$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: HgKvDtAtv/7kzbqJ7sFy6/RQXiSzMTBwHTOzpxmhWyA= Subject key identifier: 9A:E0:D5:B5:A3:A2:64:C4:C5:D6:3C:06:9D:C0:47:B4:91:A9:29:C8 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0440 Signing time: Sat 17 May 2025 00:30:16 +0000 Manifest this update: Sat 17 May 2025 00:30:16 +0000 Manifest next update: Sat 24 May 2025 00:30:16 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: 8M3bEcNTAPzu211sVCeLOwhwHaZNCDOjPgfP5qg07Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: May 17 00:30:16 2025 GMT Not After : May 24 00:30:16 2025 GMT Subject: CN=6827d898-26b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:af:24:50:06:a5:a3:70:9b:8e:68:42:4c: d1:b5:9e:2e:8a:e7:81:e5:0e:11:f1:e0:98:07:39: f7:82:69:97:94:79:54:c5:36:1f:42:a7:a1:07:62: d0:be:fa:45:4a:41:d2:d3:b5:66:42:62:54:3e:32: be:7f:0d:5c:b6:8a:a5:cb:8f:d7:dc:57:31:f7:99: a0:a1:b3:88:bd:58:43:89:b9:30:97:77:f9:39:5f: 9c:ce:2b:39:a0:78:a6:82:de:fd:52:9c:20:18:ec: e1:89:c7:16:93:9c:e0:a4:f7:f6:cb:79:35:7e:0f: 7d:c1:2d:4d:29:5f:01:56:26:ea:e0:1a:9c:d4:30: 47:c6:81:72:d3:b2:16:14:91:cd:cd:29:f5:46:d4: e5:0f:99:6b:e8:53:57:4e:4c:16:32:50:60:94:f2: 87:e6:c4:c8:0e:cf:9a:da:3d:8b:20:73:7f:ef:64: a9:82:70:51:79:9c:2f:a1:3d:01:83:ec:56:fa:27: f6:83:aa:95:30:5f:de:9b:99:80:65:ae:ce:6f:61: 19:93:9c:63:00:12:b6:af:2e:81:8d:de:31:c7:a5: df:f4:e0:ee:64:d5:94:17:d0:ad:9f:cd:3b:ec:3c: 57:05:e9:f0:41:2a:e6:61:91:09:75:71:eb:87:d5: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:D5:B5:A3:A2:64:C4:C5:D6:3C:06:9D:C0:47:B4:91:A9:29:C8 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b7:e7:38:05:4a:58:2a:9b:45:db:c7:33:01:d5:c5:bf:7c: 3d:d2:93:d6:e1:71:fb:bb:a0:8d:68:f5:af:00:26:6d:6f:65: cf:d1:9d:21:fd:18:bb:78:b2:d7:75:d4:99:1f:95:9f:26:a5: c6:06:63:b6:70:eb:9d:16:39:01:af:3d:4d:25:96:32:d6:ea: 57:83:f6:03:58:d9:b8:de:e1:02:74:ef:07:39:ca:8c:d8:24: 22:b9:cd:73:49:50:33:4f:1e:86:55:d9:17:14:5a:14:ef:d9: 0b:f3:9d:bd:c0:cd:ed:42:5f:24:07:71:86:7e:41:0e:0a:12: 90:0d:8e:74:1b:ca:34:80:12:f7:d0:36:b0:2c:85:85:41:0f: f5:e6:84:c0:88:bb:7a:78:99:80:34:b4:ed:98:f0:5f:08:96: 28:b4:c3:4a:01:33:b1:e3:88:b2:68:2d:bc:a7:46:ef:79:7e: 91:cd:ba:21:ca:d3:00:6e:f6:97:de:14:d6:97:e6:b0:d2:f4: 6c:44:a8:b2:d5:3b:f1:17:7c:6f:40:33:1c:c7:09:4f:d3:db: 3d:2a:58:cc:a4:45:ad:73:a5:f4:3a:e3:18:11:54:7b:b6:a2: a0:24:11:15:13:e5:47:1f:ea:83:6e:80:a8:0d:c0:3a:21:17: 77:d7:77:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNTE3MDAzMDE2WhcNMjUwNTI0MDAzMDE2WjAYMRYwFAYD VQQDEw02ODI3ZDg5OC0yNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz6vJFAGpaNwm45oQkzRtZ4uiueB5Q4R8eCYBzn3gmmXlHlUxTYfQqehB2LQ vvpFSkHS07VmQmJUPjK+fw1ctoqly4/X3Fcx95mgobOIvVhDibkwl3f5OV+czis5 oHimgt79UpwgGOzhiccWk5zgpPf2y3k1fg99wS1NKV8BVibq4Bqc1DBHxoFy07IW FJHNzSn1RtTlD5lr6FNXTkwWMlBglPKH5sTIDs+a2j2LIHN/72SpgnBReZwvoT0B g+xW+if2g6qVMF/em5mAZa7Ob2EZk5xjABK2ry6Bjd4xx6Xf9ODuZNWUF9Ctn807 7DxXBenwQSrmYZEJdXHrh9WdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrg1bWj omTExdY8Bp3AR7SRqSnIMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdt+c4BUpYKptF28czAdXFv3w90pPW4XH7u6CNaPWvACZtb2XP0Z0h /Ri7eLLXddSZH5WfJqXGBmO2cOudFjkBrz1NJZYy1upXg/YDWNm43uECdO8HOcqM 2CQiuc1zSVAzTx6GVdkXFFoU79kL8529wM3tQl8kB3GGfkEOChKQDY50G8o0gBL3 0DawLIWFQQ/15oTAiLt6eJmANLTtmPBfCJYotMNKATOx44iyaC28p0bveX6Rzboh ytMAbvaX3hTWl+aw0vRsRKiy1TvxF3xvQDMcxwlP09s9KljMpEWtc6X0OuMYEVR7 tqKgJBEVE+VHH+qDboCoDcA6IRd313cW -----END CERTIFICATE-----Generated at Sat May 17 07:06:06 2025 by rpki-client