$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: L1VfXkrou/o0pZxAqwLAsQdfCyWjt0prXbY7U7mcDP0= Subject key identifier: E8:83:97:0B:CF:42:CF:24:15:AB:D6:B2:B1:57:4D:5E:BD:B8:FD:62 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 261C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2604 Signing time: Sat 10 May 2025 15:38:39 +0000 Manifest this update: Sat 10 May 2025 15:38:39 +0000 Manifest next update: Sat 17 May 2025 15:38:39 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: OJ8AboPAPSP4YCFjmwrYQz9ZCzgXQco1HUrnvXbCh9c=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9756 (0x261c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: May 10 15:38:39 2025 GMT Not After : May 17 15:38:39 2025 GMT Subject: CN=681f72ff-303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:79:cb:60:03:fb:bd:89:73:9a:63:c3:29: 57:85:ed:61:55:8c:51:ce:21:71:36:af:41:f8:39: 4a:d1:32:05:36:49:9e:52:96:eb:7b:cd:75:50:dd: 05:2d:7c:3e:c0:c1:e5:48:f0:3c:57:3e:c3:06:e0: 2c:55:0d:70:e1:03:d8:d0:2a:d0:d5:7b:e1:14:d4: 25:46:e8:e9:9b:21:be:6a:8d:c0:a4:0e:5d:51:10: ba:ab:93:4d:4c:29:7e:9f:c5:3f:00:d8:55:08:6b: c0:71:5a:12:4c:31:97:40:b4:bf:6f:80:26:05:7f: d4:11:a9:3b:c5:08:15:c3:b7:ad:5e:24:e2:50:c8: 21:09:73:a4:d9:fc:47:cc:a1:d8:dc:0b:06:c2:56: fb:2a:b9:f1:25:3a:31:86:27:b8:1f:b8:4e:02:a9: 03:34:e7:c0:70:9e:f1:b1:e6:a9:09:10:35:fd:4e: 85:0e:05:8d:e7:e1:cb:e7:37:25:16:c1:d3:66:09: e9:23:40:6b:f0:2e:6a:48:d5:e9:9e:3a:51:09:b2: 35:d8:50:ff:5f:9b:2e:0c:64:7c:be:55:19:39:42: 3f:b6:7b:30:03:50:48:16:58:b9:43:08:c1:c9:3d: f5:e4:01:db:84:bc:f1:b0:b2:48:df:0b:69:72:5e: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:83:97:0B:CF:42:CF:24:15:AB:D6:B2:B1:57:4D:5E:BD:B8:FD:62 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b5:79:69:07:ba:20:4b:8a:f5:35:3a:46:fa:f3:1c:34:84: a1:bc:b4:ba:0b:d0:ee:94:1e:2b:b6:40:fc:d2:da:71:7e:43: a4:4c:c9:0d:4c:cd:09:8e:8a:48:5e:e2:fb:5a:b2:f2:47:5f: 41:44:95:0c:06:b3:87:ae:65:28:4a:4f:a3:f5:38:77:71:bb: d4:f0:77:0d:c4:95:50:79:f8:77:43:87:ba:1d:86:86:1a:47: 1d:b6:45:f8:ae:bb:c9:3c:d2:71:09:b7:a5:31:93:3f:62:d7: 6a:59:16:22:53:41:37:c2:9e:90:72:1a:fd:ad:b9:33:b5:e5: 5d:29:e2:bf:af:b1:fc:b7:e1:4a:61:52:44:1e:39:33:a1:d6: 55:c3:30:14:8a:2c:17:a8:12:6c:2c:da:e2:4c:7e:36:a9:91: 58:e6:56:0a:9b:b9:76:b6:38:89:74:ec:c3:6e:96:75:78:fd: a3:7f:00:1e:55:55:ed:90:84:cc:6e:6f:05:8f:63:db:a2:32: 97:1e:8b:e1:78:7c:1e:54:0b:15:49:5e:d7:8f:0f:30:43:84: 04:c9:08:04:04:1b:a3:10:6b:e7:b5:5d:12:c3:e7:8f:9c:87: 2e:8e:d3:e5:42:30:27:af:7a:91:ed:d6:24:45:eb:0c:08:80: b7:ed:46:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNTEwMTUzODM5WhcNMjUwNTE3MTUzODM5WjAYMRYwFAYD VQQDEw02ODFmNzJmZi0zMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO15y2AD+72Jc5pjwylXhe1hVYxRziFxNq9B+DlK0TIFNkmeUpbre811UN0F LXw+wMHlSPA8Vz7DBuAsVQ1w4QPY0CrQ1XvhFNQlRujpmyG+ao3ApA5dURC6q5NN TCl+n8U/ANhVCGvAcVoSTDGXQLS/b4AmBX/UEak7xQgVw7etXiTiUMghCXOk2fxH zKHY3AsGwlb7KrnxJToxhie4H7hOAqkDNOfAcJ7xseapCRA1/U6FDgWN5+HL5zcl FsHTZgnpI0Br8C5qSNXpnjpRCbI12FD/X5suDGR8vlUZOUI/tnswA1BIFli5QwjB yT315AHbhLzxsLJI3wtpcl6k7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiDlwvP Qs8kFavWsrFXTV69uP1iMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+tXlpB7ogS4r1NTpG+vMcNIShvLS6C9DulB4rtkD80tpxfkOkTMkN TM0JjopIXuL7WrLyR19BRJUMBrOHrmUoSk+j9Th3cbvU8HcNxJVQefh3Q4e6HYaG GkcdtkX4rrvJPNJxCbelMZM/YtdqWRYiU0E3wp6Qchr9rbkzteVdKeK/r7H8t+FK YVJEHjkzodZVwzAUiiwXqBJsLNriTH42qZFY5lYKm7l2tjiJdOzDbpZ1eP2jfwAe VVXtkITMbm8Fj2PbojKXHovheHweVAsVSV7Xjw8wQ4QEyQgEBBujEGvntV0Sw+eP nIcujtPlQjAnr3qR7dYkResMCIC37UZv -----END CERTIFICATE-----Generated at Mon May 12 03:57:55 2025 by rpki-client