$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: rsmhQirWEDbmsHpMkqh9THKKqS+RHVFGqmtEDzP4IGw= Subject key identifier: 14:08:7F:F9:85:70:C3:BC:80:80:C4:DB:AD:45:4E:A9:ED:D1:87:AB Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 0334 Signing time: Sun 11 May 2025 00:38:37 +0000 Manifest this update: Sun 11 May 2025 00:38:36 +0000 Manifest next update: Sun 18 May 2025 00:38:36 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: HdOHAUXT3VyfXmlU+9PLS032MjY+1JU/lN/3ns0VguE=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: May 11 00:38:36 2025 GMT Not After : May 18 00:38:36 2025 GMT Subject: CN=681ff18c-0e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:76:8a:e5:40:d7:23:38:39:ad:54:92:67: 04:31:e8:c2:d0:54:2f:26:ab:fb:f5:f4:3e:f3:00: 50:37:e0:36:b3:0a:69:6d:eb:55:6c:2f:c3:1b:52: e4:65:3f:57:19:ac:24:cc:9a:aa:6f:92:0e:0e:ba: 1f:3e:4c:87:e8:b8:75:ae:7c:7d:7f:50:2e:ca:60: a7:d9:a6:23:45:78:4d:03:b9:28:49:40:d1:84:84: 08:ef:1f:98:b1:c5:ec:86:86:3e:1c:29:8d:95:63: 4d:f5:f1:fa:1f:ae:01:85:ff:2f:57:4c:11:43:6b: e5:14:35:33:f3:6b:a8:24:91:ba:91:38:b3:a3:96: 64:16:5b:a1:c4:a2:d1:d8:11:c0:cd:3f:82:16:6a: 3f:da:cf:ef:2d:0e:33:21:8c:68:ef:89:d6:5c:d3: 7b:ab:cf:f0:b9:e2:af:84:56:fe:4d:fe:d7:c4:51: 8c:04:8d:b7:75:dc:66:7c:8a:ff:ef:d1:12:0f:65: d1:ce:8b:56:05:be:b3:57:11:d2:3b:c6:bc:38:7e: ea:4c:8e:45:8c:c7:13:67:c8:bd:8b:f5:51:fc:c5: 16:13:03:2c:66:af:a7:df:39:32:43:8f:dd:be:2f: 69:c9:97:26:a7:f5:e3:ed:08:f0:c1:27:9d:a9:2d: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:7F:F9:85:70:C3:BC:80:80:C4:DB:AD:45:4E:A9:ED:D1:87:AB X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:96:d7:b9:22:fc:6f:27:f9:63:e1:52:63:f6:76:e4:7e: c2:ea:03:9e:03:30:90:66:c7:e6:74:db:90:63:bb:5d:6d:ca: c2:42:e1:e3:a5:88:ee:96:67:2b:24:34:3e:85:16:dd:b8:cf: da:9a:20:01:c3:df:6c:43:96:6d:d5:38:b8:ca:cc:ba:2d:6f: a1:58:9f:4f:c8:ad:08:e4:04:ab:b3:8d:e5:8e:df:1f:7c:86: 0b:fc:e5:39:98:be:62:55:0e:41:1c:f8:96:3c:87:64:1a:ed: 60:10:f1:96:df:88:56:f4:17:2e:03:48:88:51:60:85:bf:89: 30:10:96:80:c0:75:50:44:ea:fb:5e:1e:1d:ff:f2:cc:e2:d1: 1f:03:bf:9e:43:06:76:89:93:1d:15:1b:f4:40:83:44:64:43: 33:22:a9:de:1a:9e:4b:4f:f2:60:24:f7:e0:ee:84:56:db:2a: f0:71:03:10:0c:f9:d9:ce:8d:6e:02:8f:a7:b1:a8:0f:9c:28: d2:1e:bf:1c:9e:fd:d1:22:64:1f:7a:fb:be:df:07:fc:aa:7c: 6d:e7:91:b7:3e:e1:eb:7a:d7:cf:db:84:de:7d:49:2e:e5:b5: 81:c2:e0:b5:6c:b1:ea:27:84:4f:52:30:6a:81:74:6e:b3:f2: 87:81:6f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjUwNTExMDAzODM2WhcNMjUwNTE4MDAzODM2WjAYMRYwFAYD VQQDEw02ODFmZjE4Yy0wZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3d2iuVA1yM4Oa1UkmcEMejC0FQvJqv79fQ+8wBQN+A2swppbetVbC/DG1Lk ZT9XGawkzJqqb5IODrofPkyH6Lh1rnx9f1AuymCn2aYjRXhNA7koSUDRhIQI7x+Y scXshoY+HCmNlWNN9fH6H64Bhf8vV0wRQ2vlFDUz82uoJJG6kTizo5ZkFluhxKLR 2BHAzT+CFmo/2s/vLQ4zIYxo74nWXNN7q8/wueKvhFb+Tf7XxFGMBI23ddxmfIr/ 79ESD2XRzotWBb6zVxHSO8a8OH7qTI5FjMcTZ8i9i/VR/MUWEwMsZq+n3zkyQ4/d vi9pyZcmp/Xj7QjwwSedqS05OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQIf/mF cMO8gIDE261FTqnt0YerMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy05bXuSL8byf5Y+FSY/Z25H7C6gOeAzCQZsfmdNuQY7tdbcrCQuHj pYjulmcrJDQ+hRbduM/amiABw99sQ5Zt1Ti4ysy6LW+hWJ9PyK0I5ASrs43ljt8f fIYL/OU5mL5iVQ5BHPiWPIdkGu1gEPGW34hW9BcuA0iIUWCFv4kwEJaAwHVQROr7 Xh4d//LM4tEfA7+eQwZ2iZMdFRv0QINEZEMzIqneGp5LT/JgJPfg7oRW2yrwcQMQ DPnZzo1uAo+nsagPnCjSHr8cnv3RImQfevu+3wf8qnxt55G3PuHretfP24TefUku 5bWBwuC1bLHqJ4RPUjBqgXRus/KHgW97 -----END CERTIFICATE-----Generated at Sun May 11 16:01:23 2025 by rpki-client