9BbPry7GZhgz0cD9ywZgAr33Z1xMXXnRCKq7ZhC2sx2bkXL5POAmcGZ8ymiZsDn F/CqS1a+oaLI3SCamAFSX2ssLhjz3vDBBXFSxFvbZe8s3VS0zZIsNw8VbiiOwQP+ W6kymf33TbTPdGjEDmx5D2V7N+p+HxHl -----END CERTIFICATE-----Generated at Mon May 5 20:40:59 2025 by rpki-client