$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft File: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json) Hash identifier: Ld9tKdXTC3QOsZd2gQyJJfooPmcs6LR3XLL2Qb1l8aE= Subject key identifier: 21:2E:6E:22:D1:85:8D:AD:DF:79:51:16:27:2C:D3:35:9F:C2:39:E6 Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E Certificate issuer: /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft Manifest number: 0B1A Signing time: Mon 12 May 2025 19:05:49 +0000 Manifest this update: Mon 12 May 2025 19:05:49 +0000 Manifest next update: Mon 19 May 2025 19:05:49 +0000 Files and hashes: 1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: CSY7yM42gF8elEn1JT2omNbx7pLpVmK6N/bfqUl4AHw=) 2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Validity Not Before: May 12 19:05:49 2025 GMT Not After : May 19 19:05:49 2025 GMT Subject: CN=6822468d-0523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:12:71:03:c8:f4:22:4e:5c:13:f2:0b:1a: 97:c7:cd:cd:76:e9:fd:92:a7:8a:ce:e4:6d:66:6c: b9:11:fe:73:3d:85:86:38:43:7d:29:77:39:19:c0: 6c:06:b1:3a:f9:c1:6b:9e:e8:fd:03:30:47:fc:ae: 3f:87:27:e5:5e:d9:49:65:67:7f:fa:77:56:aa:59: 95:11:6b:3c:71:ad:05:98:a1:14:2f:c1:94:30:85: d9:97:e1:61:e0:62:5b:ee:f3:fc:ea:2a:60:c9:28: 73:59:c2:1f:1e:74:44:cc:92:be:a7:f4:91:23:60: d3:ec:2a:4b:e0:c9:70:12:a1:97:21:a3:09:5e:8a: 06:d6:16:95:62:d4:20:ae:0e:d4:e2:a1:9e:0a:f2: 66:ed:3e:e4:e9:b2:c1:a6:b2:4a:da:60:6c:8e:9b: 40:42:da:e7:5c:56:cb:45:cb:56:58:56:e9:49:30: 1d:96:bb:fc:26:20:ba:63:70:a8:6c:16:b5:01:c8: 8d:cf:f2:15:69:83:d7:6e:54:c2:b0:90:c8:8f:a1: b0:5f:ed:c2:5a:42:4e:5f:b5:5e:c5:74:76:c8:58: c2:28:cb:f0:fb:8c:07:52:09:50:bc:5c:18:05:8b: 3b:2e:8a:c6:3b:6a:99:42:b4:47:7f:2c:76:d1:4d: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2E:6E:22:D1:85:8D:AD:DF:79:51:16:27:2C:D3:35:9F:C2:39:E6 X509v3 Authority Key Identifier: keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:39:ef:9c:43:7c:72:d0:4b:a8:b6:d9:a8:ac:ba:7c:5f:0a: 8f:24:f9:85:dd:48:10:01:c2:8c:d6:76:07:0c:d3:af:c3:6b: 55:85:dc:5a:aa:50:c1:a1:a9:db:6c:0d:60:fe:d1:7d:19:6e: 88:5f:48:7b:00:4d:5e:48:60:a6:46:fd:e4:b3:8f:9e:40:e5: cd:ea:71:45:33:70:c5:d5:50:6b:6e:f4:33:58:be:26:56:e4: b8:63:55:49:97:11:be:82:9c:1e:ad:8f:67:50:72:5c:ab:ad: 1d:99:eb:8b:e9:38:a1:e4:b1:62:3f:c7:34:c4:eb:f9:db:83: 9d:45:2f:24:91:b3:c0:a0:d7:0e:83:4c:d0:15:76:23:b0:a0: 92:d9:96:3e:1d:a1:9c:5e:07:63:31:2c:92:84:7b:97:c6:30: cf:f4:80:15:ef:cb:e3:fa:33:19:05:56:c5:fd:ca:24:96:8f: 90:f6:1f:3b:cc:35:95:c3:f2:72:e9:48:0e:12:56:ca:da:2d: 22:ad:21:9c:3a:7d:ee:7b:40:17:e6:d0:00:86:8c:18:95:42: 27:f7:64:97:e9:b7:7c:82:2a:e6:b8:9d:ca:53:9b:a4:da:df: 4a:8b:81:51:39:dd:e3:4c:39:87:3b:eb:c5:41:60:b0:80:00: 34:76:f9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM0MTUxMTAvBgNVBAUTKEYwQ0IzNUYxNDVFNjFCMUMyMDQzQUZEMUJBNEUzNTQx NDdDNEI1NUUwHhcNMjUwNTEyMTkwNTQ5WhcNMjUwNTE5MTkwNTQ5WjAYMRYwFAYD VQQDEw02ODIyNDY4ZC0wNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oIScQPI9CJOXBPyCxqXx83Ndun9kqeKzuRtZmy5Ef5zPYWGOEN9KXc5GcBs BrE6+cFrnuj9AzBH/K4/hyflXtlJZWd/+ndWqlmVEWs8ca0FmKEUL8GUMIXZl+Fh 4GJb7vP86ipgyShzWcIfHnREzJK+p/SRI2DT7CpL4MlwEqGXIaMJXooG1haVYtQg rg7U4qGeCvJm7T7k6bLBprJK2mBsjptAQtrnXFbLRctWWFbpSTAdlrv8JiC6Y3Co bBa1AciNz/IVaYPXblTCsJDIj6GwX+3CWkJOX7VexXR2yFjCKMvw+4wHUglQvFwY BYs7LorGO2qZQrRHfyx20U2ElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEubiLR hY2t33lRFics0zWfwjnmMB8GA1UdIwQYMBaAFPDLNfFF5hscIEOv0bpONUFHxLVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzQxNS8xMDcyMDk0ODNE RkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4d2dRNl9SdWs0MVFVZkV0 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNczE4VVhtR3h3Z1E2X1J1azQxUVVmRXRWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzQxNS8xMDcyMDk0ODNERkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4 d2dRNl9SdWs0MVFVZkV0VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOe+cQ3xy0EuottmorLp8XwqPJPmF3UgQAcKM1nYHDNOvw2tVhdxa qlDBoanbbA1g/tF9GW6IX0h7AE1eSGCmRv3ks4+eQOXN6nFFM3DF1VBrbvQzWL4m VuS4Y1VJlxG+gpwerY9nUHJcq60dmeuL6Tih5LFiP8c0xOv524OdRS8kkbPAoNcO g0zQFXYjsKCS2ZY+HaGcXgdjMSyShHuXxjDP9IAV78vj+jMZBVbF/coklo+Q9h87 zDWVw/Jy6UgOElbK2i0irSGcOn3ue0AX5tAAhowYlUIn92SX6bd8girmuJ3KU5uk 2t9Ki4FROd3jTDmHO+vFQWCwgAA0dvmF -----END CERTIFICATE-----Generated at Wed May 14 04:47:47 2025 by rpki-client