$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: 6DdEjTq6cdusrOifGyZSh8zKSk3U1DE3KKQQ8tWutIQ= Subject key identifier: EA:11:1A:59:1B:AD:75:6B:85:93:20:62:32:C0:51:9C:26:B2:8C:7C Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 76 Signing time: Mon 05 May 2025 05:38:52 +0000 Manifest this update: Mon 05 May 2025 05:38:51 +0000 Manifest next update: Mon 12 May 2025 05:38:51 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: c95EawKMKUVzlZmynO3e7x6dS2qLV920+X/PzOXmhQc=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: May 5 05:38:51 2025 GMT Not After : May 12 05:38:51 2025 GMT Subject: CN=68184eec-cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:69:26:9a:98:cf:ca:d4:f1:86:da:ee:5e: 83:9c:cd:bf:ac:30:b6:c5:d5:93:63:6a:08:41:7a: 1c:21:b1:74:1d:33:3d:9a:ef:ec:de:32:93:60:97: 15:58:11:6e:25:e9:cb:9d:50:22:92:9e:44:2d:6a: 64:e7:77:ed:81:87:fc:08:a8:ad:44:9b:60:f2:a1: 3c:b7:f0:4b:c1:a4:99:f6:5a:e5:f4:2c:30:c1:4f: e1:3a:46:6a:e2:4d:2f:22:48:78:36:4f:a8:16:79: 32:13:82:ae:98:5b:1f:e5:cf:53:39:a3:50:67:9c: 9d:03:51:ab:76:3f:c0:44:af:7f:68:71:b9:8a:74: 9c:9c:88:6b:50:53:78:20:bd:08:13:20:13:7a:8b: f1:0a:b6:01:67:8d:92:bb:df:95:f8:2b:95:3a:12: 5d:22:ca:95:44:a4:3c:ea:bf:27:20:d0:ff:90:cb: d1:74:bb:6b:02:b7:d7:35:00:46:7b:c6:52:9c:e8: 52:73:ba:7f:d6:b6:f1:38:60:0a:a0:3e:da:52:c5: d5:e4:bd:7f:7f:3d:81:58:96:88:c8:53:d9:44:fc: 5d:35:2f:e5:7f:b8:5e:1e:d0:1d:ae:a0:91:3f:1b: 76:26:bf:02:44:59:e6:12:2d:47:f7:1a:ff:b3:e1: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:11:1A:59:1B:AD:75:6B:85:93:20:62:32:C0:51:9C:26:B2:8C:7C X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:33:d2:10:f0:82:21:b2:2e:40:04:34:a1:0f:01:04:dd:74: 72:bf:36:85:1b:a0:06:71:c1:15:11:0c:44:58:ca:69:2b:28: 6a:9f:f6:99:f4:51:1f:fe:68:ad:e6:8a:e4:4a:54:0d:71:e8: 3f:19:e7:ea:fe:2c:77:7a:9b:e1:68:ac:70:ef:36:4d:83:ce: d1:2b:c4:fd:f3:13:cf:94:db:7b:56:2c:ea:ae:cf:6b:ac:3d: dd:20:aa:25:94:19:62:b5:7b:43:d1:59:4e:cf:ef:0b:b3:e2: d8:98:c8:cb:53:4d:4c:34:ab:df:e7:3e:0b:cb:f9:f2:36:59: 49:1a:88:93:d5:f8:77:b3:6e:bf:7e:c3:19:3f:ea:2d:d1:0c: 2b:ab:e6:80:55:e9:2c:c2:27:7a:93:a5:87:df:d6:d6:3b:a5: cc:96:80:2f:25:5f:57:db:37:90:87:70:69:74:27:e7:b5:6c: cf:29:0f:8e:aa:10:0e:c5:12:9e:15:9b:da:47:49:c4:a8:a6: d4:37:aa:79:54:25:53:54:6e:46:d6:4b:f8:ac:94:ed:14:62: 29:54:b5:44:d3:f1:4e:fc:c0:98:11:66:aa:80:08:13:48:ac: 2e:a2:68:9e:cf:30:0c:1e:48:e4:58:db:ba:a1:f0:d2:28:fe: 7f:c2:51:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUE1ODExMC8GA1UEBRMoRjI0N0FFQkQwNzVGQzhDQkYzRDlCODA1NTY5RUFCQkVF Nzk3NUIwQjAeFw0yNTA1MDUwNTM4NTFaFw0yNTA1MTIwNTM4NTFaMBgxFjAUBgNV BAMTDTY4MTg0ZWVjLWNkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4bWkmmpjPytTxhtruXoOczb+sMLbF1ZNjaghBehwhsXQdMz2a7+zeMpNglxVY EW4l6cudUCKSnkQtamTnd+2Bh/wIqK1Em2DyoTy38EvBpJn2WuX0LDDBT+E6Rmri TS8iSHg2T6gWeTITgq6YWx/lz1M5o1BnnJ0DUat2P8BEr39ocbmKdJyciGtQU3gg vQgTIBN6i/EKtgFnjZK735X4K5U6El0iypVEpDzqvycg0P+Qy9F0u2sCt9c1AEZ7 xlKc6FJzun/WtvE4YAqgPtpSxdXkvX9/PYFYlojIU9lE/F01L+V/uF4e0B2uoJE/ G3YmvwJEWeYSLUf3Gv+z4RxRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6hEaWRut dWuFkyBiMsBRnCayjHwwHwYDVR0jBBgwFoAU8keuvQdfyMvz2bgFVp6rvueXWwsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QTU4L0Q2RjEwNTIyN0JG RDExRUZBN0I4RUI1Q0M0RjlBRTAyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtldXZRZGZ5TXZ6MmJnRlZwNnJ2dWVYV3dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QTU4L0Q2RjEwNTIyN0JGRDExRUZBN0I4RUI1Q0M0RjlBRTAyLzhrZXV2UWRmeU12 ejJiZ0ZWcDZydnVlWFd3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMAz0hDwgiGyLkAENKEPAQTddHK/NoUboAZxwRURDERYymkrKGqf9pn0 UR/+aK3miuRKVA1x6D8Z5+r+LHd6m+ForHDvNk2DztErxP3zE8+U23tWLOquz2us Pd0gqiWUGWK1e0PRWU7P7wuz4tiYyMtTTUw0q9/nPgvL+fI2WUkaiJPV+Hezbr9+ wxk/6i3RDCur5oBV6SzCJ3qTpYff1tY7pcyWgC8lX1fbN5CHcGl0J+e1bM8pD46q EA7FEp4Vm9pHScSoptQ3qnlUJVNUbkbWS/islO0UYilUtUTT8U78wJgRZqqACBNI rC6iaJ7PMAweSORY27qh8NIo/n/CUQY= -----END CERTIFICATE-----Generated at Mon May 5 22:23:46 2025 by rpki-client