$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: IU2O2fEZ5ILIKPyBHlaL4y2YFcCCwh6QtvlaM26uF3U= Subject key identifier: F8:7D:71:18:68:46:26:22:54:96:29:BF:92:61:95:7B:58:DD:D1:D0 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 0B Signing time: Sun 11 May 2025 06:51:56 +0000 Manifest this update: Sun 11 May 2025 06:51:56 +0000 Manifest next update: Sun 18 May 2025 06:51:56 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: 5VQyIlrsT9yxdIvuTteBVbvI6pW9zDBL77DZK7+SzuU=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: May 11 06:51:56 2025 GMT Not After : May 18 06:51:56 2025 GMT Subject: CN=6820490c-65e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:eb:fa:45:bc:08:2a:f5:88:cb:c7:85:62: 4c:4a:6a:03:0a:a8:1e:a4:97:f2:90:74:52:38:a6: d2:34:84:40:65:3b:1a:78:05:b9:44:36:90:97:26: 49:fa:2f:75:07:1e:56:10:48:0c:fb:7e:f2:32:4c: db:8a:c2:08:49:59:ed:88:af:63:90:74:06:3f:6e: bf:ac:71:e6:a4:74:43:02:64:5b:f3:0e:73:0c:77: 26:07:83:83:b9:48:fe:be:cd:f1:2d:96:2e:3c:86: 95:31:93:4e:8d:42:1d:8d:ff:7c:6a:07:04:3a:bd: 13:ee:68:9b:95:53:1a:ca:18:b8:54:99:35:b1:5f: e5:ee:9e:a2:fa:83:29:27:21:4c:e2:d5:b0:9d:87: a8:97:e7:e0:f9:c6:51:e7:a0:ee:17:60:d2:62:11: 01:66:c2:0a:0e:3f:69:bc:f8:ba:31:78:bd:30:ec: 2b:ef:87:4c:d8:58:21:13:f3:90:63:31:c1:34:92: 85:3e:2a:68:08:a8:db:e3:70:14:01:cf:ac:ae:6b: 1d:02:79:ed:1f:9a:ba:ef:8a:81:37:df:7c:da:21: 95:2f:bb:82:4f:05:69:25:a0:77:a5:6e:b6:49:cb: 24:50:3d:58:cb:25:a3:a1:57:a7:11:7f:ea:56:4d: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:71:18:68:46:26:22:54:96:29:BF:92:61:95:7B:58:DD:D1:D0 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:60:7a:9e:d3:3e:a1:88:b6:48:6c:0e:12:8c:bb:d1:48: 9f:c9:44:0c:8f:db:25:8a:6b:14:ae:da:cd:24:be:40:f9:09: 35:e6:ac:ec:6e:d9:df:aa:1d:49:65:02:70:85:1e:8e:55:12: ba:43:d5:9b:a9:17:13:71:41:2f:f4:1b:30:ca:be:35:96:2f: 24:d2:b8:5b:60:3d:b6:6b:b6:db:41:f0:e2:8c:97:ed:00:de: 05:55:d5:11:5c:d4:d3:58:c3:f8:48:d6:38:b8:a5:8d:ae:9b: bc:d4:21:7b:9e:e1:89:eb:a8:be:87:de:fd:9a:bc:1a:e1:1c: ae:2e:aa:28:60:6e:47:39:de:d0:93:5e:2c:51:f8:df:d4:ff: 77:14:cd:af:e0:a1:f2:d8:b7:37:4e:e0:85:07:ba:fc:0f:cf: dc:8a:4c:81:e3:bd:e0:20:2a:58:ac:e0:52:8b:6a:33:b3:1e: 18:01:13:a4:ca:d6:c9:10:51:9f:6b:98:c2:32:42:a3:a4:ca: c0:1b:45:72:f7:6c:b3:a0:a2:a9:2e:17:6c:40:e5:d3:b2:49: b7:71:9d:d5:1b:17:56:81:ab:6d:41:7d:2e:23:bd:27:61:f9: 67:bf:48:51:42:ae:cf:7c:1b:af:c5:f1:f8:d3:37:e6:79:79: e6:c1:44:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA1MTEwNjUxNTZaFw0yNTA1MTgwNjUxNTZaMBgxFjAUBgNV BAMTDTY4MjA0OTBjLTY1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbtuv6RbwIKvWIy8eFYkxKagMKqB6kl/KQdFI4ptI0hEBlOxp4BblENpCXJkn6 L3UHHlYQSAz7fvIyTNuKwghJWe2Ir2OQdAY/br+sceakdEMCZFvzDnMMdyYHg4O5 SP6+zfEtli48hpUxk06NQh2N/3xqBwQ6vRPuaJuVUxrKGLhUmTWxX+XunqL6gykn IUzi1bCdh6iX5+D5xlHnoO4XYNJiEQFmwgoOP2m8+LoxeL0w7Cvvh0zYWCET85Bj McE0koU+KmgIqNvjcBQBz6yuax0Cee0fmrrvioE333zaIZUvu4JPBWkloHelbrZJ yyRQPVjLJaOhV6cRf+pWTeHnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+H1xGGhG JiJUlim/kmGVe1jd0dAwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXbYHqe0z6hiLZIbA4SjLvRSJ/JRAyP2yWKaxSu2s0kvkD5CTXmrOxu 2d+qHUllAnCFHo5VErpD1ZupFxNxQS/0GzDKvjWWLyTSuFtgPbZrtttB8OKMl+0A 3gVV1RFc1NNYw/hI1ji4pY2um7zUIXue4YnrqL6H3v2avBrhHK4uqihgbkc53tCT XixR+N/U/3cUza/gofLYtzdO4IUHuvwPz9yKTIHjveAgKlis4FKLajOzHhgBE6TK 1skQUZ9rmMIyQqOkysAbRXL3bLOgoqkuF2xA5dOySbdxndUbF1aBq21BfS4jvSdh +We/SFFCrs98G6/F8fjTN+Z5eebBRPA= -----END CERTIFICATE-----Generated at Sun May 11 18:55:46 2025 by rpki-client