$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json) Hash identifier: W4WgjHvPqJ1nIsEtV3CMfdbr6+RPSsUfgHgqAsxT5HI= Subject key identifier: 90:40:18:1A:59:AD:2D:C6:DB:C7:CF:29:00:6C:CB:AF:84:E1:61:5A Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Certificate serial: 09E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft Manifest number: 09DE Signing time: Sun 04 May 2025 19:42:26 +0000 Manifest this update: Sun 04 May 2025 19:42:26 +0000 Manifest next update: Sun 11 May 2025 19:42:26 +0000 Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: Av5a97ZE7vK3mhp0jVl2FxEzAjMm3t9fbIzGpQYFs+s=) 2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2532 (0x9e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Validity Not Before: May 4 19:42:26 2025 GMT Not After : May 11 19:42:26 2025 GMT Subject: CN=6817c322-9818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:aa:7c:ea:2e:3f:f9:e8:2d:41:d8:30:42: f6:96:f7:b3:52:0f:7a:29:55:c8:f3:71:b9:55:f6: 53:02:ba:39:42:31:17:75:b5:14:52:f1:67:18:c7: 6a:3d:41:1a:1c:a7:21:10:29:f2:dd:49:79:21:93: e4:21:e8:6d:2b:67:28:4b:31:d9:3a:88:77:f1:ca: c9:49:d6:16:0e:05:4a:14:8a:8a:b8:3a:54:8f:47: 93:b6:d8:83:9a:50:7c:8a:82:21:2a:49:3a:e4:74: f9:49:86:94:4f:98:43:42:cf:7c:62:9d:35:2e:8f: ec:21:ff:51:1e:05:28:2d:c8:05:1f:02:de:2b:90: 97:69:17:a5:61:50:68:a4:c9:62:2b:52:70:36:d0: 81:31:a8:f4:6d:c8:fb:5c:84:46:10:4c:8f:23:0a: ca:6a:3e:c0:4f:e6:4d:ff:a2:37:b0:6c:67:21:cb: ed:25:05:2b:9a:63:b4:1c:21:04:a2:30:fe:6b:47: ba:f8:15:da:98:06:a4:45:94:3d:a8:75:74:2a:6d: 5d:b5:e1:7d:9e:b7:f8:60:0b:a0:e6:1f:68:86:40: 3e:e9:17:03:a3:a2:1a:22:be:9c:9d:78:ac:4d:00: fd:52:02:24:56:16:9d:87:1a:c6:07:21:11:d9:14: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:40:18:1A:59:AD:2D:C6:DB:C7:CF:29:00:6C:CB:AF:84:E1:61:5A X509v3 Authority Key Identifier: keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b0:43:2a:09:4f:9c:1c:95:74:e6:ec:77:6e:12:b8:b1:dd: 93:ef:d0:16:66:5a:de:98:04:c3:74:a6:60:f3:31:da:79:60: 10:92:28:7d:45:59:11:14:fa:4c:ef:60:d4:7e:44:1b:ce:6d: 1f:10:1c:e1:8a:51:63:5e:b5:82:e3:46:1d:d8:35:17:40:64: da:49:4f:15:cc:ee:50:51:b5:93:16:17:5e:81:35:91:87:c8: 91:f9:5f:c6:e9:9d:eb:3c:83:d8:2d:db:0e:09:e0:77:37:d6: ca:42:1d:63:12:2b:7d:9f:bb:91:38:ac:4c:67:f7:5f:35:fc: 37:d3:88:51:74:a1:5d:a4:18:9d:a4:12:d7:0d:70:f9:67:b1: 6d:c8:cf:0a:10:d6:a1:0d:dd:5c:cf:58:f2:8b:1d:e9:ed:1d: ac:22:21:e1:28:2a:9c:e4:63:91:22:dc:fc:31:65:f5:7c:55: 24:ca:1b:31:b5:ea:5e:89:54:90:dd:1d:72:f9:5f:45:47:2c: 7a:60:21:0c:ac:a6:d2:fb:6a:52:d9:8c:9f:4d:04:4d:08:eb: 0d:c1:d4:18:d8:ef:97:4b:33:a4:23:5a:88:53:b8:03:79:d1: be:c2:8c:cc:92:44:4f:af:12:14:50:60:4e:4e:bd:05:d4:cd: 19:8d:12:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY1M0MxMTAvBgNVBAUTKEYyMDk3OEI4QTIyQzEzQTBCMDJCOUYzQTVGQzJENDg4 QUJBOEJFRDUwHhcNMjUwNTA0MTk0MjI2WhcNMjUwNTExMTk0MjI2WjAYMRYwFAYD VQQDEw02ODE3YzMyMi05ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U2qfOouP/noLUHYMEL2lvezUg96KVXI83G5VfZTAro5QjEXdbUUUvFnGMdq PUEaHKchECny3Ul5IZPkIehtK2coSzHZOoh38crJSdYWDgVKFIqKuDpUj0eTttiD mlB8ioIhKkk65HT5SYaUT5hDQs98Yp01Lo/sIf9RHgUoLcgFHwLeK5CXaRelYVBo pMliK1JwNtCBMaj0bcj7XIRGEEyPIwrKaj7AT+ZN/6I3sGxnIcvtJQUrmmO0HCEE ojD+a0e6+BXamAakRZQ9qHV0Km1dteF9nrf4YAug5h9ohkA+6RcDo6IaIr6cnXis TQD9UgIkVhadhxrGByER2RSbpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBAGBpZ rS3G28fPKQBsy6+E4WFaMB8GA1UdIwQYMBaAFPIJeLiiLBOgsCufOl/C1IirqL7V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUzQy81QkE4NzgyMDc5 REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2Q3dLNTg2WDhMVWlLdW92 dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnbDR1S0lzRTZDd0s1ODZYOExVaUt1b3Z0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjUzQy81QkE4NzgyMDc5REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2 Q3dLNTg2WDhMVWlLdW92dFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlsEMqCU+cHJV05ux3bhK4sd2T79AWZlremATDdKZg8zHaeWAQkih9 RVkRFPpM72DUfkQbzm0fEBzhilFjXrWC40Yd2DUXQGTaSU8VzO5QUbWTFhdegTWR h8iR+V/G6Z3rPIPYLdsOCeB3N9bKQh1jEit9n7uROKxMZ/dfNfw304hRdKFdpBid pBLXDXD5Z7FtyM8KENahDd1cz1jyix3p7R2sIiHhKCqc5GORItz8MWX1fFUkyhsx tepeiVSQ3R1y+V9FRyx6YCEMrKbS+2pS2YyfTQRNCOsNwdQY2O+XSzOkI1qIU7gD edG+wozMkkRPrxIUUGBOTr0F1M0ZjRIc -----END CERTIFICATE-----Generated at Mon May 5 03:04:42 2025 by rpki-client