$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: dZ0kaVZlKZ4v5VUOTbDTZHYsd/RE3paK4Mtth3VPfp4= Subject key identifier: 34:CA:61:6B:C7:93:6D:6B:6A:36:39:CD:D4:5F:73:13:0C:EF:BE:17 Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 010C Signing time: Sat 17 May 2025 04:35:22 +0000 Manifest this update: Sat 17 May 2025 04:35:22 +0000 Manifest next update: Sat 24 May 2025 04:35:22 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: uRhmTjgNdKNEfvGrzLbHB7+UfggblCejPM2AKeAEPbo=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: May 17 04:35:22 2025 GMT Not After : May 24 04:35:22 2025 GMT Subject: CN=6828120a-977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:6d:e4:0f:a3:5f:ac:01:df:57:3d:49:77: 3c:ff:50:74:94:76:ed:84:45:68:e9:0f:d1:25:6d: 0e:86:ee:c6:9f:f9:4a:e6:f7:44:27:39:4c:30:76: 73:f1:8b:92:91:86:c3:39:f6:8b:b9:f7:13:4a:2e: ac:d5:0c:b8:9a:1d:b1:d8:34:2a:0e:9a:53:c0:2b: 5b:32:02:e3:37:99:3c:d5:4b:a8:6f:7c:6b:f5:54: fe:1c:f9:dc:ef:c4:3b:c2:e0:03:74:b6:65:f4:fd: d5:2a:5e:28:56:49:57:25:67:6b:c1:e4:03:2d:d8: 52:d8:7e:f4:e6:62:15:23:d2:48:54:eb:b4:1e:b1: e9:8c:ac:64:68:93:a9:a4:1d:d4:2f:95:4b:b4:05: d4:a8:16:66:1b:88:4f:84:27:47:15:47:9f:4c:37: 59:22:76:92:04:4e:50:a5:d6:3f:e5:02:c5:a0:87: e7:b5:ff:3e:7e:6d:c4:9e:4a:fb:34:94:71:73:63: 1b:3d:40:a3:6a:ab:7d:76:93:84:a0:62:61:8c:49: 59:50:4c:a4:4a:c1:a2:e6:a5:2b:21:b0:3b:eb:35: 32:62:af:a0:fd:e5:66:44:48:be:d5:2f:e6:3e:f7: aa:5f:42:0f:fb:34:15:a6:fc:18:fc:f0:5d:93:04: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:61:6B:C7:93:6D:6B:6A:36:39:CD:D4:5F:73:13:0C:EF:BE:17 X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c7:5b:de:68:d5:71:60:ab:b0:33:0b:98:0b:0e:14:34:7f: 25:93:7e:6a:58:d8:da:cd:3c:05:6e:f6:07:cd:5f:d7:36:6b: 4d:46:d4:42:4f:1d:6f:55:36:1a:88:90:42:8b:07:a6:81:07: af:87:aa:64:83:b0:65:60:0e:f9:42:7b:1c:6f:8b:f8:5d:6b: 02:74:f3:62:55:54:dd:32:ac:95:30:59:aa:12:bd:b5:a9:b2: 03:73:4b:9b:17:e4:95:9c:d3:f1:ca:1b:38:8e:c1:5f:88:84: 2e:2a:c0:5e:e4:2e:82:e3:b1:d1:af:68:02:04:62:26:5f:9c: 47:e2:08:93:53:b0:2f:f6:b9:a5:70:c1:e2:32:b0:ec:f1:4e: b5:8e:03:9a:bf:fb:4b:52:43:03:97:84:f7:1f:bc:48:33:16: 93:7d:dd:c9:27:87:ae:21:20:cd:20:16:47:67:66:56:ba:5b: f6:de:2b:0f:81:26:26:a6:07:4b:60:9e:6f:6d:b0:62:9a:9b: 6d:57:fe:93:77:6e:f8:91:c3:2e:c0:d6:15:f7:5a:ac:c9:da: 4c:ba:7f:20:d9:9a:3f:5c:50:b1:f1:7e:62:fc:41:4d:34:03: be:77:bc:08:30:a6:52:d5:66:0f:47:14:d7:1e:77:fb:00:e6: 89:b3:2d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUwNTE3MDQzNTIyWhcNMjUwNTI0MDQzNTIyWjAYMRYwFAYD VQQDEw02ODI4MTIwYS05NzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWFt5A+jX6wB31c9SXc8/1B0lHbthEVo6Q/RJW0Ohu7Gn/lK5vdEJzlMMHZz 8YuSkYbDOfaLufcTSi6s1Qy4mh2x2DQqDppTwCtbMgLjN5k81Uuob3xr9VT+HPnc 78Q7wuADdLZl9P3VKl4oVklXJWdrweQDLdhS2H705mIVI9JIVOu0HrHpjKxkaJOp pB3UL5VLtAXUqBZmG4hPhCdHFUefTDdZInaSBE5QpdY/5QLFoIfntf8+fm3Enkr7 NJRxc2MbPUCjaqt9dpOEoGJhjElZUEykSsGi5qUrIbA76zUyYq+g/eVmREi+1S/m PveqX0IP+zQVpvwY/PBdkwQctwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTKYWvH k21rajY5zdRfcxMM774XMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAx1veaNVxYKuwMwuYCw4UNH8lk35qWNjazTwFbvYHzV/XNmtNRtRC Tx1vVTYaiJBCiwemgQevh6pkg7BlYA75Qnscb4v4XWsCdPNiVVTdMqyVMFmqEr21 qbIDc0ubF+SVnNPxyhs4jsFfiIQuKsBe5C6C47HRr2gCBGImX5xH4giTU7Av9rml cMHiMrDs8U61jgOav/tLUkMDl4T3H7xIMxaTfd3JJ4euISDNIBZHZ2ZWulv23isP gSYmpgdLYJ5vbbBimpttV/6Td274kcMuwNYV91qsydpMun8g2Zo/XFCx8X5i/EFN NAO+d7wIMKZS1WYPRxTXHnf7AOaJsy01 -----END CERTIFICATE-----Generated at Sat May 17 15:32:29 2025 by rpki-client