$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: tom5VgvZbGXMakI0+ntOsgKHlrdIL93Q5XUK7urhdcE= Subject key identifier: 31:96:27:EF:C7:19:46:2F:57:6F:BC:48:4E:8F:5C:F3:43:8C:AE:10 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0429 Signing time: Tue 13 May 2025 00:10:09 +0000 Manifest this update: Tue 13 May 2025 00:10:09 +0000 Manifest next update: Tue 20 May 2025 00:10:09 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: 2HJ5xK9fxzTMzASDMCLGhkoI8VLfbg4edTdjubUSEB0=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: May 13 00:10:09 2025 GMT Not After : May 20 00:10:09 2025 GMT Subject: CN=68228de1-de2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:df:c1:05:f2:bc:44:22:50:01:e9:4d:cb: 2b:3d:6a:69:3d:ad:8d:8c:e7:0c:02:39:10:57:22: 1b:88:ef:4b:50:db:ad:50:dd:b7:57:e7:bb:f2:86: b2:68:29:90:60:a2:f5:b2:ea:5e:b7:b1:7d:cf:04: 4f:bb:f7:f5:4a:c3:99:20:cf:71:73:ab:3f:25:71: 41:2c:54:6d:e8:ec:e9:e5:a2:37:6b:b8:64:36:7a: 55:f2:e0:d1:58:43:42:d6:6b:3b:23:1b:97:d1:41: f9:90:f3:2d:99:9a:22:89:ff:d2:57:7e:8f:05:b9: e4:bd:44:50:78:e3:8f:6c:20:ed:27:2d:77:92:8e: 2c:53:bf:65:81:da:6c:29:25:12:88:bc:c2:13:34: 53:bf:a5:be:4d:87:09:bb:72:e8:9e:e0:eb:d0:c6: 1f:44:1e:5d:6a:f3:b5:f1:65:77:7f:cf:2b:07:a7: d0:9a:7d:8d:95:85:c1:7d:92:b0:b6:53:cd:6a:f1: a9:25:77:29:f8:55:36:c1:4f:74:4f:96:19:1c:30: 3c:ba:b6:69:b1:7b:ad:db:4a:90:e5:5c:72:b7:34: c8:a0:0d:9c:22:db:74:e4:45:52:5c:18:12:fb:d9: b3:3f:d3:52:5e:6b:16:d8:32:3a:e9:ab:5d:ac:a2: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:27:EF:C7:19:46:2F:57:6F:BC:48:4E:8F:5C:F3:43:8C:AE:10 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:33:15:f9:8a:1d:b4:9b:7c:85:f2:b2:14:7b:f4:98:8d: d2:d9:4f:bd:31:1c:f6:6a:8d:2c:84:d9:16:52:42:ce:58:aa: 0e:85:09:56:2c:39:72:f7:94:92:c0:7e:97:d4:c0:c5:28:6e: 6a:bd:bc:8c:42:97:4e:77:6a:59:d0:01:3b:a1:c0:50:49:63: cf:84:c9:cb:d5:17:84:37:ef:79:8f:58:47:0c:9f:ae:d9:66: fe:29:a6:96:f1:f2:78:de:e6:6d:66:5a:c2:08:09:7f:aa:a9: e9:32:b7:5e:a3:7f:9e:79:9d:dc:cc:03:5f:f0:3f:e1:a8:c4: 97:fa:6c:1e:9a:10:7f:4c:5a:d5:d1:c8:24:1a:cf:87:2f:cd: 3f:bc:07:64:52:28:06:0c:b9:f9:4e:77:cd:0e:f5:5e:58:a2: 00:28:8d:6e:74:a6:be:75:af:26:22:7c:78:95:46:3d:ad:59: 68:64:8d:e0:b8:65:4c:3e:21:3a:ea:0d:03:e0:22:17:a9:3f: 76:1e:49:fe:cc:80:d4:76:39:53:65:c5:c9:48:3c:9c:e8:72: 50:eb:a2:24:24:28:21:eb:36:43:06:6b:ad:ff:f4:a2:04:30: aa:f6:bf:11:0c:79:21:00:47:fd:2a:40:bf:6e:51:e7:88:b4: 67:d2:23:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwNTEzMDAxMDA5WhcNMjUwNTIwMDAxMDA5WjAYMRYwFAYD VQQDEw02ODIyOGRlMS1kZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ezfwQXyvEQiUAHpTcsrPWppPa2NjOcMAjkQVyIbiO9LUNutUN23V+e78oay aCmQYKL1supet7F9zwRPu/f1SsOZIM9xc6s/JXFBLFRt6Ozp5aI3a7hkNnpV8uDR WENC1ms7IxuX0UH5kPMtmZoiif/SV36PBbnkvURQeOOPbCDtJy13ko4sU79lgdps KSUSiLzCEzRTv6W+TYcJu3LonuDr0MYfRB5davO18WV3f88rB6fQmn2NlYXBfZKw tlPNavGpJXcp+FU2wU90T5YZHDA8urZpsXut20qQ5VxytzTIoA2cItt05EVSXBgS +9mzP9NSXmsW2DI66atdrKIzFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGWJ+/H GUYvV2+8SE6PXPNDjK4QMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOZzMV+YodtJt8hfKyFHv0mI3S2U+9MRz2ao0shNkWUkLOWKoOhQlW LDly95SSwH6X1MDFKG5qvbyMQpdOd2pZ0AE7ocBQSWPPhMnL1ReEN+95j1hHDJ+u 2Wb+KaaW8fJ43uZtZlrCCAl/qqnpMrdeo3+eeZ3czANf8D/hqMSX+mwemhB/TFrV 0cgkGs+HL80/vAdkUigGDLn5TnfNDvVeWKIAKI1udKa+da8mInx4lUY9rVloZI3g uGVMPiE66g0D4CIXqT92Hkn+zIDUdjlTZcXJSDyc6HJQ66IkJCgh6zZDBmut//Si BDCq9r8RDHkhAEf9KkC/blHniLRn0iN9 -----END CERTIFICATE-----Generated at Wed May 14 23:11:31 2025 by rpki-client