$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft File: v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json) Hash identifier: 5OmGN+yi/llCV4XhuPnGhedpmwIbhWloImeALUSqf0w= Subject key identifier: 9B:D9:69:29:64:2B:5C:82:2E:3B:B8:D0:C4:03:EF:42:40:14:CF:C7 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 18EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft Manifest number: 18D9 Signing time: Fri 04 Apr 2025 16:32:09 +0000 Manifest this update: Fri 04 Apr 2025 16:32:09 +0000 Manifest next update: Fri 11 Apr 2025 16:32:09 +0000 Files and hashes: 1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: ky1Jm+euDNPiqlrhZ3llKAuNYEsSgK3JQsknfvta20w=) 2: 8732232CCBA011E887F87451C4F9AE02.roa (hash: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8=) 3: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: olDXMZkGA0r/qNiSe03tThyIk85/feQoUgNKftYserc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6383 (0x18ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB Validity Not Before: Apr 4 16:32:09 2025 GMT Not After : Apr 11 16:32:09 2025 GMT Subject: CN=67f00989-00bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:1b:3e:3a:39:a5:ea:4c:9f:7e:d1:1b:ae: e3:8b:44:56:0d:fa:b7:f0:90:d2:04:6f:fe:d5:f0: 6c:b3:4b:7a:69:90:28:b1:55:6a:85:9e:de:2c:2d: 4e:c5:dc:43:9b:16:a8:2d:9f:6c:12:bb:d4:fc:99: 8b:5a:93:4a:14:ce:5e:b7:d5:fc:64:c4:ff:fc:8c: 31:23:64:48:63:7d:54:f7:76:9b:ec:7c:b1:9a:f6: bc:ec:e6:22:5f:95:a9:6b:d1:55:ae:91:69:2c:d9: 88:b8:cc:7b:3c:8a:03:09:df:19:f2:2b:dc:a1:05: b5:e9:e3:93:d7:65:c8:46:3d:3d:d8:49:e3:49:20: ac:78:f0:16:a3:ea:ad:46:38:24:61:04:52:ea:f6: 93:f5:09:b6:77:59:87:ec:4a:f3:ae:0c:8f:76:04: 01:7a:44:94:7e:c2:4a:c5:3c:c2:1e:c3:37:03:8d: a0:fb:f1:45:40:77:e4:b6:09:71:55:f8:da:c7:b4: 2f:62:28:a5:79:a2:83:46:1f:72:5f:47:d5:fd:d1: 1e:14:f9:de:0c:0a:4e:e3:82:08:63:d4:60:65:19: 78:2d:ea:8d:f5:79:16:56:46:40:da:d3:07:a3:f7: 0d:e3:e7:d9:ba:02:00:9a:7c:71:a7:d4:34:6e:ad: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:69:29:64:2B:5C:82:2E:3B:B8:D0:C4:03:EF:42:40:14:CF:C7 X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3d:b2:93:73:f1:d7:4e:ea:ee:cd:a7:bc:29:0d:71:3d:82: 73:f4:12:33:88:ec:01:72:64:01:55:b8:f6:d2:19:f8:ba:ff: 87:ae:aa:0d:46:3b:e5:15:53:45:d8:92:b9:4c:92:c4:6f:39: c6:4c:c5:14:c4:8a:a3:fa:a2:dd:d2:7c:70:f0:ff:61:b6:d7: 9b:73:41:f9:8a:14:99:9f:72:a9:4e:5a:63:3e:d3:b7:7d:19: 0a:35:c2:ae:b1:5e:02:03:dd:3b:28:ce:0a:b3:e1:8a:d0:fe: 6a:e7:09:95:06:4b:6e:0f:30:78:99:21:d4:aa:70:26:a9:00: d2:4a:92:6e:1e:e8:d5:35:3f:a0:87:60:82:a2:82:f0:b0:6c: dc:07:05:ed:c8:71:f9:b0:7f:82:14:74:47:ad:98:99:e6:5f: 6e:9d:c9:91:7f:d7:99:2a:0b:ab:19:84:2a:b0:96:2f:f8:27: f6:74:36:1f:19:3f:9b:96:38:4e:03:37:2c:15:df:c8:d4:57: e0:ec:23:a8:78:b2:60:3e:49:09:25:a9:6a:fb:b4:0f:c1:df: f1:0c:36:a4:78:d1:69:29:e9:7c:29:a2:00:40:c8:f2:6b:a8: b6:9d:32:c1:a1:17:02:27:d6:2b:a4:b6:af:a5:4c:f5:d0:85: 05:08:e0:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjUwNDA0MTYzMjA5WhcNMjUwNDExMTYzMjA5WjAYMRYwFAYD VQQDEw02N2YwMDk4OS0wMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZYbPjo5pepMn37RG67ji0RWDfq38JDSBG/+1fBss0t6aZAosVVqhZ7eLC1O xdxDmxaoLZ9sErvU/JmLWpNKFM5et9X8ZMT//IwxI2RIY31U93ab7Hyxmva87OYi X5Wpa9FVrpFpLNmIuMx7PIoDCd8Z8ivcoQW16eOT12XIRj092EnjSSCsePAWo+qt RjgkYQRS6vaT9Qm2d1mH7ErzrgyPdgQBekSUfsJKxTzCHsM3A42g+/FFQHfktglx Vfjax7QvYiileaKDRh9yX0fV/dEeFPneDApO44IIY9RgZRl4LeqN9XkWVkZA2tMH o/cN4+fZugIAmnxxp9Q0bq3KvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvZaSlk K1yCLju40MQD70JAFM/HMB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjlGQi9BRjAwOThEMDg5NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZH R19uU09RaXA4NHd6S1lXWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBPbKTc/HXTuruzae8KQ1xPYJz9BIziOwBcmQBVbj20hn4uv+HrqoN RjvlFVNF2JK5TJLEbznGTMUUxIqj+qLd0nxw8P9httebc0H5ihSZn3KpTlpjPtO3 fRkKNcKusV4CA907KM4Ks+GK0P5q5wmVBktuDzB4mSHUqnAmqQDSSpJuHujVNT+g h2CCooLwsGzcBwXtyHH5sH+CFHRHrZiZ5l9uncmRf9eZKgurGYQqsJYv+Cf2dDYf GT+bljhOAzcsFd/I1Ffg7COoeLJgPkkJJalq+7QPwd/xDDakeNFpKel8KaIAQMjy a6i2nTLBoRcCJ9YrpLavpUz10IUFCODf -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:35 2025 by rpki-client