$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: k8wwJOzHVohyZRTps2vLAiNo0n4aH9jql6UJ4d9683o= Subject key identifier: C8:88:D7:FE:16:12:5A:EA:5C:FB:5A:C3:5E:37:01:00:33:F4:5B:78 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 09C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09A4 Signing time: Mon 12 May 2025 19:56:39 +0000 Manifest this update: Mon 12 May 2025 19:56:39 +0000 Manifest next update: Mon 19 May 2025 19:56:39 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: kgwDSClzdCb6oWE6Bk8UJe40O2bHkUUuxttJdwXKYvA=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: May 12 19:56:39 2025 GMT Not After : May 19 19:56:39 2025 GMT Subject: CN=68225277-063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:af:92:e3:cf:36:89:d1:64:5d:f7:0d:bb: b8:fb:3f:8c:30:2f:98:ae:f1:13:72:73:8e:53:05: d2:e5:f1:39:62:38:27:ff:b5:6d:23:f5:d6:dc:53: a9:f7:4e:1a:48:4a:f7:65:ca:bc:95:0f:12:d6:95: 5a:30:28:24:b4:59:eb:53:27:d8:6e:c2:f1:a4:85: 9a:65:4c:b7:28:ac:a5:f3:55:84:c4:ea:2b:6c:15: f6:f7:2d:ee:08:3d:7e:71:c5:2e:c8:97:88:43:83: 9c:6e:33:c4:60:09:f0:a6:3e:dd:d8:56:99:8e:a3: e9:26:5b:1f:7b:2c:2b:a4:2e:ec:a2:05:52:c1:96: 8f:51:47:21:78:cc:71:52:d8:d0:e3:99:f2:fa:3f: 3c:f4:c0:4e:b6:d2:8f:57:e4:b1:95:37:67:ea:a5: 52:f2:af:56:c9:1b:c2:bd:e1:68:ba:26:7c:99:bf: 04:b6:9f:62:a9:02:4d:45:fa:d9:7d:6c:23:95:59: 9b:31:4f:2a:4b:29:bc:cf:51:73:23:b6:77:4b:88: a9:de:3f:c6:1f:09:a9:73:84:21:8b:86:de:dd:a2: 09:65:ce:e5:fd:93:f1:39:88:6d:b2:95:94:c4:7f: 39:a5:7b:d8:44:09:e8:74:0c:13:cc:6f:62:94:21: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:88:D7:FE:16:12:5A:EA:5C:FB:5A:C3:5E:37:01:00:33:F4:5B:78 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:63:f4:85:4b:e8:ff:09:af:3c:34:0b:08:91:c8:81:c2:5b: 30:0d:4e:9a:b2:48:bd:d0:c5:e1:4b:b7:1b:9c:ed:36:ed:f3: cf:21:53:22:ce:c4:8f:11:22:a0:e0:15:23:42:b9:45:29:1d: 2b:d9:ff:ab:98:af:61:7a:70:f5:2c:80:1c:84:d2:9a:49:8c: 09:48:d8:c2:eb:a0:f9:21:21:44:14:a4:46:67:2f:65:10:e8: 46:95:2f:80:67:6b:4f:95:94:3c:ff:3d:99:a9:84:6d:a9:a9: ad:e5:2c:f0:8e:c4:2f:ef:62:11:b3:55:61:48:b7:23:33:c6: 75:16:ed:bb:f5:2c:f4:f0:f3:b6:92:42:57:7b:f5:b5:89:1d: 5d:37:de:db:3b:41:15:f4:f4:7c:ce:27:ea:39:90:92:96:46: df:9d:8a:e4:96:76:82:86:3c:59:e1:9c:69:45:e6:8a:c6:bd: b8:8d:7a:ed:ad:9f:9a:02:42:81:a9:e8:4a:a5:b8:c7:2e:31: 15:b7:ff:9a:be:fd:a2:7d:c7:37:a2:8f:72:b8:32:bf:0c:03: 96:cf:ae:f0:59:64:d6:d1:b2:64:49:ed:c2:d0:71:ea:37:88: e9:73:64:77:86:e8:e4:bb:63:6e:b0:73:0c:30:dd:85:50:d1: fd:f5:af:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUwNTEyMTk1NjM5WhcNMjUwNTE5MTk1NjM5WjAYMRYwFAYD VQQDEw02ODIyNTI3Ny0wNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomavkuPPNonRZF33Dbu4+z+MMC+YrvETcnOOUwXS5fE5Yjgn/7VtI/XW3FOp 904aSEr3Zcq8lQ8S1pVaMCgktFnrUyfYbsLxpIWaZUy3KKyl81WExOorbBX29y3u CD1+ccUuyJeIQ4OcbjPEYAnwpj7d2FaZjqPpJlsfeywrpC7sogVSwZaPUUcheMxx UtjQ45ny+j889MBOttKPV+SxlTdn6qVS8q9WyRvCveFouiZ8mb8Etp9iqQJNRfrZ fWwjlVmbMU8qSym8z1FzI7Z3S4ip3j/GHwmpc4Qhi4be3aIJZc7l/ZPxOYhtspWU xH85pXvYRAnodAwTzG9ilCF0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiI1/4W ElrqXPtaw143AQAz9Ft4MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTY/SFS+j/Ca88NAsIkciBwlswDU6aski90MXhS7cbnO027fPPIVMi zsSPESKg4BUjQrlFKR0r2f+rmK9henD1LIAchNKaSYwJSNjC66D5ISFEFKRGZy9l EOhGlS+AZ2tPlZQ8/z2ZqYRtqamt5SzwjsQv72IRs1VhSLcjM8Z1Fu279Sz08PO2 kkJXe/W1iR1dN97bO0EV9PR8zifqOZCSlkbfnYrklnaChjxZ4ZxpReaKxr24jXrt rZ+aAkKBqehKpbjHLjEVt/+avv2ifcc3oo9yuDK/DAOWz67wWWTW0bJkSe3C0HHq N4jpc2R3hujku2NusHMMMN2FUNH99a+2 -----END CERTIFICATE-----Generated at Wed May 14 07:39:11 2025 by rpki-client