$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: bBSEDLvpb0fqJk70txIS6RhEgAWDHkglvFq9z5V7EV8= Subject key identifier: D8:88:07:BC:69:06:74:02:FF:6A:E7:3F:63:77:6A:54:17:0A:BF:9A Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: E6 Signing time: Tue 13 May 2025 04:35:55 +0000 Manifest this update: Tue 13 May 2025 04:35:54 +0000 Manifest next update: Tue 20 May 2025 04:35:54 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: ju76OGbKrMrBASK8ktBw/bSLD0pYm6KXOAPWrlzNSl0=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: May 13 04:35:54 2025 GMT Not After : May 20 04:35:54 2025 GMT Subject: CN=6822cc2b-bd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:40:71:c3:5a:6c:6b:75:6f:f3:d1:a6:93: 59:e9:6c:d1:6e:d1:46:6b:d7:5f:67:10:f5:5f:38: d6:ec:d6:bd:19:d9:6a:cb:26:9b:e3:b0:05:3b:19: 3a:58:ed:60:0f:96:56:87:a8:f6:6a:57:4e:3e:53: af:96:6f:6d:e9:79:e7:f5:8c:b9:9b:e4:5e:c9:50: 2c:e2:62:f9:08:82:34:28:9b:26:ad:cb:25:aa:02: bb:14:16:f9:a1:f8:7b:0a:66:7c:45:58:31:5a:aa: 47:37:09:8d:46:31:6e:76:9b:39:ec:61:a1:2b:19: f5:2c:f7:09:7d:3c:6a:45:e6:66:67:1b:b2:fd:9d: 54:8d:c8:32:17:31:a2:48:65:67:02:2f:55:e2:4e: 5d:6a:02:0e:3c:14:87:b9:2b:81:19:c0:ee:35:0e: 3e:19:68:5c:40:2f:31:77:40:74:4b:9b:f2:d6:20: 5d:80:d9:7a:c9:2b:76:ce:78:80:a5:e8:4a:b3:02: 4e:e7:65:fe:ae:c9:9d:55:19:c3:76:7c:d9:6f:76: ce:10:d5:15:2a:04:1d:ac:49:e4:67:fe:54:06:31: c8:6c:c6:57:fa:06:2e:d9:43:dc:cc:f3:bb:97:3a: 9d:06:50:02:38:71:9c:e4:87:bc:04:07:94:e0:63: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:07:BC:69:06:74:02:FF:6A:E7:3F:63:77:6A:54:17:0A:BF:9A X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:24:02:dd:b2:26:2a:8a:a7:07:2e:90:75:a0:31:ea:b5:a6: 02:3c:38:81:48:bf:37:60:c3:4c:e5:13:29:d5:0e:b5:3d:84: 1d:c7:1b:9f:46:36:db:b3:da:84:b0:e2:06:da:80:f1:a1:76: 35:88:b9:03:43:d1:b9:08:4d:87:f2:29:5f:e9:3a:04:29:df: bc:d5:e4:15:32:cf:78:49:7b:f7:46:34:e9:15:4c:bc:ef:fc: c2:c3:d8:2b:90:d2:27:41:aa:6a:bf:ed:7d:53:ce:bd:14:9e: 45:6b:79:b0:ea:d7:93:af:71:b6:d6:2e:33:f1:7e:b2:25:18: 42:59:da:a5:d2:0c:85:ed:e0:20:4b:fb:9e:12:fa:8a:25:d1: be:b6:45:e6:d6:40:8a:09:91:92:6f:bc:84:2b:7a:7b:81:ba: f7:37:b0:67:21:09:ef:d5:a7:cc:14:be:7a:c2:46:5f:f7:29: 1c:10:fb:75:53:a4:bd:ff:67:e8:55:ef:bc:88:66:85:df:f0: 4a:c8:12:f1:36:1a:58:5a:23:8e:81:7a:d9:7a:3e:02:9e:28: 9a:3b:38:d1:1f:8d:b4:df:06:1c:7b:c2:1d:ca:8a:2b:cd:30: 24:20:bf:50:d3:9c:43:fb:49:4a:cb:37:71:64:d2:02:2f:eb: dd:9a:d0:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUwNTEzMDQzNTU0WhcNMjUwNTIwMDQzNTU0WjAYMRYwFAYD VQQDEw02ODIyY2MyYi1iZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0FAccNabGt1b/PRppNZ6WzRbtFGa9dfZxD1XzjW7Na9Gdlqyyab47AFOxk6 WO1gD5ZWh6j2aldOPlOvlm9t6Xnn9Yy5m+ReyVAs4mL5CII0KJsmrcslqgK7FBb5 ofh7CmZ8RVgxWqpHNwmNRjFudps57GGhKxn1LPcJfTxqReZmZxuy/Z1UjcgyFzGi SGVnAi9V4k5dagIOPBSHuSuBGcDuNQ4+GWhcQC8xd0B0S5vy1iBdgNl6ySt2zniA pehKswJO52X+rsmdVRnDdnzZb3bOENUVKgQdrEnkZ/5UBjHIbMZX+gYu2UPczPO7 lzqdBlACOHGc5Ie8BAeU4GM1gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiIB7xp BnQC/2rnP2N3alQXCr+aMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADJALdsiYqiqcHLpB1oDHqtaYCPDiBSL83YMNM5RMp1Q61PYQdxxuf Rjbbs9qEsOIG2oDxoXY1iLkDQ9G5CE2H8ilf6ToEKd+81eQVMs94SXv3RjTpFUy8 7/zCw9grkNInQapqv+19U869FJ5Fa3mw6teTr3G21i4z8X6yJRhCWdql0gyF7eAg S/ueEvqKJdG+tkXm1kCKCZGSb7yEK3p7gbr3N7BnIQnv1afMFL56wkZf9ykcEPt1 U6S9/2foVe+8iGaF3/BKyBLxNhpYWiOOgXrZej4CniiaOzjRH4203wYce8Idyoor zTAkIL9Q05xD+0lKyzdxZNICL+vdmtAg -----END CERTIFICATE-----Generated at Wed May 14 10:38:37 2025 by rpki-client