$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json) Hash identifier: dg7y5m/EECWTs6rgwnnAI7yWQptRI1K6PodJ1SiDT1Q= Subject key identifier: 8C:39:74:64:64:8B:AE:2A:F6:87:38:34:19:66:6C:66:3A:3C:72:BC Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft Manifest number: F8 Signing time: Mon 05 May 2025 04:07:41 +0000 Manifest this update: Mon 05 May 2025 04:07:41 +0000 Manifest next update: Mon 12 May 2025 04:07:41 +0000 Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: U7hj1nnUF88KPZbvYYBSwOvw8MksWM4j2wUQWXVu7+4=) 2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Dufn2bl2x79yMqHJgaUJAzhvDE7hxEwAGg5UyaJazhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Validity Not Before: May 5 04:07:41 2025 GMT Not After : May 12 04:07:41 2025 GMT Subject: CN=6818398d-7de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:be:99:6c:d8:ec:5e:c5:56:ca:0e:cc:18: d9:cb:83:44:76:1c:13:a5:bf:94:e1:9d:00:01:e7: be:42:6b:3e:58:8f:a1:b1:f8:81:6a:ee:84:39:b7: 07:5e:48:10:66:a5:bd:06:99:c3:a8:a4:ed:33:5b: d1:8f:5c:4f:cf:47:fb:44:13:dc:2b:ed:d5:ae:17: c9:a0:38:f4:01:b4:d1:2b:7c:e4:d8:e7:5a:f3:5a: 77:7a:fa:31:e8:41:94:68:72:02:5b:83:a9:b7:c2: 02:34:ed:66:e8:6e:86:03:25:62:08:f4:cf:61:d1: 91:ee:64:4d:b0:ab:37:f7:a3:28:dd:15:1d:69:96: c5:44:e8:00:bf:3b:a2:80:07:ee:6a:a3:6e:15:c2: 9e:4e:f8:5b:52:2d:ae:8d:a4:1b:e5:fa:35:07:36: f8:f7:94:eb:25:d6:e5:2e:7b:d9:09:6a:c2:69:fb: 72:bf:35:08:fc:54:08:55:a9:7f:6e:f3:cb:bf:77: f3:41:dd:6a:61:a9:a6:f7:da:15:0c:f1:4b:46:42: 40:c7:44:1e:3e:6e:d2:82:17:01:44:f0:29:82:73: d7:72:0b:db:22:0c:52:a2:1d:0f:1a:e5:b5:ea:8c: 45:11:d4:87:2b:fd:21:54:05:5a:6a:57:8f:f8:f1: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:74:64:64:8B:AE:2A:F6:87:38:34:19:66:6C:66:3A:3C:72:BC X509v3 Authority Key Identifier: keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:aa:a7:f2:14:33:9b:4b:a2:9c:06:d4:38:fb:d3:6f:92:13: 4a:4c:1f:18:cc:ed:04:ad:60:97:65:b4:cb:cd:a7:62:6c:ac: d4:9f:28:64:08:4b:a0:8b:bd:87:0c:09:b0:d2:c7:1e:7d:fc: 46:eb:24:69:0e:d4:9f:26:1b:d4:10:19:f2:fe:1a:9d:fc:64: 7f:84:8d:fb:9a:6c:2c:77:74:34:be:80:58:77:77:9a:8c:40: a2:3a:77:d5:a7:05:69:66:07:7d:78:00:4a:ce:8f:f7:82:8c: 5f:4b:b0:69:dc:bf:f3:ea:77:45:20:74:83:c3:cd:3f:74:9a: b0:77:3e:bd:b7:1c:54:41:ff:c0:54:16:16:eb:d0:d4:2e:cf: 35:b7:0b:f0:49:1a:56:ef:23:d1:6e:87:0e:b4:b1:08:f8:24: 62:71:fb:0f:65:f4:8e:7a:06:ff:63:16:bf:dd:e4:2b:96:b2: ab:21:d1:a5:20:8f:6f:a6:b3:38:87:5f:db:94:2d:17:c6:6b: 9d:96:87:bf:9c:e4:01:0d:a3:a5:db:fc:70:cd:25:25:2b:e3: 49:2e:77:1f:b2:0c:6d:aa:b5:1b:59:83:58:d5:97:4c:cb:41: 70:88:dd:9a:93:35:ec:7a:cd:07:f1:79:89:83:be:8d:03:04: d6:a9:be:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy QTMzQ0IzOTAwHhcNMjUwNTA1MDQwNzQxWhcNMjUwNTEyMDQwNzQxWjAYMRYwFAYD VQQDEw02ODE4Mzk4ZC03ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XG+mWzY7F7FVsoOzBjZy4NEdhwTpb+U4Z0AAee+Qms+WI+hsfiBau6EObcH XkgQZqW9BpnDqKTtM1vRj1xPz0f7RBPcK+3VrhfJoDj0AbTRK3zk2Oda81p3evox 6EGUaHICW4Opt8ICNO1m6G6GAyViCPTPYdGR7mRNsKs396Mo3RUdaZbFROgAvzui gAfuaqNuFcKeTvhbUi2ujaQb5fo1Bzb495TrJdblLnvZCWrCaftyvzUI/FQIVal/ bvPLv3fzQd1qYamm99oVDPFLRkJAx0QePm7SghcBRPApgnPXcgvbIgxSoh0PGuW1 6oxFEdSHK/0hVAVaaleP+PGlqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw5dGRk i64q9oc4NBlmbGY6PHK8MB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1 RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB LWxNLVg4cFFfemNxTThzNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIqqfyFDObS6KcBtQ4+9NvkhNKTB8YzO0ErWCXZbTLzadibKzUnyhk CEugi72HDAmw0sceffxG6yRpDtSfJhvUEBny/hqd/GR/hI37mmwsd3Q0voBYd3ea jECiOnfVpwVpZgd9eABKzo/3goxfS7Bp3L/z6ndFIHSDw80/dJqwdz69txxUQf/A VBYW69DULs81twvwSRpW7yPRbocOtLEI+CRicfsPZfSOegb/Yxa/3eQrlrKrIdGl II9vprM4h1/blC0Xxmudloe/nOQBDaOl2/xwzSUlK+NJLncfsgxtqrUbWYNY1ZdM y0FwiN2akzXses0H8XmJg76NAwTWqb5f -----END CERTIFICATE-----Generated at Mon May 5 07:26:41 2025 by rpki-client