$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: bX1X8yJqqVLya04l9I/5Z09aQxbsZY4D+UL4I9IQ+2k= Subject key identifier: BD:CC:2F:62:0C:C1:6D:79:89:37:C1:68:C9:B9:08:4B:DE:8C:BF:6F Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0271 Signing time: Tue 15 Apr 2025 01:20:50 +0000 Manifest this update: Tue 15 Apr 2025 01:20:49 +0000 Manifest next update: Tue 22 Apr 2025 01:20:49 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: R3MfdfOlHzUla9yUR/iFSN3EL7dRqSVgLcqVK9/Xos8=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: B23DJLnAzZgh7nzdSdjLo0fLxBwNcdmZ5yMaCdKP/mk=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: jVg82OUaVePNyDCOCMIUFjDkj+15X58I4cwm4Uj+6+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Apr 15 01:20:49 2025 GMT Not After : Apr 22 01:20:49 2025 GMT Subject: CN=67fdb472-1a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:ad:9a:5d:18:f6:53:f9:33:8f:19:d4:18: 5a:20:86:35:18:9c:b8:88:8c:2e:c3:73:81:6e:55: 87:7e:d5:1a:72:03:d3:16:aa:10:51:90:54:41:af: 94:59:54:95:a8:0f:a4:6a:1e:30:21:7b:45:27:44: e6:f1:b3:4e:e4:92:6e:3f:ad:a4:a7:59:e5:75:f4: ea:90:51:e0:90:4e:23:7e:44:49:14:d4:61:6f:1c: ff:12:fc:5b:da:5b:61:60:d0:44:b1:6f:95:50:91: c4:59:08:6f:37:fa:4d:63:e9:58:ac:ce:a1:77:41: 70:8a:36:43:00:73:6f:40:83:d8:7a:03:31:a4:c5: c1:2f:ea:3d:29:80:9a:11:e7:44:34:68:38:bf:35: 03:b0:b7:b1:60:26:bf:75:e0:04:b4:25:08:b5:ea: ef:97:28:1f:24:b7:e6:71:1d:6a:de:7d:f0:ec:a5: c8:40:82:91:78:02:52:3d:61:39:42:1e:4c:4c:74: 10:96:68:49:9a:b8:ff:1c:b6:15:c9:cd:2e:89:df: 71:ef:1c:73:66:88:1d:08:af:b2:6e:0d:60:02:ab: 03:39:17:95:20:ca:3e:ae:97:f4:26:0f:48:96:cc: 0d:4b:7b:e0:62:67:af:17:9b:28:0e:83:6e:2d:d3: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:2F:62:0C:C1:6D:79:89:37:C1:68:C9:B9:08:4B:DE:8C:BF:6F X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9c:81:f8:25:2b:5b:70:79:c6:3c:17:9b:ff:36:3a:b3:9a: 23:03:cd:4b:35:44:01:04:35:a7:53:75:9b:fe:e2:e4:4b:c0: 67:78:f7:4d:2b:ec:a7:ad:cb:6b:cf:e4:1d:e7:03:17:49:37: f6:6a:c5:cc:49:dc:a2:33:7d:94:a3:89:16:29:d9:68:56:0c: 39:fd:1b:ee:60:69:ce:e5:53:c8:6a:36:1d:03:49:1b:81:57: 9e:cb:a9:7a:5c:36:53:58:d3:0b:5e:24:27:c5:a5:ac:23:ec: 11:54:5c:78:63:c7:a9:86:f4:73:ab:7c:2d:cd:b9:1f:38:91: 74:67:6f:e0:b2:b6:45:90:84:7c:38:bb:50:0c:74:ad:52:ce: 06:05:db:d6:f2:6d:1d:c5:88:93:b5:39:03:45:4d:fb:00:bd: f4:1d:90:06:8f:46:38:f4:b7:47:64:d7:ff:4a:60:9e:b0:83: 85:69:13:c9:85:57:a3:79:bf:61:f1:b1:00:fc:71:d5:ee:fd: 58:63:e3:71:30:cd:1a:cf:d3:e5:05:2c:3c:69:1c:6f:8e:2a: b4:e7:4c:8f:11:94:ea:4a:de:54:68:1a:db:c4:b5:2b:dd:46: 3f:3c:a0:0d:ca:ca:ad:1d:ce:74:bd:7f:3c:f3:3c:6c:42:58: 41:b3:93:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUwNDE1MDEyMDQ5WhcNMjUwNDIyMDEyMDQ5WjAYMRYwFAYD VQQDEw02N2ZkYjQ3Mi0xYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/Ktml0Y9lP5M48Z1BhaIIY1GJy4iIwuw3OBblWHftUacgPTFqoQUZBUQa+U WVSVqA+kah4wIXtFJ0Tm8bNO5JJuP62kp1nldfTqkFHgkE4jfkRJFNRhbxz/Evxb 2lthYNBEsW+VUJHEWQhvN/pNY+lYrM6hd0FwijZDAHNvQIPYegMxpMXBL+o9KYCa EedENGg4vzUDsLexYCa/deAEtCUItervlygfJLfmcR1q3n3w7KXIQIKReAJSPWE5 Qh5MTHQQlmhJmrj/HLYVyc0uid9x7xxzZogdCK+ybg1gAqsDOReVIMo+rpf0Jg9I lswNS3vgYmevF5soDoNuLdMapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3ML2IM wW15iTfBaMm5CEvejL9vMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsnIH4JStbcHnGPBeb/zY6s5ojA81LNUQBBDWnU3Wb/uLkS8BnePdN K+ynrctrz+Qd5wMXSTf2asXMSdyiM32Uo4kWKdloVgw5/RvuYGnO5VPIajYdA0kb gVeey6l6XDZTWNMLXiQnxaWsI+wRVFx4Y8ephvRzq3wtzbkfOJF0Z2/gsrZFkIR8 OLtQDHStUs4GBdvW8m0dxYiTtTkDRU37AL30HZAGj0Y49LdHZNf/SmCesIOFaRPJ hVejeb9h8bEA/HHV7v1YY+NxMM0az9PlBSw8aRxvjiq050yPEZTqSt5UaBrbxLUr 3UY/PKANysqtHc50vX888zxsQlhBs5PF -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:34 2025 by rpki-client