$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: BrH2PGPDDZADeCpsLWX16DsF+MCCtkBy/VM5UdR7AFs= Subject key identifier: 4B:29:07:EA:23:E8:5D:46:28:C7:8E:8D:73:9D:38:51:D3:8E:19:D2 Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 1052 Signing time: Fri 04 Apr 2025 17:34:16 +0000 Manifest this update: Fri 04 Apr 2025 17:34:15 +0000 Manifest next update: Fri 11 Apr 2025 17:34:15 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: xRdFTerEUNddKMxvHsuHl3JWzrxzRag608eNABgpKuw=) 2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: SY3EjEV5Ly32k7Ap+oIj43eO7WXxXD4LqvGCw8NHcTE=) 3: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1 Validity Not Before: Apr 4 17:34:15 2025 GMT Not After : Apr 11 17:34:15 2025 GMT Subject: CN=67f01817-a392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:7c:34:db:09:db:c6:08:8d:21:72:66:7b: a3:87:b1:aa:6e:3d:72:b9:1a:c7:a0:ae:7c:2b:66: 18:30:7c:56:c6:24:be:5b:8a:6d:69:7e:53:6b:39: 54:c6:51:4e:56:15:0c:d7:a0:ab:22:bd:4d:a6:45: fe:53:00:8e:14:a5:84:8d:3a:96:58:7d:ee:c1:31: 7a:37:f9:2f:6a:27:fb:ad:57:73:e3:7e:53:43:bf: ca:bd:dd:8d:37:7b:7c:5d:00:ad:f1:8c:9c:fe:68: 6b:eb:36:e6:7f:ef:9d:5f:d6:3b:b4:a4:4d:35:32: 47:e3:67:5c:bd:ef:0c:b3:82:80:ca:3b:67:7f:25: bf:5d:4c:df:9f:7c:22:10:28:bd:10:0e:64:9a:82: c0:9d:46:38:2d:56:fa:b5:91:ce:db:b9:47:e7:df: 03:72:d4:39:96:11:42:2e:51:85:37:d2:7d:d8:b0: 4d:ab:1b:b2:87:04:96:7a:0f:ec:c5:7c:aa:06:43: 4c:92:ae:71:53:36:3c:09:a8:7c:86:31:6c:8d:6a: 47:ad:b0:50:78:9b:a0:ed:79:5c:a6:c1:9d:3e:61: e5:8f:22:40:e4:9b:98:39:06:24:ba:e2:f2:db:b7: ab:44:b0:cf:ea:42:5c:3a:6b:c6:ce:90:93:56:36: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:07:EA:23:E8:5D:46:28:C7:8E:8D:73:9D:38:51:D3:8E:19:D2 X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:69:4d:bc:24:23:44:23:5e:6f:bd:ea:43:1c:06:c7:5c:12: 8e:01:0b:26:6b:94:ba:cb:37:b4:ec:4b:8c:0f:7e:20:6d:30: e2:cf:e9:75:63:f5:6b:6e:bf:62:1f:da:40:ec:42:12:c8:c2: 1b:d4:c3:46:32:70:a7:94:b2:a2:fa:91:f8:87:ea:fe:45:71: 59:66:8b:49:53:b3:c4:db:c9:69:b4:76:99:20:aa:23:b0:5e: 33:3b:45:85:99:0a:b1:3d:95:98:e8:47:80:6d:18:5c:70:6c: c2:ce:87:a5:37:d4:bb:fc:6d:61:5d:bb:f5:91:ce:9e:da:ba: 99:90:67:e9:ff:b2:95:31:ef:c9:4c:c3:bc:3a:d8:d9:8a:33: b2:cc:cb:ae:c9:ef:85:97:51:91:f7:ed:5b:0c:37:05:6a:23: a7:f0:43:64:f2:69:80:25:82:b5:94:b1:4b:6f:ee:79:b7:52: 7b:26:75:81:4c:95:37:ad:f6:02:b8:4e:8b:7d:b1:82:4e:fd: 1b:bd:f7:3e:a8:b8:9b:8a:a3:ba:88:c8:2e:79:d4:4b:90:63: e0:af:48:fd:3e:13:4c:52:35:35:55:3e:7c:8f:66:7c:09:c2: 2c:3d:01:9d:3d:87:7d:80:06:70:8e:e0:1e:da:fc:20:0b:04: 16:74:89:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjUwNDA0MTczNDE1WhcNMjUwNDExMTczNDE1WjAYMRYwFAYD VQQDEw02N2YwMTgxNy1hMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DZ8NNsJ28YIjSFyZnujh7Gqbj1yuRrHoK58K2YYMHxWxiS+W4ptaX5TazlU xlFOVhUM16CrIr1NpkX+UwCOFKWEjTqWWH3uwTF6N/kvaif7rVdz435TQ7/Kvd2N N3t8XQCt8Yyc/mhr6zbmf++dX9Y7tKRNNTJH42dcve8Ms4KAyjtnfyW/XUzfn3wi ECi9EA5kmoLAnUY4LVb6tZHO27lH598DctQ5lhFCLlGFN9J92LBNqxuyhwSWeg/s xXyqBkNMkq5xUzY8Cah8hjFsjWpHrbBQeJug7XlcpsGdPmHljyJA5JuYOQYkuuLy 27erRLDP6kJcOmvGzpCTVjblBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEspB+oj 6F1GKMeOjXOdOFHTjhnSMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkaU28JCNEI15vvepDHAbHXBKOAQsma5S6yze07EuMD34gbTDiz+l1 Y/Vrbr9iH9pA7EISyMIb1MNGMnCnlLKi+pH4h+r+RXFZZotJU7PE28lptHaZIKoj sF4zO0WFmQqxPZWY6EeAbRhccGzCzoelN9S7/G1hXbv1kc6e2rqZkGfp/7KVMe/J TMO8OtjZijOyzMuuye+Fl1GR9+1bDDcFaiOn8ENk8mmAJYK1lLFLb+55t1J7JnWB TJU3rfYCuE6LfbGCTv0bvfc+qLibiqO6iMguedRLkGPgr0j9PhNMUjU1VT58j2Z8 CcIsPQGdPYd9gAZwjuAe2vwgCwQWdInv -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client