$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: DmVlbhYnIR6nMftPgezK3EY77WqmAvYFZTZct5EwVuk= Subject key identifier: F2:85:F5:26:CA:F6:1B:BD:82:A6:87:74:0C:7E:BD:66:5C:B4:3B:4D Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: 8E Signing time: Tue 13 May 2025 05:37:47 +0000 Manifest this update: Tue 13 May 2025 05:37:47 +0000 Manifest next update: Tue 20 May 2025 05:37:47 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: viY8Nlm11m4PnRuJp+4UMlj3CV0+yFVY3oPtKA0W+FA=) 2: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (hash: 2zLHgEDWGwo9zlyqNnj3rIHawpIWGW43p4pSnf/kapk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: May 13 05:37:47 2025 GMT Not After : May 20 05:37:47 2025 GMT Subject: CN=6822daab-ad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:de:86:4e:1a:35:f4:62:1a:6a:77:50:c6: f3:2e:79:1c:c4:f5:c2:c5:d0:03:94:f9:f2:7f:94: be:e1:d6:45:d2:e9:42:98:22:3a:b0:97:14:ae:26: a5:e9:84:26:f0:a0:92:07:4f:9b:2d:19:cc:4a:a0: 21:cd:0f:7b:7b:78:cc:d9:31:db:c4:4e:74:08:fc: 1d:d3:9c:37:ec:b1:c6:ea:91:1a:9a:88:32:91:0a: 4e:df:03:59:29:d9:29:2e:c3:aa:e4:fb:ff:9e:22: d5:6d:41:20:fa:21:69:51:3d:4a:af:c6:d4:64:cd: 83:91:53:0b:3c:aa:e7:7a:85:1e:6b:c2:ad:b1:9d: b0:04:2a:2d:47:22:65:93:fa:06:17:f5:7a:ab:c2: e0:87:14:3e:b7:8e:c6:84:f2:94:11:4f:2d:56:b2: 53:2f:eb:03:c9:df:d1:c4:e6:3b:2d:a6:d8:76:6d: 11:6f:c6:75:56:3c:85:16:79:98:fb:4e:56:f5:65: d6:8e:fb:31:87:d7:6b:69:5a:e3:95:0a:3a:29:ee: a8:84:52:9a:43:d3:58:37:ff:f4:34:e8:7a:3f:b4: 4b:f3:07:e4:f8:f7:87:d4:31:74:e7:3a:13:37:df: 89:ee:34:59:08:74:c0:2c:ac:f5:9a:ae:db:27:e4: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:85:F5:26:CA:F6:1B:BD:82:A6:87:74:0C:7E:BD:66:5C:B4:3B:4D X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bb:18:0a:bb:e7:7e:a7:2f:a6:97:58:3b:8c:77:4f:32:ac: 4a:5f:42:70:00:6e:7f:73:6a:04:92:cd:b0:75:15:e9:44:9e: 72:68:a4:8a:05:ba:dd:7b:6c:af:1d:36:f4:46:48:15:d8:fe: 75:42:14:f5:78:86:56:cd:ad:60:1d:6c:e5:8c:eb:54:60:e4: 19:01:88:ae:be:bc:92:2c:31:4d:9b:a2:66:44:19:3e:ff:ab: cc:f4:46:bc:4d:f9:ce:0f:3d:b8:7c:80:f5:5a:17:e9:da:7c: 4b:ff:8a:af:d0:c6:46:f4:d0:5b:de:b5:75:72:5b:c3:e2:b3: 6c:44:27:c0:bf:cf:06:f7:85:0a:32:93:d1:c5:3c:7e:df:25: 90:b8:11:bc:34:5e:fc:77:14:38:7f:ab:d7:05:9b:35:70:4b: 7f:91:22:d9:66:4f:14:75:d4:33:17:5e:5c:75:91:34:28:3d: 31:3e:9e:17:40:7c:0e:2c:f4:85:98:ff:31:81:f4:7f:5d:85: e8:94:a9:dc:6b:59:29:db:07:c6:3a:4a:a8:e9:d5:3f:fe:3d: 89:dd:2d:52:1b:e1:ec:93:6d:d7:6a:77:8d:46:5f:f4:8e:61: 4f:f5:27:2e:a3:d3:da:df:3b:77:33:46:e2:30:16:25:b2:18: 28:d0:e9:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjUwNTEzMDUzNzQ3WhcNMjUwNTIwMDUzNzQ3WjAYMRYwFAYD VQQDEw02ODIyZGFhYi1hZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa3ehk4aNfRiGmp3UMbzLnkcxPXCxdADlPnyf5S+4dZF0ulCmCI6sJcUrial 6YQm8KCSB0+bLRnMSqAhzQ97e3jM2THbxE50CPwd05w37LHG6pEamogykQpO3wNZ KdkpLsOq5Pv/niLVbUEg+iFpUT1Kr8bUZM2DkVMLPKrneoUea8KtsZ2wBCotRyJl k/oGF/V6q8LghxQ+t47GhPKUEU8tVrJTL+sDyd/RxOY7LabYdm0Rb8Z1VjyFFnmY +05W9WXWjvsxh9draVrjlQo6Ke6ohFKaQ9NYN//0NOh6P7RL8wfk+PeH1DF05zoT N9+J7jRZCHTALKz1mq7bJ+R6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKF9SbK 9hu9gqaHdAx+vWZctDtNMB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZuxgKu+d+py+ml1g7jHdPMqxKX0JwAG5/c2oEks2wdRXpRJ5yaKSK Bbrde2yvHTb0RkgV2P51QhT1eIZWza1gHWzljOtUYOQZAYiuvrySLDFNm6JmRBk+ /6vM9Ea8TfnODz24fID1Whfp2nxL/4qv0MZG9NBb3rV1clvD4rNsRCfAv88G94UK MpPRxTx+3yWQuBG8NF78dxQ4f6vXBZs1cEt/kSLZZk8UddQzF15cdZE0KD0xPp4X QHwOLPSFmP8xgfR/XYXolKnca1kp2wfGOkqo6dU//j2J3S1SG+Hsk23XaneNRl/0 jmFP9Scuo9Pa3zt3M0biMBYlshgo0Okc -----END CERTIFICATE-----Generated at Wed May 14 06:12:57 2025 by rpki-client