$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json) Hash identifier: ayZPKfen6C9IcOhLvtLCL9PrgN3oqaQywh0IxlDvwAs= Subject key identifier: 0B:C3:43:4B:B7:92:49:AD:E2:9C:EF:34:5B:1B:D2:C7:0F:38:7D:1B Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft Manifest number: 0F Signing time: Thu 03 Apr 2025 07:21:18 +0000 Manifest this update: Thu 03 Apr 2025 07:21:17 +0000 Manifest next update: Thu 10 Apr 2025 07:21:17 +0000 Files and hashes: 1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: Nsgzy3YeLabNv5OFcYAbU4s7hNwhTwmjwpWIDnXaVw0=) 2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FD8 Validity Not Before: Apr 3 07:21:17 2025 GMT Not After : Apr 10 07:21:17 2025 GMT Subject: CN=67ee36ed-d5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:b5:2d:22:7b:6d:f0:72:a2:b3:61:66:76: 7a:53:a1:b1:fb:fc:9b:f3:b0:52:03:d6:25:7b:ff: 80:5a:e8:4c:1e:79:e9:b2:97:5d:4b:79:64:b8:fe: 01:5c:12:3b:7a:e7:c0:bd:06:4b:ed:e5:cf:bf:54: 46:3e:34:0c:93:ba:fa:29:85:d3:08:29:d6:87:1c: 45:8e:de:10:5a:0b:e8:57:0c:bb:17:0d:66:47:8d: be:9d:2d:48:f9:d1:2b:04:36:c4:c5:76:df:b1:03: 89:2e:a0:1e:1b:cf:55:39:8c:79:55:97:99:35:8d: e1:03:77:94:8a:7e:e7:3a:b7:06:b8:c5:4e:cc:2f: ec:18:08:f7:36:d3:14:8e:20:01:29:f4:76:4c:fd: 97:e3:8b:53:29:e8:37:a5:d0:fa:c5:f5:3e:c8:61: 25:cd:e3:bf:dc:fb:57:7a:ff:2f:9b:f4:fd:d2:dc: 74:7f:51:14:f6:d8:f5:44:88:7c:6c:a0:86:04:cb: 9b:16:ed:c7:4b:87:74:e8:db:e5:e8:b3:2a:17:18: 8a:8d:c6:54:73:db:44:f3:4e:fa:89:ec:d1:cb:96: ef:73:e1:8b:28:a9:ed:8e:18:64:24:af:1c:3d:58: ae:05:b9:d2:e3:3e:d4:dd:04:db:41:8c:40:86:53: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C3:43:4B:B7:92:49:AD:E2:9C:EF:34:5B:1B:D2:C7:0F:38:7D:1B X509v3 Authority Key Identifier: keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c9:ac:44:2c:fc:cb:6a:97:04:89:03:28:b3:f6:3b:03:48: e8:e9:d7:35:45:4b:c6:a3:73:18:a9:8d:90:28:46:fa:d2:14: e3:f4:6e:32:e3:27:07:43:97:a9:e8:9f:7a:54:19:62:58:7f: 57:3f:fa:8d:5e:f7:d2:44:ad:16:e2:08:db:c7:2a:a0:c5:34: f1:cf:63:a2:02:25:ef:b7:43:da:a7:a8:a7:06:2e:aa:b4:9d: 14:3d:4e:c1:61:ad:a1:10:27:21:fe:20:06:5f:a1:fe:22:f9: 59:af:ec:a9:61:c5:2d:27:6c:64:c6:00:c1:01:de:4a:4f:33: 1b:9a:ff:b7:70:f5:fc:44:4b:e8:72:e8:1f:3c:41:c4:1b:6e: 9f:68:95:fb:f9:3a:2f:42:9c:34:28:79:7d:04:a0:08:27:e5: 4b:58:99:e3:d7:bc:54:ac:3d:b9:7e:d9:eb:53:5f:b0:83:11: 7c:2f:12:ae:0b:b0:fc:04:e2:7e:3c:b5:86:e4:82:72:e9:fb: eb:b3:31:f7:ce:2a:8b:46:bf:9a:51:0c:32:41:0a:6c:80:74: f5:e8:21:6b:07:d7:33:1b:7e:9f:cb:91:9d:3f:82:a1:9b:f6: 8f:39:13:f2:97:67:91:5e:f4:c6:df:8a:15:3a:db:b2:92:6d: ae:64:81:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEZEODExMC8GA1UEBRMoODA0NjMwNzREODNGNUU4MDM1NEQxOTcwNTg2RjU0QTg5 NjVFMThEMjAeFw0yNTA0MDMwNzIxMTdaFw0yNTA0MTAwNzIxMTdaMBgxFjAUBgNV BAMTDTY3ZWUzNmVkLWQ1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7mLUtIntt8HKis2FmdnpTobH7/JvzsFID1iV7/4Ba6Eweeemyl11LeWS4/gFc Ejt658C9Bkvt5c+/VEY+NAyTuvophdMIKdaHHEWO3hBaC+hXDLsXDWZHjb6dLUj5 0SsENsTFdt+xA4kuoB4bz1U5jHlVl5k1jeEDd5SKfuc6twa4xU7ML+wYCPc20xSO IAEp9HZM/Zfji1Mp6Del0PrF9T7IYSXN47/c+1d6/y+b9P3S3HR/URT22PVEiHxs oIYEy5sW7cdLh3To2+XosyoXGIqNxlRz20TzTvqJ7NHLlu9z4Ysoqe2OGGQkrxw9 WK4FudLjPtTdBNtBjECGU3PhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC8NDS7eS Sa3inO80WxvSxw84fRswHwYDVR0jBBgwFoAUgEYwdNg/XoA1TRlwWG9UqJZeGNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RkQ4L0YzNTEyQTBBRkND NTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9BMVRSbHdXRzlVcUpaZUdO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0VZd2ROZ19Yb0ExVFJsd1dHOVVxSlplR05JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RkQ4L0YzNTEyQTBBRkNDNTExRUZBOTA5MDg1MkM0RjlBRTAyL2dFWXdkTmdfWG9B MVRSbHdXRzlVcUpaZUdOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXJrEQs/MtqlwSJAyiz9jsDSOjp1zVFS8ajcxipjZAoRvrSFOP0bjLj JwdDl6non3pUGWJYf1c/+o1e99JErRbiCNvHKqDFNPHPY6ICJe+3Q9qnqKcGLqq0 nRQ9TsFhraEQJyH+IAZfof4i+Vmv7KlhxS0nbGTGAMEB3kpPMxua/7dw9fxES+hy 6B88QcQbbp9olfv5Oi9CnDQoeX0EoAgn5UtYmePXvFSsPbl+2etTX7CDEXwvEq4L sPwE4n48tYbkgnLp++uzMffOKotGv5pRDDJBCmyAdPXoIWsH1zMbfp/LkZ0/gqGb 9o85E/KXZ5Fe9MbfihU627KSba5kgcc= -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:14 2025 by rpki-client