$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft File: u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json) Hash identifier: YyZjcK60cbf6wVqmV3WJb2N7izvyZtyUKMJgWHHSXfs= Subject key identifier: 99:37:34:D7:EF:23:22:22:71:36:23:84:CA:C3:14:65:21:80:75:71 Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 Certificate issuer: /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft Manifest number: 0687 Signing time: Mon 12 May 2025 22:01:51 +0000 Manifest this update: Mon 12 May 2025 22:01:50 +0000 Manifest next update: Mon 19 May 2025 22:01:50 +0000 Files and hashes: 1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: drNOHzB2KDYkYIw3GhaCNDt2muMxKCBWivnARddIKkM=) 2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hT6PiTq4VuebMVKql1Edg2h7UOqDcrvg8gjAvmzNu5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7 Validity Not Before: May 12 22:01:50 2025 GMT Not After : May 19 22:01:50 2025 GMT Subject: CN=68226fcf-1bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:6b:04:8d:73:a6:74:c2:14:3d:d8:3d:19: c7:d8:44:78:04:81:3f:4b:b7:52:c6:30:e2:69:ac: 9b:36:ae:f9:f8:03:11:cb:84:ab:93:d4:c1:72:af: bd:9f:fd:3b:60:d1:cc:23:c8:00:c9:3a:b2:59:db: 5f:45:0a:4e:fa:fa:b9:c7:90:2f:5d:6e:dc:c3:30: 8b:fa:95:c8:0a:47:9a:89:32:89:11:62:01:fd:5e: fd:b1:17:78:41:8d:63:8f:b5:cf:3f:94:70:11:6b: 6e:05:c0:56:76:eb:7c:6d:30:10:3e:3a:ef:fe:80: ec:a1:cb:83:c6:da:e4:16:c0:5f:73:cd:6d:9a:10: a0:2a:1a:bb:e2:0c:a9:69:cc:41:95:17:6f:1d:4c: 85:2b:0f:3b:d9:82:af:58:7a:5e:03:bf:82:45:24: c0:7e:a2:01:9d:c9:2c:aa:33:f1:3c:44:16:b3:0e: 7e:eb:83:56:55:af:74:c0:74:47:4c:24:ed:bc:98: 19:19:b1:56:f1:de:b1:b4:a7:a0:46:cf:74:f7:f2: 8d:88:7c:ec:ce:cc:a4:7b:73:d8:21:dc:37:31:4a: d5:94:49:1d:3f:82:65:5f:57:5f:2d:89:71:49:4c: 5c:60:3f:3a:06:22:ec:64:27:be:4d:ba:3e:ab:b1: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:37:34:D7:EF:23:22:22:71:36:23:84:CA:C3:14:65:21:80:75:71 X509v3 Authority Key Identifier: keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:f5:3e:00:f3:33:b4:38:87:a8:2b:07:1a:98:50:50:db: 4b:b4:8e:b7:6d:28:b8:b7:c3:47:a7:f7:ee:86:5b:df:78:7b: 3f:38:c0:5f:2a:2b:f6:e0:06:4d:db:e4:82:13:6b:61:27:37: 81:2e:f3:11:7c:0a:be:c2:c6:c8:1d:17:bb:79:48:3d:b5:7f: 10:55:4a:87:69:39:2d:93:26:ed:f0:8a:dd:18:27:bb:ec:6e: 76:2f:ab:af:f9:fd:46:2a:52:3e:32:4d:fe:e5:19:46:7d:19: 73:19:ba:36:89:a0:3d:7b:9a:cb:e8:d0:21:d9:0e:f5:a7:74: 68:ab:91:c6:a2:d6:c1:ed:45:74:77:98:99:f8:a8:24:d5:88: c4:cd:bb:97:a4:b7:17:da:31:e8:3e:90:5f:ad:f9:ee:35:84: c2:56:6d:18:09:53:52:fe:11:e1:b6:5d:15:5d:c4:b3:78:28: a9:e0:79:75:2a:53:25:cb:38:50:23:8f:a1:89:1c:be:e5:af: 55:dd:4f:5a:ac:2f:19:39:5a:f6:55:e1:79:44:91:c1:49:0f: ae:c8:7f:9c:f0:7a:d4:db:bc:df:a0:13:f5:07:e8:0d:0b:cc: 70:68:79:a3:dd:d4:2e:43:6c:db:0c:7a:45:de:9e:dc:d1:cb: 79:3c:c0:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRTMxMTAvBgNVBAUTKEJCQ0M3NjBBRkUzRTlGMEE5Qjg4QzhFQzdBNDlFRDdD REQwMzk2RjcwHhcNMjUwNTEyMjIwMTUwWhcNMjUwNTE5MjIwMTUwWjAYMRYwFAYD VQQDEw02ODIyNmZjZi0xYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9NrBI1zpnTCFD3YPRnH2ER4BIE/S7dSxjDiaaybNq75+AMRy4Srk9TBcq+9 n/07YNHMI8gAyTqyWdtfRQpO+vq5x5AvXW7cwzCL+pXICkeaiTKJEWIB/V79sRd4 QY1jj7XPP5RwEWtuBcBWdut8bTAQPjrv/oDsocuDxtrkFsBfc81tmhCgKhq74gyp acxBlRdvHUyFKw872YKvWHpeA7+CRSTAfqIBncksqjPxPEQWsw5+64NWVa90wHRH TCTtvJgZGbFW8d6xtKegRs909/KNiHzszsyke3PYIdw3MUrVlEkdP4JlX1dfLYlx SUxcYD86BiLsZCe+Tbo+q7GhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk3NNfv IyIicTYjhMrDFGUhgHVxMB8GA1UdIwQYMBaAFLvMdgr+Pp8Km4jI7HpJ7XzdA5b3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNFMy8wOEI4RDBEMjZG M0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53cWJpTWpzZWtudGZOMERs dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U4eDJDdjQtbndxYmlNanNla250Zk4wRGx2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNFMy8wOEI4RDBEMjZGM0ExMUVCQjExMzM5N0VDNEY5QUUwMi91OHgyQ3Y0LW53 cWJpTWpzZWtudGZOMERsdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3W/U+APMztDiHqCsHGphQUNtLtI63bSi4t8NHp/fuhlvfeHs/OMBf Kiv24AZN2+SCE2thJzeBLvMRfAq+wsbIHRe7eUg9tX8QVUqHaTktkybt8IrdGCe7 7G52L6uv+f1GKlI+Mk3+5RlGfRlzGbo2iaA9e5rL6NAh2Q71p3Roq5HGotbB7UV0 d5iZ+Kgk1YjEzbuXpLcX2jHoPpBfrfnuNYTCVm0YCVNS/hHhtl0VXcSzeCip4Hl1 KlMlyzhQI4+hiRy+5a9V3U9arC8ZOVr2VeF5RJHBSQ+uyH+c8HrU27zfoBP1B+gN C8xwaHmj3dQuQ2zbDHpF3p7c0ct5PMD7 -----END CERTIFICATE-----Generated at Tue May 13 18:37:19 2025 by rpki-client