$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: yJQu9XPIm1Rv/ILoObDVJAdaFKjPNnM7q9kFzr25bdw= Subject key identifier: 28:6D:8A:58:6B:75:27:82:AF:BB:5A:39:13:0E:C1:74:45:A8:A5:50 Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: 0179 Signing time: Tue 13 May 2025 02:57:50 +0000 Manifest this update: Tue 13 May 2025 02:57:50 +0000 Manifest next update: Tue 20 May 2025 02:57:49 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: wJijsLQz3rFVnvVxkJsysexAcayJfyN+QNHsWmMRKVw=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: uGKqx1ygUHWBkt6yQ6DRvhQVZZkNmLVdX986c5JBGJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: May 13 02:57:50 2025 GMT Not After : May 20 02:57:49 2025 GMT Subject: CN=6822b52e-224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:f9:d7:c3:90:bf:c0:f6:0b:9c:44:62:dd: 95:6d:ef:f4:06:49:f1:dc:29:09:15:20:65:c8:d4: 60:09:ac:27:73:59:b4:5d:da:67:71:c0:9c:01:ca: 7b:ad:81:fa:a9:a7:9e:8d:a6:e7:61:5d:32:33:a5: 44:a4:0d:40:f1:05:09:29:9a:9c:2c:31:b4:db:5c: 0f:2b:5b:10:a9:0a:0a:c2:74:2f:70:90:74:65:44: ea:46:80:45:28:b4:c5:31:69:b9:4d:60:48:85:35: 38:69:17:e2:82:51:61:0b:2e:96:e5:60:3e:dc:a8: 1d:84:dc:40:22:6d:17:00:e1:19:a2:9c:a6:56:0f: 1e:f4:e3:b9:8d:9a:5e:4f:ba:0a:68:12:a2:5b:9a: 99:7f:c2:03:13:ac:38:bd:d6:55:95:81:ad:30:ee: b0:1a:2a:c2:ab:8a:7c:cd:a2:ee:dd:c2:fb:a4:ff: c6:75:09:3f:37:e3:93:cd:15:c5:93:c7:22:39:2a: 5a:21:7a:1d:da:c1:68:d3:87:ca:28:55:76:09:51: de:4a:d3:f5:e1:fd:92:2f:c9:14:3b:90:98:10:91: 66:91:d1:9b:06:70:ca:ec:a0:33:89:2f:29:8d:28: bd:22:46:2a:c1:1a:6a:14:e6:e9:19:bd:46:8f:20: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6D:8A:58:6B:75:27:82:AF:BB:5A:39:13:0E:C1:74:45:A8:A5:50 X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:53:94:f0:df:91:ff:33:07:a0:bd:14:d6:8c:b0:4e:e5:e8: 91:90:e6:59:f8:8f:77:0d:d8:e6:18:54:48:91:1e:a6:4c:9f: 88:70:7f:40:0b:14:d2:26:d2:b8:6f:d1:1d:c2:84:9f:50:7e: ff:56:f3:66:f2:9d:49:1a:75:2e:b2:6a:1f:a3:43:4f:cf:4a: 4e:fc:1b:98:bc:d8:97:a2:75:6e:f4:61:e0:54:1f:56:e5:0b: 4f:47:ab:d7:57:9d:96:a6:1e:0d:73:c4:4a:fb:c5:b5:4b:e4: 05:80:fa:0e:de:60:bb:69:50:46:1f:7e:6c:ee:fa:50:e3:94: df:39:ff:3e:c8:f4:37:53:53:01:6c:df:d4:5b:55:aa:eb:37: 74:b9:39:3a:71:42:38:a6:c8:1a:e1:de:fc:d8:94:30:35:cf: 18:2a:e8:a4:56:1f:c8:bf:9a:6c:ca:99:20:3c:b4:f4:08:22: 2e:b1:9f:b7:a3:a9:a1:99:0d:51:97:07:7e:60:d1:fe:1d:0b: 75:3d:e3:94:28:25:c2:78:26:39:ff:df:88:3d:82:f5:ee:7a: 53:b5:49:f3:ba:cf:bc:43:47:44:40:32:fb:49:48:92:9f:fa: 74:9b:50:db:dd:87:ac:54:d3:44:60:42:25:68:c7:96:53:8f: da:bb:63:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjUwNTEzMDI1NzUwWhcNMjUwNTIwMDI1NzQ5WjAYMRYwFAYD VQQDEw02ODIyYjUyZS0yMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoir518OQv8D2C5xEYt2Vbe/0Bknx3CkJFSBlyNRgCawnc1m0XdpnccCcAcp7 rYH6qaeejabnYV0yM6VEpA1A8QUJKZqcLDG021wPK1sQqQoKwnQvcJB0ZUTqRoBF KLTFMWm5TWBIhTU4aRfiglFhCy6W5WA+3KgdhNxAIm0XAOEZopymVg8e9OO5jZpe T7oKaBKiW5qZf8IDE6w4vdZVlYGtMO6wGirCq4p8zaLu3cL7pP/GdQk/N+OTzRXF k8ciOSpaIXod2sFo04fKKFV2CVHeStP14f2SL8kUO5CYEJFmkdGbBnDK7KAziS8p jSi9IkYqwRpqFObpGb1GjyA5SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChtilhr dSeCr7taORMOwXRFqKVQMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2U5Tw35H/MwegvRTWjLBO5eiRkOZZ+I93DdjmGFRIkR6mTJ+IcH9A CxTSJtK4b9EdwoSfUH7/VvNm8p1JGnUusmofo0NPz0pO/BuYvNiXonVu9GHgVB9W 5QtPR6vXV52Wph4Nc8RK+8W1S+QFgPoO3mC7aVBGH35s7vpQ45TfOf8+yPQ3U1MB bN/UW1Wq6zd0uTk6cUI4psga4d782JQwNc8YKuikVh/Iv5psypkgPLT0CCIusZ+3 o6mhmQ1Rlwd+YNH+HQt1PeOUKCXCeCY5/9+IPYL17npTtUnzus+8Q0dEQDL7SUiS n/p0m1Db3YesVNNEYEIlaMeWU4/au2MP -----END CERTIFICATE-----Generated at Tue May 13 18:19:08 2025 by rpki-client