$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft File: Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json) Hash identifier: gopoNwQxZrl+iMwvJ64OXztuOXytJtnxgnSS6fXD2WM= Subject key identifier: 98:AF:D2:01:84:18:FA:EA:DA:AF:65:39:FC:9C:D2:E9:A0:F2:88:C1 Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Certificate serial: 0D8E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft Manifest number: 0D6F Signing time: Mon 12 May 2025 14:22:27 +0000 Manifest this update: Mon 12 May 2025 14:22:27 +0000 Manifest next update: Mon 19 May 2025 14:22:27 +0000 Files and hashes: 1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: 5YmcDMhKo5WUIYFmnBziBFXBoVPLox91tYJ4LirOrNM=) 2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: p/azHtFptIXURVSRFgPxqoeDhngoYTd2NG88s2QFFzY=) 3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: 9l1Haea64b2aYD99677ab4KdKZDozQlY1l2PmY/FJ1w=) 4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: 7OpoMhu5yrBYJukUqf3gKs+QCXSGnK6psVOlWcESVPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3470 (0xd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Validity Not Before: May 12 14:22:27 2025 GMT Not After : May 19 14:22:27 2025 GMT Subject: CN=68220423-01ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:39:85:e3:b0:f2:84:27:37:bd:69:4b:05: db:9d:47:f6:59:5d:17:55:ca:d9:14:f8:32:ef:ce: 47:ab:7a:e3:21:d1:de:cb:cc:4b:30:08:ef:5a:e2: d9:20:d5:48:5f:d5:5e:53:13:da:9a:97:61:53:79: f1:06:89:f5:75:18:f4:53:db:51:34:82:6d:ad:ee: 39:be:74:dc:52:5e:7c:ab:ae:c7:67:cd:45:a3:1d: 4f:60:a5:83:0b:00:c3:59:f7:f8:e6:25:17:31:98: 30:cf:30:0c:51:4d:3c:87:f7:d5:0d:d6:bd:f0:a0: b2:32:a7:7d:52:31:7c:d2:b4:fe:69:f6:98:66:2c: 11:10:34:75:a3:a5:98:29:e2:4f:f2:15:37:8c:9e: 2d:bb:6a:0e:64:90:28:71:ad:dd:d9:67:2b:08:08: 16:7e:2b:59:3b:c4:3a:27:06:e9:0f:14:22:9a:86: 9e:cb:5a:c1:de:26:16:79:e6:5a:af:29:93:ac:f6: 6f:14:24:39:f9:95:9e:57:a0:13:6e:8b:2a:b3:c3: 75:2f:5c:a0:da:33:df:71:73:c4:be:34:20:66:2d: 40:1a:30:bd:4f:23:75:b2:20:c6:57:75:97:64:a1: 06:1f:c2:bf:23:4b:45:b4:a9:54:6a:1e:b8:05:44: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AF:D2:01:84:18:FA:EA:DA:AF:65:39:FC:9C:D2:E9:A0:F2:88:C1 X509v3 Authority Key Identifier: keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:30:2c:87:af:14:52:e7:45:03:47:4a:64:9d:93:95:4b: 41:c3:f6:f7:19:01:76:4a:37:37:60:ee:b4:6d:d5:91:a9:4d: 85:5a:64:cc:1d:ab:ec:33:69:40:5f:ac:4a:21:97:ef:d3:1f: 2f:86:65:74:f2:c8:eb:41:a9:a1:fc:7a:50:86:a5:ca:24:c2: cd:46:11:19:7c:dd:92:b3:71:56:88:61:4c:5a:30:b0:15:08: 05:8a:c4:b2:58:32:8f:63:30:25:23:d9:9e:6f:f4:46:1d:3a: 9f:83:af:6e:a5:ce:d7:33:72:62:62:68:aa:fd:71:90:82:c5: 96:e3:c4:d1:5a:29:0c:39:b9:0a:d2:81:a0:a4:97:09:68:a2: e6:40:77:5c:c5:d4:f5:0f:d1:3e:c6:92:97:45:17:50:f4:fe: 2d:b3:79:f2:4e:6c:75:2a:63:45:e2:c0:55:96:29:4f:65:50: 46:91:91:cb:db:b6:d0:e0:99:54:b4:75:43:8b:ee:75:49:96: 5c:ce:5d:e6:00:34:cd:36:c1:e9:a6:32:d7:aa:ad:cf:5e:8c: 7c:b0:76:36:4a:ff:a0:54:5d:4e:24:95:c4:7c:6f:0f:9a:f9: 9d:5e:88:96:a2:ee:07:06:f7:82:8a:8e:f7:90:ce:44:0a:8d: e3:7f:51:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1 MTk1QjNCQTkwHhcNMjUwNTEyMTQyMjI3WhcNMjUwNTE5MTQyMjI3WjAYMRYwFAYD VQQDEw02ODIyMDQyMy0wMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OE5heOw8oQnN71pSwXbnUf2WV0XVcrZFPgy785Hq3rjIdHey8xLMAjvWuLZ INVIX9VeUxPampdhU3nxBon1dRj0U9tRNIJtre45vnTcUl58q67HZ81Fox1PYKWD CwDDWff45iUXMZgwzzAMUU08h/fVDda98KCyMqd9UjF80rT+afaYZiwREDR1o6WY KeJP8hU3jJ4tu2oOZJAoca3d2WcrCAgWfitZO8Q6JwbpDxQimoaey1rB3iYWeeZa rymTrPZvFCQ5+ZWeV6ATbosqs8N1L1yg2jPfcXPEvjQgZi1AGjC9TyN1siDGV3WX ZKEGH8K/I0tFtKlUah64BURF6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiv0gGE GPrq2q9lOfyc0umg8ojBMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD NWc4a2FaR1RyaUZSbGJPNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVmjAsh68UUudFA0dKZJ2TlUtBw/b3GQF2Sjc3YO60bdWRqU2FWmTM HavsM2lAX6xKIZfv0x8vhmV08sjrQamh/HpQhqXKJMLNRhEZfN2Ss3FWiGFMWjCw FQgFisSyWDKPYzAlI9meb/RGHTqfg69upc7XM3JiYmiq/XGQgsWW48TRWikMObkK 0oGgpJcJaKLmQHdcxdT1D9E+xpKXRRdQ9P4ts3nyTmx1KmNF4sBVlilPZVBGkZHL 27bQ4JlUtHVDi+51SZZczl3mADTNNsHppjLXqq3PXox8sHY2Sv+gVF1OJJXEfG8P mvmdXoiWou4HBveCio73kM5ECo3jf1GE -----END CERTIFICATE-----Generated at Tue May 13 19:26:41 2025 by rpki-client