$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: xAauAoKH76oeyDHJ31yq5xVEmDjJ3Vrf4tWy9Y/33co= Subject key identifier: DE:6B:7F:BF:31:42:20:60:AA:49:CA:D3:44:E4:66:E2:88:FF:4C:EB Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 0143 Signing time: Thu 03 Apr 2025 03:39:49 +0000 Manifest this update: Thu 03 Apr 2025 03:39:48 +0000 Manifest next update: Thu 10 Apr 2025 03:39:48 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: bARjqZ1bRigMqHjZ0QHvTnCxGxKynyjkG2jsQ5Xfwog=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: hT9kfP+ZFoK6ZtvZIIqmgr1UkECM4lGeHTqxjZ5+Wc0=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: Nm3Cq0H330hcq1ka7PepkHLo38lsxcixtabz9iT0KA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1 Validity Not Before: Apr 3 03:39:48 2025 GMT Not After : Apr 10 03:39:48 2025 GMT Subject: CN=67ee0304-c88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:22:3f:a5:0d:d7:b8:b2:6c:0c:e9:86:39: 99:62:eb:ba:c9:31:5b:cf:66:2d:f6:cf:83:ed:16: be:dd:c4:f0:23:7d:25:78:94:fe:bc:4b:2b:7d:32: f3:87:3a:2f:0f:61:e9:65:da:fe:b8:77:ed:f8:f4: d8:a6:33:d0:e5:c2:0b:9a:7e:b2:f3:26:5b:70:5b: f8:6b:55:50:81:b0:6e:08:37:da:a0:5b:16:88:a1: 73:a2:9b:c7:ac:e1:b4:f8:36:8e:3d:88:7a:3a:ca: 32:0f:2d:b0:d7:09:ba:78:68:79:14:c8:d5:99:82: aa:9b:ab:4e:50:c4:0c:ec:cd:f8:e6:df:25:b8:ca: f4:54:ac:3a:70:95:d4:68:84:02:31:34:76:c9:87: 82:67:56:08:2e:58:19:0c:f3:f1:49:bc:f5:72:d1: 7c:72:2c:aa:52:41:62:8e:86:07:4e:aa:be:80:52: 46:f2:15:90:f0:73:c0:c8:da:ae:c3:c3:2f:fb:37: 90:3c:5f:19:0e:e3:c4:7b:02:c1:36:ad:23:e5:da: af:5a:4d:61:ad:7f:0f:2f:51:56:91:1f:80:49:92: fe:b7:4c:67:95:21:09:a2:61:9d:bc:ed:cd:a0:5e: 57:9e:e4:ef:39:38:56:58:3a:3c:13:2f:f2:ea:e6: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:7F:BF:31:42:20:60:AA:49:CA:D3:44:E4:66:E2:88:FF:4C:EB X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:8a:ee:28:3e:18:a9:cb:11:4a:a5:55:e4:d0:6a:ee:13:48: 0d:77:c8:1f:0b:e5:ec:f3:7c:a9:92:6d:2d:78:22:5a:47:5e: ee:a5:ff:be:11:7e:aa:9c:fd:4e:de:40:00:c3:b6:c3:0e:22: 85:85:29:65:f8:94:54:54:9d:5a:93:d1:56:21:09:a3:82:6f: 8f:89:b0:57:83:fd:7b:3d:89:12:f6:a3:51:a2:56:d4:22:42: e1:d9:f7:24:03:88:0d:d8:a2:24:5f:43:a7:ed:66:20:5a:98: 71:ba:3d:a2:4b:79:bf:ee:ae:8e:46:f7:f8:45:f9:72:82:35: 24:ea:f6:6f:ac:95:ac:2f:c9:3c:16:5c:8d:6b:97:be:04:21: 34:b7:df:c0:48:ed:85:da:3a:61:be:35:c0:8a:c6:0a:14:71: 82:79:50:4b:0f:6f:2f:7a:57:a5:73:24:81:f3:b6:da:5e:4f: 9f:9d:c9:85:2e:9b:90:ef:ba:31:6f:f6:24:b6:f9:c7:bb:5f: 31:55:d9:80:1e:c6:33:40:93:09:5a:d4:ab:0b:e1:ce:18:f3: 34:05:7d:74:7c:e9:16:55:ca:cc:a9:b5:e0:50:c7:7e:5b:7b: 91:72:8f:f8:3d:7f:51:b3:de:c4:08:28:e1:7d:84:46:da:42: b4:b6:ea:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjUwNDAzMDMzOTQ4WhcNMjUwNDEwMDMzOTQ4WjAYMRYwFAYD VQQDEw02N2VlMDMwNC1jODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eEiP6UN17iybAzphjmZYuu6yTFbz2Yt9s+D7Ra+3cTwI30leJT+vEsrfTLz hzovD2HpZdr+uHft+PTYpjPQ5cILmn6y8yZbcFv4a1VQgbBuCDfaoFsWiKFzopvH rOG0+DaOPYh6OsoyDy2w1wm6eGh5FMjVmYKqm6tOUMQM7M345t8luMr0VKw6cJXU aIQCMTR2yYeCZ1YILlgZDPPxSbz1ctF8ciyqUkFijoYHTqq+gFJG8hWQ8HPAyNqu w8Mv+zeQPF8ZDuPEewLBNq0j5dqvWk1hrX8PL1FWkR+ASZL+t0xnlSEJomGdvO3N oF5XnuTvOThWWDo8Ey/y6uZi6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5rf78x QiBgqknK00TkZuKI/0zrMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2iu4oPhipyxFKpVXk0GruE0gNd8gfC+Xs83ypkm0teCJaR17upf++ EX6qnP1O3kAAw7bDDiKFhSll+JRUVJ1ak9FWIQmjgm+PibBXg/17PYkS9qNRolbU IkLh2fckA4gN2KIkX0On7WYgWphxuj2iS3m/7q6ORvf4RflygjUk6vZvrJWsL8k8 FlyNa5e+BCE0t9/ASO2F2jphvjXAisYKFHGCeVBLD28velelcySB87baXk+fncmF LpuQ77oxb/YktvnHu18xVdmAHsYzQJMJWtSrC+HOGPM0BX10fOkWVcrMqbXgUMd+ W3uRco/4PX9Rs97ECCjhfYRG2kK0tury -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:03 2025 by rpki-client