$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: K/E+aXnc/h1RoxbI79ubryK5KO3mb8y8J8R+nJFPqAo= Subject key identifier: 9E:15:56:00:19:D2:AC:FB:0F:66:F8:F9:76:43:1D:27:FB:D8:26:1A Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 051E Signing time: Mon 12 May 2025 23:23:50 +0000 Manifest this update: Mon 12 May 2025 23:23:50 +0000 Manifest next update: Mon 19 May 2025 23:23:50 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: 8D+CoWWjXmjqH0695BOA/rioEZT4naHQNoTEHzH/LdU=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: May 12 23:23:50 2025 GMT Not After : May 19 23:23:50 2025 GMT Subject: CN=68228306-9dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:fa:c2:a5:39:aa:55:02:ea:3b:e5:40:31: 81:04:15:7e:78:2c:1f:65:65:0d:0c:1c:32:4c:6b: 55:47:3c:49:96:8a:99:c8:85:9f:03:b4:db:e2:92: 80:5c:91:ed:50:08:46:d4:cd:9f:32:bc:aa:92:ec: 05:7d:37:d1:a9:d7:fc:ee:b8:96:98:35:e9:21:9a: df:78:62:b1:4f:c2:b1:69:be:3f:2b:a3:4f:d5:b0: 82:eb:4c:b8:61:9e:19:ca:af:af:ff:ee:69:46:3e: a0:db:33:4c:1c:e7:26:c8:ab:88:fc:d6:94:44:06: 06:d8:ec:52:dd:b4:30:41:c3:48:05:e2:66:07:39: 81:12:15:cd:9b:45:99:61:bf:63:6e:9b:ee:5b:7b: 2a:00:7a:5f:14:2a:49:bc:c1:00:f9:b7:19:ae:94: f7:6e:e1:e3:06:26:71:8e:3c:c9:e8:36:1d:2d:1e: 50:6a:ef:59:7c:09:1c:b0:f5:65:73:8b:0d:3b:a1: 24:e0:36:10:3c:fb:8e:74:47:0d:6b:78:84:87:c6: ef:48:ba:5d:6b:bb:91:60:fb:47:ae:23:34:44:bf: 98:8f:8f:d0:fb:50:eb:43:67:f2:62:14:b8:b2:ba: 1e:16:ec:45:b7:a6:25:5b:09:c7:5a:39:c4:73:ac: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:15:56:00:19:D2:AC:FB:0F:66:F8:F9:76:43:1D:27:FB:D8:26:1A X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d4:aa:ac:12:41:ae:85:f1:fd:58:2f:d3:c4:fc:3d:6e:8c: 1a:cc:f9:c3:9e:f3:08:fb:2b:06:8c:60:4a:22:e8:d6:06:55: ce:30:0b:21:3b:35:0c:b5:7f:57:7b:e5:79:bb:ac:65:c2:5a: bd:cf:be:47:9c:3b:66:29:cf:71:ea:66:7b:a8:69:ca:4c:10: d1:ea:9e:41:0c:6c:38:9b:f6:9c:b0:85:4c:02:18:35:77:87: 52:1f:65:26:63:b7:8b:1d:03:51:d2:3d:9f:02:e0:73:0a:49: 4b:c2:fc:45:6e:46:a8:0a:53:8e:6c:57:b4:e0:7b:16:58:4c: d1:62:a5:28:29:7c:0f:88:aa:1b:06:4c:87:0c:e7:e1:af:53: 3c:84:2a:c4:6c:39:8d:dc:b6:39:90:4c:5c:ae:c3:f2:a4:a4: eb:ca:8b:a7:e4:c6:3c:1d:b9:db:e8:00:1f:29:b8:6b:b4:77: 2f:e7:66:ea:ea:85:e1:e5:c6:59:c0:e8:01:4d:7b:6a:73:bf: 81:0b:96:8f:0a:8c:77:fe:5d:3a:8a:74:eb:69:5c:96:a4:99: d3:9f:cc:49:67:48:b8:11:a7:7c:fa:90:5d:df:ba:8a:70:43: 7d:81:27:e0:3e:94:05:ef:27:93:af:b2:19:74:85:4c:3a:67: f1:0c:35:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwNTEyMjMyMzUwWhcNMjUwNTE5MjMyMzUwWjAYMRYwFAYD VQQDEw02ODIyODMwNi05ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DT6wqU5qlUC6jvlQDGBBBV+eCwfZWUNDBwyTGtVRzxJloqZyIWfA7Tb4pKA XJHtUAhG1M2fMryqkuwFfTfRqdf87riWmDXpIZrfeGKxT8Kxab4/K6NP1bCC60y4 YZ4Zyq+v/+5pRj6g2zNMHOcmyKuI/NaURAYG2OxS3bQwQcNIBeJmBzmBEhXNm0WZ Yb9jbpvuW3sqAHpfFCpJvMEA+bcZrpT3buHjBiZxjjzJ6DYdLR5Qau9ZfAkcsPVl c4sNO6Ek4DYQPPuOdEcNa3iEh8bvSLpda7uRYPtHriM0RL+Yj4/Q+1DrQ2fyYhS4 sroeFuxFt6YlWwnHWjnEc6wfOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4VVgAZ 0qz7D2b4+XZDHSf72CYaMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs1KqsEkGuhfH9WC/TxPw9bowazPnDnvMI+ysGjGBKIujWBlXOMAsh OzUMtX9Xe+V5u6xlwlq9z75HnDtmKc9x6mZ7qGnKTBDR6p5BDGw4m/acsIVMAhg1 d4dSH2UmY7eLHQNR0j2fAuBzCklLwvxFbkaoClOObFe04HsWWEzRYqUoKXwPiKob BkyHDOfhr1M8hCrEbDmN3LY5kExcrsPypKTryoun5MY8Hbnb6AAfKbhrtHcv52bq 6oXh5cZZwOgBTXtqc7+BC5aPCox3/l06inTraVyWpJnTn8xJZ0i4Ead8+pBd37qK cEN9gSfgPpQF7yeTr7IZdIVMOmfxDDW1 -----END CERTIFICATE-----Generated at Wed May 14 19:36:00 2025 by rpki-client