$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: qqD8r4WEy4y2AbqgZo/qVoKjPYfzWt7qy7NS+4+nH0I= Subject key identifier: FD:D7:5B:5E:4D:65:CE:75:D8:F7:FB:B6:51:FA:6A:DA:51:38:23:CD Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 0131 Signing time: Sun 11 May 2025 03:24:28 +0000 Manifest this update: Sun 11 May 2025 03:24:27 +0000 Manifest next update: Sun 18 May 2025 03:24:27 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: tVMfoE7tTg9869zMk2TbAd+9I81k71a11jzNzExdZXk=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: May 11 03:24:27 2025 GMT Not After : May 18 03:24:27 2025 GMT Subject: CN=6820186b-5df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:e5:6a:1d:28:55:5b:09:82:28:30:7c:ed: c6:56:d0:d3:43:05:1b:d5:da:6a:4f:bc:e1:f2:6e: 64:ca:ba:eb:0a:70:37:d6:0c:44:20:d1:ff:ed:98: cd:6e:1a:39:95:b6:d5:07:a8:34:7f:ef:55:69:05: 77:7b:c9:e1:c0:d2:2b:0c:3a:6e:6e:54:48:66:17: 40:3b:9a:cd:f1:f0:fc:ad:2b:f8:1d:d8:c8:0a:2e: 64:8c:5b:e0:f7:95:24:b7:98:82:c2:3c:5e:ed:35: df:e9:19:25:59:85:51:ea:97:4c:80:88:c4:46:8a: 5b:28:62:b4:ce:43:19:e5:0d:e4:a5:74:7b:bc:92: 79:3a:f9:e3:17:6a:82:a6:61:38:5b:1c:fc:4b:d7: 12:84:ae:88:f4:a6:35:09:2b:7f:a9:ff:7f:c5:e5: 9f:3f:fb:63:ae:4b:df:c0:89:34:b6:cf:4f:c0:e3: 83:97:78:85:6a:6d:72:86:04:d5:49:05:46:37:74: b8:95:47:0b:6b:d0:f0:ec:21:87:85:3e:fe:ca:27: 7a:3c:c1:5c:22:35:3b:e6:93:cf:05:71:d2:57:55: 3c:0f:e8:09:cf:50:13:af:9e:83:78:40:2b:29:f4: 2d:c5:97:da:c6:5c:dd:1d:ec:45:dc:0a:40:6f:be: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:5B:5E:4D:65:CE:75:D8:F7:FB:B6:51:FA:6A:DA:51:38:23:CD X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ca:ea:0c:4d:1e:eb:b1:3c:db:93:85:54:2c:be:33:20:04: 9c:2b:66:7b:3d:39:37:d0:79:16:14:31:1f:f2:29:b2:02:67: 8b:95:1a:a4:3a:4e:b0:bd:e3:00:46:a4:7e:7a:27:ca:dc:03: ca:42:57:76:5a:99:6c:c7:61:02:d7:74:ca:1e:28:56:74:20: 24:d0:44:63:6f:ef:a1:58:4b:67:7e:3e:f9:9c:80:ce:ce:da: 10:84:74:fd:6a:ad:5a:da:1e:2e:e8:fc:4c:74:85:41:a4:3c: 31:0a:88:42:ed:73:3a:eb:40:fe:2f:a3:0a:99:08:40:ab:12: f6:1b:cd:35:03:84:6d:e0:5d:d5:38:93:9a:fe:54:81:96:2f: 9d:5c:c3:65:e4:8a:e3:e9:f8:7b:f6:30:04:b6:04:0e:78:c2: d3:c9:a7:a0:f9:2e:9f:99:db:ce:a2:a7:37:e3:9e:7e:47:39: da:a2:6d:69:66:9a:d7:fd:f2:9f:34:7d:44:fc:b5:d6:50:0e: cf:b6:35:40:44:c6:6e:0e:04:f8:8e:56:98:87:89:2a:4f:33: 5d:d2:10:05:92:e9:bf:47:f7:f0:5c:6b:62:2c:c6:ef:b2:ed: a1:5d:75:47:7e:7b:9a:44:82:a7:5c:b0:d2:5b:28:cf:f0:2c: ee:4c:b0:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUwNTExMDMyNDI3WhcNMjUwNTE4MDMyNDI3WjAYMRYwFAYD VQQDEw02ODIwMTg2Yi01ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2rlah0oVVsJgigwfO3GVtDTQwUb1dpqT7zh8m5kyrrrCnA31gxEINH/7ZjN bho5lbbVB6g0f+9VaQV3e8nhwNIrDDpublRIZhdAO5rN8fD8rSv4HdjICi5kjFvg 95Ukt5iCwjxe7TXf6RklWYVR6pdMgIjERopbKGK0zkMZ5Q3kpXR7vJJ5OvnjF2qC pmE4Wxz8S9cShK6I9KY1CSt/qf9/xeWfP/tjrkvfwIk0ts9PwOODl3iFam1yhgTV SQVGN3S4lUcLa9Dw7CGHhT7+yid6PMFcIjU75pPPBXHSV1U8D+gJz1ATr56DeEAr KfQtxZfaxlzdHexF3ApAb74I1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3XW15N Zc512Pf7tlH6atpROCPNMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLyuoMTR7rsTzbk4VULL4zIAScK2Z7PTk30HkWFDEf8imyAmeLlRqk Ok6wveMARqR+eifK3APKQld2Wplsx2EC13TKHihWdCAk0ERjb++hWEtnfj75nIDO ztoQhHT9aq1a2h4u6PxMdIVBpDwxCohC7XM660D+L6MKmQhAqxL2G801A4Rt4F3V OJOa/lSBli+dXMNl5Irj6fh79jAEtgQOeMLTyaeg+S6fmdvOoqc3455+Rznaom1p ZprX/fKfNH1E/LXWUA7PtjVARMZuDgT4jlaYh4kqTzNd0hAFkum/R/fwXGtiLMbv su2hXXVHfnuaRIKnXLDSWyjP8CzuTLAl -----END CERTIFICATE-----Generated at Mon May 12 22:12:05 2025 by rpki-client