$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: 0tkqtb3TEPRdu67TWy2j8djKxJ5R3NbltzLR1hsmZUo= Subject key identifier: 95:06:80:C6:92:F4:93:57:9A:1A:B2:3C:C9:36:61:C9:97:CD:57:DB Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 088F Signing time: Wed 14 May 2025 20:41:36 +0000 Manifest this update: Wed 14 May 2025 20:41:35 +0000 Manifest next update: Wed 21 May 2025 20:41:35 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: JGJO+LHimMci3rTcGeDruM3eC3wN1d7uSNotgDhq79k=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: May 14 20:41:35 2025 GMT Not After : May 21 20:41:35 2025 GMT Subject: CN=68250000-14cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:78:84:d3:ee:fb:ef:d0:08:9a:01:d8:ae: 66:b0:67:c2:76:31:a2:e9:6c:e1:db:cf:04:d7:e0: e6:d9:c6:e4:6d:2c:ba:4a:10:7a:ca:a9:b5:66:a6: 8b:42:9b:64:a8:4f:4c:09:1a:33:72:d4:24:f2:17: 59:46:fa:46:29:06:5a:73:da:b5:b2:11:82:bb:a6: 88:bc:3d:69:d9:34:27:dc:20:78:9f:6b:29:5e:45: af:5f:a3:54:50:79:c5:cf:55:05:fa:a4:95:8c:05: 13:3f:4e:d1:69:10:f0:b6:27:0f:0e:1d:80:1a:ca: e4:cf:22:eb:c1:1f:a8:dd:5c:cd:a6:bd:73:29:19: 03:eb:a4:1c:c1:c9:b0:1b:89:39:27:bd:a1:6e:a2: a5:50:e3:fe:88:0d:73:e8:27:61:f1:02:e1:07:69: 88:4e:28:15:42:bd:b3:fb:2f:07:e6:1e:56:ed:c0: d0:2b:f9:22:9f:09:fd:d7:f5:5e:71:ea:3d:a9:66: 8a:9b:09:c8:98:54:35:9a:ac:1c:0a:f8:a3:cc:ef: d7:b0:88:cd:ef:7e:e8:0f:fe:ee:0c:aa:91:06:65: 76:2b:49:43:89:67:00:ae:ed:8a:71:3b:c0:92:35: 1c:06:f7:93:65:e1:55:b9:cb:5d:6e:91:21:aa:5a: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:80:C6:92:F4:93:57:9A:1A:B2:3C:C9:36:61:C9:97:CD:57:DB X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:d4:c2:5d:5a:12:62:0b:f4:d7:93:9f:6b:0a:af:86:99: 42:cd:73:8b:69:84:dd:d1:2e:15:ec:bd:0e:13:e6:ba:75:66: a6:6f:36:04:ca:d7:28:d3:e0:56:9f:74:f7:b9:77:7f:66:51: 6d:6f:27:cf:8a:75:d6:c5:d4:c1:3a:6e:30:c3:11:21:1a:21: 79:55:aa:0c:9d:c7:af:5e:90:6d:6d:ca:f8:22:a3:97:a8:4e: 39:52:da:6a:aa:5a:22:23:0a:07:1f:ce:f1:26:ae:b0:a6:af: b1:65:fa:e2:fa:aa:05:bf:68:56:9d:8d:47:a3:67:5c:4e:19: 30:20:e0:07:01:4c:55:8f:2d:d5:30:60:fd:eb:f6:db:22:38: 21:10:c3:0d:a2:64:ad:b8:ed:09:9e:e9:bb:78:eb:09:39:61: 66:0b:53:d7:14:c3:2c:03:8d:7a:84:27:df:aa:9a:f8:42:98: e1:5a:96:a7:a1:2f:33:22:65:03:27:84:89:58:d9:86:05:51: da:fc:b0:a9:76:90:b0:45:30:3f:4f:4c:dd:56:f9:e2:43:40: 77:1d:66:28:ff:8f:69:42:54:16:6d:ef:95:2d:60:05:f1:c6: c9:8e:84:b7:76:8c:f1:bd:29:96:6a:df:ab:c5:ae:7c:42:cb: 1d:38:32:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNTE0MjA0MTM1WhcNMjUwNTIxMjA0MTM1WjAYMRYwFAYD VQQDEw02ODI1MDAwMC0xNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ14hNPu++/QCJoB2K5msGfCdjGi6Wzh288E1+Dm2cbkbSy6ShB6yqm1ZqaL QptkqE9MCRozctQk8hdZRvpGKQZac9q1shGCu6aIvD1p2TQn3CB4n2spXkWvX6NU UHnFz1UF+qSVjAUTP07RaRDwticPDh2AGsrkzyLrwR+o3VzNpr1zKRkD66Qcwcmw G4k5J72hbqKlUOP+iA1z6Cdh8QLhB2mITigVQr2z+y8H5h5W7cDQK/kinwn91/Ve ceo9qWaKmwnImFQ1mqwcCvijzO/XsIjN737oD/7uDKqRBmV2K0lDiWcAru2KcTvA kjUcBveTZeFVuctdbpEhqlp77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUGgMaS 9JNXmhqyPMk2YcmXzVfbMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwq9TCXVoSYgv015OfawqvhplCzXOLaYTd0S4V7L0OE+a6dWambzYE ytco0+BWn3T3uXd/ZlFtbyfPinXWxdTBOm4wwxEhGiF5VaoMncevXpBtbcr4IqOX qE45UtpqqloiIwoHH87xJq6wpq+xZfri+qoFv2hWnY1Ho2dcThkwIOAHAUxVjy3V MGD96/bbIjghEMMNomStuO0Jnum7eOsJOWFmC1PXFMMsA416hCffqpr4QpjhWpan oS8zImUDJ4SJWNmGBVHa/LCpdpCwRTA/T0zdVvniQ0B3HWYo/49pQlQWbe+VLWAF 8cbJjoS3dozxvSmWat+rxa58QssdODJ8 -----END CERTIFICATE-----Generated at Fri May 16 03:11:37 2025 by rpki-client