$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: 5N6urAO9HasTfqJ/8kIiGgt6z5r2sycMGgiKVVDi8m0= Subject key identifier: FA:CA:4A:90:C7:15:8D:71:58:44:59:E5:31:31:B1:E0:D0:E9:9B:23 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: D3 Signing time: Tue 13 May 2025 04:49:30 +0000 Manifest this update: Tue 13 May 2025 04:49:29 +0000 Manifest next update: Tue 20 May 2025 04:49:29 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: 4LLNf6I4EPKEA+jC09iIxaPNIQIko5r1E0WJFUFHrt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: May 13 04:49:29 2025 GMT Not After : May 20 04:49:29 2025 GMT Subject: CN=6822cf59-7fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:3c:e4:04:a1:a7:a9:6f:b0:8f:39:a9:0b: 1e:df:33:58:f5:64:1d:f6:1a:d8:5f:4b:45:bc:90: d0:31:38:a3:5e:ca:39:49:82:d5:45:cd:ff:d9:7f: 2c:07:d8:a6:7f:d0:81:c4:ce:b4:3e:5e:a1:ea:f9: 1d:b1:f9:90:9d:97:61:2d:b6:35:6a:ea:6d:06:ab: f8:f2:0f:2a:37:c7:08:17:a1:13:18:96:28:bd:bd: c2:4f:3a:3a:29:34:4d:ae:18:6b:60:4d:97:f4:3c: 3c:05:de:96:45:13:82:8d:7a:51:a7:48:c7:dc:df: 7f:fe:88:69:59:1d:bc:98:6b:1a:fe:f7:9b:25:28: 93:f6:f9:25:1c:ae:53:2e:87:ea:09:98:68:ae:fa: 17:3f:3e:24:2c:63:79:34:e0:dc:9b:99:a4:7b:a8: a3:43:d9:12:22:cd:c4:a5:e7:f2:d4:88:17:92:5e: 43:19:89:7c:61:4e:d8:c0:0b:a5:0c:7f:67:59:6d: 85:71:c1:75:e6:d5:a3:12:f8:ba:7e:9d:d9:c3:7f: a5:be:a7:aa:ec:2e:cc:ae:65:d6:28:2e:b7:72:29: 2c:42:91:c4:58:dc:fa:66:4d:41:0f:64:40:04:0d: 76:f6:1f:a5:2e:4f:6e:9b:80:c6:4c:2e:01:a7:af: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:4A:90:C7:15:8D:71:58:44:59:E5:31:31:B1:E0:D0:E9:9B:23 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:51:4d:79:0c:f8:1a:c2:d7:7a:9a:96:d1:ba:cb:a8:f6:62: 19:25:0e:48:22:25:51:fd:6b:6f:f9:59:25:2f:9d:1d:47:5d: a7:bf:d8:63:29:56:14:55:f1:ba:12:50:3f:cf:6c:f0:eb:3c: 85:29:71:3f:53:f5:69:98:f7:e0:da:de:41:54:73:5d:7e:f9: 3b:0c:bd:36:7e:50:4f:af:fe:d1:da:a0:db:04:07:ba:2f:cf: 79:1f:98:6d:07:45:36:8b:db:db:90:28:0a:ac:d4:e7:e7:f1: e8:99:ef:f8:f4:ec:f1:1b:31:e5:14:26:5b:bf:f0:54:d3:c7: 6b:2e:59:34:73:3e:a5:23:52:fa:32:6d:3d:87:b6:f0:87:9b: 60:32:2a:23:26:6d:2b:d7:2d:4f:7e:ce:de:79:77:2d:98:cf: 12:40:18:94:c5:a9:f0:85:29:7d:57:62:76:3f:33:ac:05:b7: fd:b3:af:32:47:f9:d8:fa:14:76:09:7e:a7:05:0d:9d:56:b0: 4a:89:96:49:bb:f8:f8:01:08:cd:28:09:f5:48:c7:ad:11:99: 24:7c:4d:76:79:91:12:de:da:ed:7d:45:cd:91:fd:da:91:f8: 4f:95:82:11:2c:09:6d:3a:1b:e6:1e:d4:f9:e3:31:86:ca:52: a5:21:0d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUwNTEzMDQ0OTI5WhcNMjUwNTIwMDQ0OTI5WjAYMRYwFAYD VQQDEw02ODIyY2Y1OS03ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hk85AShp6lvsI85qQse3zNY9WQd9hrYX0tFvJDQMTijXso5SYLVRc3/2X8s B9imf9CBxM60Pl6h6vkdsfmQnZdhLbY1auptBqv48g8qN8cIF6ETGJYovb3CTzo6 KTRNrhhrYE2X9Dw8Bd6WRROCjXpRp0jH3N9//ohpWR28mGsa/vebJSiT9vklHK5T LofqCZhorvoXPz4kLGN5NODcm5mke6ijQ9kSIs3Epefy1IgXkl5DGYl8YU7YwAul DH9nWW2FccF15tWjEvi6fp3Zw3+lvqeq7C7MrmXWKC63ciksQpHEWNz6Zk1BD2RA BA129h+lLk9um4DGTC4Bp68hGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrKSpDH FY1xWERZ5TExseDQ6ZsjMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRUU15DPgawtd6mpbRusuo9mIZJQ5IIiVR/Wtv+VklL50dR12nv9hj KVYUVfG6ElA/z2zw6zyFKXE/U/VpmPfg2t5BVHNdfvk7DL02flBPr/7R2qDbBAe6 L895H5htB0U2i9vbkCgKrNTn5/Home/49OzxGzHlFCZbv/BU08drLlk0cz6lI1L6 Mm09h7bwh5tgMiojJm0r1y1Pfs7eeXctmM8SQBiUxanwhSl9V2J2PzOsBbf9s68y R/nY+hR2CX6nBQ2dVrBKiZZJu/j4AQjNKAn1SMetEZkkfE12eZES3trtfUXNkf3a kfhPlYIRLAltOhvmHtT54zGGylKlIQ0G -----END CERTIFICATE-----Generated at Tue May 13 08:06:12 2025 by rpki-client