$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: rZIk6jIU3EvpBxVIVvsqP8vSNwubpj1Ht01ASaRcDtE= Subject key identifier: 96:BF:EA:5D:36:FB:F0:18:8E:85:2B:CE:85:89:96:2D:69:B4:6A:D5 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0CED Signing time: Sat 10 May 2025 17:56:50 +0000 Manifest this update: Sat 10 May 2025 17:56:50 +0000 Manifest next update: Sat 17 May 2025 17:56:50 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: /1O+jHCFhSyZgmJNgpE4KI73CMmC8Zf0lHF+Vjna8cE=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: May 10 17:56:50 2025 GMT Not After : May 17 17:56:50 2025 GMT Subject: CN=681f9362-7ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:73:1d:e7:f6:81:98:5d:8c:2d:a5:2d:de: 45:56:90:b9:54:13:49:d0:36:9a:44:98:f7:8c:c4: f9:40:22:94:65:5c:2d:72:11:06:c4:4b:0a:a9:83: ba:74:a9:2f:1e:17:34:1e:e1:f9:70:04:a0:e0:a0: 89:fe:2c:9e:c4:3c:c9:66:de:32:49:95:78:1a:5b: 35:ba:1c:fa:84:8d:e1:12:6d:da:c4:fd:6a:5d:33: 4d:0c:1b:a8:ce:e8:5d:84:13:f2:f3:4d:8a:ca:a1: 93:d9:e6:3f:70:49:72:1f:c0:0c:da:d8:48:21:be: 5d:0e:a7:f1:d9:5f:35:27:eb:1b:d4:0f:15:51:1f: df:6a:e3:1f:d4:b4:13:ae:ef:ce:8b:af:1c:e4:f8: 6b:90:1d:77:17:9c:42:8c:0e:15:5e:51:fc:00:95: 0e:74:97:f5:df:2c:75:a2:f1:cb:09:db:b9:64:80: ab:05:7c:c6:b4:79:b6:70:74:2d:81:ce:8f:72:ba: 4d:fe:92:92:7f:86:1d:30:7c:cb:b2:62:e2:84:0d: ab:0f:1a:8f:dc:9d:c6:43:56:3d:a1:2b:17:86:6a: d7:26:ae:b9:56:fa:13:44:12:97:04:c0:c0:00:c7: 73:fc:44:22:3d:1c:6c:ee:88:38:d8:62:ae:d4:5b: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:EA:5D:36:FB:F0:18:8E:85:2B:CE:85:89:96:2D:69:B4:6A:D5 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:29:44:a9:a6:02:38:1f:84:5d:f5:4b:96:7f:f5:b5:a4:bf: 37:0d:50:52:38:e8:8f:97:4c:47:83:2c:b2:3e:ec:7a:cf:eb: 8f:06:c8:1a:8a:91:2a:33:70:a5:10:dd:b4:c0:d6:8a:34:d8: 3d:6c:d7:77:70:74:d8:87:d4:c1:c7:db:73:19:d1:a4:be:a9: ab:11:90:e5:9c:fd:1b:a3:31:28:50:46:59:bd:f6:38:b6:d8: a3:7e:63:6d:8e:67:d9:7f:fc:0a:01:4d:d4:77:da:5e:33:2e: 9e:27:9b:03:da:66:06:76:c3:17:62:a6:02:c2:ce:52:b8:9b: 2b:b5:21:f9:f6:96:20:7a:e8:1c:62:ac:b5:ec:9d:84:98:e3: 51:1e:e0:0e:5e:10:96:be:7e:f8:79:c4:d5:76:36:a6:99:e3: 9b:81:42:23:e2:10:63:79:f5:da:fa:4b:9a:0c:12:0d:8d:11: 76:7e:d1:a9:b5:20:47:63:00:10:d7:a4:62:64:2b:a2:c5:2e: 50:89:1f:16:60:24:ef:e5:cd:9c:32:07:08:fe:8d:46:1f:ca: f5:d9:6e:6a:b7:ae:56:d3:e3:05:04:db:d4:0c:ec:44:1a:37: ee:e4:53:d6:48:ec:a3:88:7b:d9:e6:7c:5d:16:92:44:7a:e4: 5b:4c:7b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUwNTEwMTc1NjUwWhcNMjUwNTE3MTc1NjUwWjAYMRYwFAYD VQQDEw02ODFmOTM2Mi03Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8tzHef2gZhdjC2lLd5FVpC5VBNJ0DaaRJj3jMT5QCKUZVwtchEGxEsKqYO6 dKkvHhc0HuH5cASg4KCJ/iyexDzJZt4ySZV4Gls1uhz6hI3hEm3axP1qXTNNDBuo zuhdhBPy802KyqGT2eY/cElyH8AM2thIIb5dDqfx2V81J+sb1A8VUR/fauMf1LQT ru/Oi68c5PhrkB13F5xCjA4VXlH8AJUOdJf13yx1ovHLCdu5ZICrBXzGtHm2cHQt gc6PcrpN/pKSf4YdMHzLsmLihA2rDxqP3J3GQ1Y9oSsXhmrXJq65VvoTRBKXBMDA AMdz/EQiPRxs7og42GKu1FtCZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa/6l02 +/AYjoUrzoWJli1ptGrVMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVKUSppgI4H4Rd9UuWf/W1pL83DVBSOOiPl0xHgyyyPux6z+uPBsga ipEqM3ClEN20wNaKNNg9bNd3cHTYh9TBx9tzGdGkvqmrEZDlnP0bozEoUEZZvfY4 ttijfmNtjmfZf/wKAU3Ud9peMy6eJ5sD2mYGdsMXYqYCws5SuJsrtSH59pYgeugc Yqy17J2EmONRHuAOXhCWvn74ecTVdjammeObgUIj4hBjefXa+kuaDBINjRF2ftGp tSBHYwAQ16RiZCuixS5QiR8WYCTv5c2cMgcI/o1GH8r12W5qt65W0+MFBNvUDOxE Gjfu5FPWSOyjiHvZ5nxdFpJEeuRbTHuH -----END CERTIFICATE-----Generated at Mon May 12 10:23:28 2025 by rpki-client