$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: eV3SmysWlaVd51McTDjL2aqUvscTewYVKM9WKU5kHe8= Subject key identifier: 0E:D1:37:4E:F9:4F:23:4E:BE:97:C9:D3:72:6A:23:98:E8:A1:AC:DB Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 059D Signing time: Mon 12 May 2025 22:59:38 +0000 Manifest this update: Mon 12 May 2025 22:59:37 +0000 Manifest next update: Mon 19 May 2025 22:59:37 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: 6MI9zEMnrjcuxJRq4KiWynTY/9dJuayi26y4k7oU43E=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: May 12 22:59:37 2025 GMT Not After : May 19 22:59:37 2025 GMT Subject: CN=68227d59-10fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:11:a8:ac:71:e1:7e:b3:f3:6d:31:dd:50: 3a:e6:9f:4b:b8:ac:2e:a7:8b:4d:5d:87:6c:27:ed: 8a:25:8f:50:11:51:13:2c:16:37:c3:d3:34:3e:e3: e7:e3:62:f0:12:97:37:d5:34:0c:68:fc:36:25:61: e8:aa:b9:f9:e6:36:53:78:0d:c6:5c:c8:35:41:88: 81:08:99:36:58:3f:57:d0:6c:81:0f:4a:d3:63:c8: 4b:6a:23:87:8a:20:4c:ff:7a:18:1a:30:f5:9e:cf: ed:62:1f:c6:99:0b:e4:e8:64:b5:e5:b6:e4:86:0f: 08:41:c7:2c:34:e0:c9:ac:75:ee:38:87:45:fc:7c: 33:26:72:df:6c:99:43:bb:2a:8c:4c:df:0e:a6:7f: 55:43:c9:a1:78:4e:eb:1b:3f:a2:48:56:c0:b2:4e: 1e:4c:d3:b4:31:48:38:c7:de:41:98:a7:b2:c7:b7: cb:49:7a:c5:be:e5:b6:05:7f:16:e4:9f:a1:f0:33: 37:4c:11:a3:19:a2:f8:19:af:9e:2a:7c:de:d2:6b: 55:6f:a8:46:d1:c3:93:86:f0:40:8e:4a:34:b1:08: eb:ce:25:18:07:65:48:6a:cd:59:c4:f3:ce:c4:54: bd:c3:85:62:27:41:29:40:32:22:d2:56:cd:e5:ca: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:37:4E:F9:4F:23:4E:BE:97:C9:D3:72:6A:23:98:E8:A1:AC:DB X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:cb:f9:c5:68:7b:fa:3d:63:30:5e:a5:13:11:fe:2b:2c: e6:6b:a1:e8:4e:ff:21:d1:94:82:77:a0:d9:2e:8d:ae:f3:41: 50:14:d0:a0:c5:c2:75:8d:7e:62:13:3a:f0:c4:7d:da:76:67: e6:b1:4d:55:4d:6f:59:92:d1:53:4e:df:99:f6:26:54:b3:3f: b0:bc:51:71:14:47:86:c4:17:ff:8f:ac:6f:4a:76:55:db:21: b0:9e:4a:55:e0:08:61:9c:0e:86:71:d1:ab:d3:91:ec:d9:1e: 6f:0a:03:db:aa:6b:e5:48:af:3b:a3:b8:cc:9b:60:c5:57:ba: 8c:9c:05:8d:da:ca:da:e0:1b:33:e6:88:b9:5d:ea:82:94:f7: 1e:34:de:91:0f:d6:93:8d:00:a6:0e:53:86:8d:a8:ee:19:b8: 3e:6c:03:d3:90:08:b8:ac:55:7e:f2:6e:05:26:c0:4f:1b:0c: 0b:cc:9c:fa:93:fa:6c:8c:31:03:76:74:b7:78:a6:e0:3f:b7: 31:ad:7d:02:70:5d:9e:b2:e1:48:67:68:f1:ac:47:b2:f4:5e: a9:c1:01:0f:52:1b:ba:0e:c4:b3:b9:6f:dd:ee:c1:2d:db:5f: 0b:a5:d6:3e:b2:ea:d7:52:f1:a3:8e:f7:16:90:42:6c:53:87: 51:44:70:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwNTEyMjI1OTM3WhcNMjUwNTE5MjI1OTM3WjAYMRYwFAYD VQQDEw02ODIyN2Q1OS0xMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4QRqKxx4X6z820x3VA65p9LuKwup4tNXYdsJ+2KJY9QEVETLBY3w9M0PuPn 42LwEpc31TQMaPw2JWHoqrn55jZTeA3GXMg1QYiBCJk2WD9X0GyBD0rTY8hLaiOH iiBM/3oYGjD1ns/tYh/GmQvk6GS15bbkhg8IQccsNODJrHXuOIdF/HwzJnLfbJlD uyqMTN8Opn9VQ8mheE7rGz+iSFbAsk4eTNO0MUg4x95BmKeyx7fLSXrFvuW2BX8W 5J+h8DM3TBGjGaL4Ga+eKnze0mtVb6hG0cOThvBAjko0sQjrziUYB2VIas1ZxPPO xFS9w4ViJ0EpQDIi0lbN5cqa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7RN075 TyNOvpfJ03JqI5jooazbMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACJ8v5xWh7+j1jMF6lExH+Kyzma6HoTv8h0ZSCd6DZLo2u80FQFNCg xcJ1jX5iEzrwxH3admfmsU1VTW9ZktFTTt+Z9iZUsz+wvFFxFEeGxBf/j6xvSnZV 2yGwnkpV4AhhnA6GcdGr05Hs2R5vCgPbqmvlSK87o7jMm2DFV7qMnAWN2sra4Bsz 5oi5XeqClPceNN6RD9aTjQCmDlOGjajuGbg+bAPTkAi4rFV+8m4FJsBPGwwLzJz6 k/psjDEDdnS3eKbgP7cxrX0CcF2esuFIZ2jxrEey9F6pwQEPUhu6DsSzuW/d7sEt 218LpdY+surXUvGjjvcWkEJsU4dRRHBr -----END CERTIFICATE-----Generated at Wed May 14 13:08:33 2025 by rpki-client