$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: Z0tKbDECH4vPHFJcGCBRz0btNZtL9NhE/nqTqgdbwGY= Subject key identifier: 07:2D:EA:EE:AB:37:EF:9C:AD:52:F1:AB:EB:0E:8C:3A:2B:DC:A7:D6 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 042E Signing time: Thu 03 Apr 2025 00:19:57 +0000 Manifest this update: Thu 03 Apr 2025 00:19:56 +0000 Manifest next update: Thu 10 Apr 2025 00:19:56 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: oGiXE8nB4mYeaR/Pc6o3TrzAJeesdHkcDlP/yq/SaTg=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: VvXC5qsmdR6YGob44Y/Iy57cV4LdW3QDFZsUSIeluVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50 Validity Not Before: Apr 3 00:19:56 2025 GMT Not After : Apr 10 00:19:56 2025 GMT Subject: CN=67edd42c-b0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:ef:c7:65:07:cf:55:18:33:6f:45:6c:22: a3:fa:20:43:56:ac:23:77:74:32:76:1d:a5:10:ff: f7:34:e4:4a:b1:9b:c5:d3:3e:cb:7a:6e:99:b6:87: 16:59:5a:29:71:99:41:c0:cd:c3:89:23:ec:d0:86: fc:12:f0:68:d0:18:2c:fc:a9:38:99:9e:8f:f2:ac: 5e:6b:17:3d:12:18:e6:de:b4:dc:9d:44:30:d2:60: c1:e9:de:e4:60:da:40:4a:32:c4:93:9f:ff:12:9f: b2:af:24:be:b2:57:89:2d:a3:6c:13:0b:14:c2:d3: d9:98:e4:48:a7:44:0e:09:3d:cb:e0:5a:02:89:42: d3:ea:23:2c:9b:09:fb:39:d2:0c:6d:f0:41:74:d1: a6:8c:8c:02:eb:cc:71:21:25:a1:d8:98:86:da:e1: b4:46:0a:cb:4e:3f:96:0b:d5:36:85:65:6e:f7:98: 4f:85:79:bb:6c:26:9d:7c:9c:c4:74:23:8b:07:27: 1e:97:88:19:bf:6c:c9:46:65:b4:03:ec:79:94:23: a9:07:ba:c3:0e:7d:3a:36:df:69:fc:2a:9f:bb:5d: 2b:5a:3a:23:7e:a7:0d:59:5d:f9:ca:ef:ee:54:57: 81:bb:1f:22:3c:be:df:b3:c7:14:cd:cc:6e:18:79: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:EA:EE:AB:37:EF:9C:AD:52:F1:AB:EB:0E:8C:3A:2B:DC:A7:D6 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:72:81:d5:92:1f:cb:14:48:57:57:48:77:f5:b8:57:bf:c6: af:9b:b6:69:e7:a6:1c:cd:2e:68:f3:07:aa:58:82:ee:a2:56: 6e:a1:bf:2e:00:2d:fc:9b:f6:d0:6e:9e:c4:51:f8:b9:8e:8b: 53:00:4e:aa:a0:8d:5b:e7:6a:79:24:38:82:1f:fe:b5:53:34: b5:0e:21:8f:4a:78:5f:98:5b:95:01:2f:d5:f0:25:a2:19:ad: e9:d2:49:70:78:ff:12:ed:8b:95:dd:21:05:4d:b2:01:b5:13: a8:18:63:4a:c6:28:ef:dc:2f:4b:ba:2c:60:8e:92:8b:33:d4: cb:38:53:08:70:a8:3a:dc:2f:1e:07:fc:b1:f3:e3:31:1d:46: 4f:0e:13:77:d6:24:50:06:dc:a2:13:18:2f:61:06:d8:8f:c1: ca:eb:aa:2d:3e:0b:ec:e0:43:e7:98:46:97:6b:f8:c6:e8:50: 39:34:95:06:08:98:38:2f:94:2b:35:c1:c8:49:74:14:2b:96: 40:72:d8:f8:d0:39:9d:98:c3:b8:ff:b3:0e:de:bb:9f:24:0f: 11:3f:93:c9:02:2e:25:64:58:59:89:41:88:b8:22:8c:ce:20: 59:91:fc:30:f3:67:c8:c1:97:41:bf:8f:34:bc:6f:5f:09:79: 71:98:2d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwNDAzMDAxOTU2WhcNMjUwNDEwMDAxOTU2WjAYMRYwFAYD VQQDEw02N2VkZDQyYy1iMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56/vx2UHz1UYM29FbCKj+iBDVqwjd3Qydh2lEP/3NORKsZvF0z7Lem6ZtocW WVopcZlBwM3DiSPs0Ib8EvBo0Bgs/Kk4mZ6P8qxeaxc9Ehjm3rTcnUQw0mDB6d7k YNpASjLEk5//Ep+yryS+sleJLaNsEwsUwtPZmORIp0QOCT3L4FoCiULT6iMsmwn7 OdIMbfBBdNGmjIwC68xxISWh2JiG2uG0RgrLTj+WC9U2hWVu95hPhXm7bCadfJzE dCOLBycel4gZv2zJRmW0A+x5lCOpB7rDDn06Nt9p/Cqfu10rWjojfqcNWV35yu/u VFeBux8iPL7fs8cUzcxuGHmjkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAct6u6r N++crVLxq+sOjDor3KfWMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGcoHVkh/LFEhXV0h39bhXv8avm7Zp56YczS5o8weqWILuolZuob8u AC38m/bQbp7EUfi5jotTAE6qoI1b52p5JDiCH/61UzS1DiGPSnhfmFuVAS/V8CWi Ga3p0klweP8S7YuV3SEFTbIBtROoGGNKxijv3C9LuixgjpKLM9TLOFMIcKg63C8e B/yx8+MxHUZPDhN31iRQBtyiExgvYQbYj8HK66otPgvs4EPnmEaXa/jG6FA5NJUG CJg4L5QrNcHISXQUK5ZActj40DmdmMO4/7MO3rufJA8RP5PJAi4lZFhZiUGIuCKM ziBZkfww82fIwZdBv480vG9fCXlxmC1w -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:01 2025 by rpki-client