$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft File: sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json) Hash identifier: hwvjolxClgc9+wOqv8v+ew6ijzn0IoRKj0JrWwC1EhE= Subject key identifier: A8:05:9B:1B:8C:88:18:9F:D4:26:8C:CB:D0:08:0F:26:37:87:72:09 Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6 Certificate issuer: /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft Manifest number: 8B Signing time: Fri 11 Apr 2025 05:40:18 +0000 Manifest this update: Fri 11 Apr 2025 05:40:17 +0000 Manifest next update: Fri 18 Apr 2025 05:40:17 +0000 Files and hashes: 1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: RcxtnDyuUYj/PcMa6CEMRkf/LieAfQj6PI9fjd83g68=) 2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: SLWE2DPVkEquMfz8hHroSU4zXY18AR0tkk1tXcWxdMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6 Validity Not Before: Apr 11 05:40:17 2025 GMT Not After : Apr 18 05:40:17 2025 GMT Subject: CN=67f8ab41-054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:1b:83:39:0e:d4:56:5b:af:68:e8:d7:d9: 50:e9:17:8f:94:0c:f5:c6:41:9b:a1:48:58:6b:96: 85:22:69:cb:d4:12:2d:6f:c8:de:46:ba:07:6f:af: c0:50:1b:31:4d:43:27:0e:81:14:b5:a2:40:bd:09: 29:91:98:3e:ab:f8:c2:f3:b0:4d:19:4e:d7:86:fb: 5d:8a:d9:1f:18:fa:a2:c7:f8:91:de:ff:09:79:46: ea:a0:73:8b:c6:7d:a1:ce:06:d0:78:dc:45:a3:8c: 28:a0:66:4c:aa:dc:9c:e6:90:17:62:78:cd:8b:9b: 47:4e:87:a6:2b:13:73:67:d1:b7:e7:3f:a0:96:bb: 43:fa:20:66:69:1e:32:d2:76:c0:91:01:57:aa:89: 0e:60:69:b9:80:0c:52:5b:50:93:33:a9:43:9f:be: 4f:19:19:5a:00:eb:18:a6:3f:c2:34:38:47:46:fe: 25:ff:b3:0c:99:db:3e:39:22:ed:3f:2f:51:fc:e8: 67:64:1a:a9:f0:91:5d:db:01:85:d7:66:2c:86:e5: bd:3b:c2:9f:53:10:f3:e0:ac:92:19:f4:01:31:50: fe:65:71:17:56:79:72:8d:0a:45:20:6e:60:09:15: 1b:60:9a:2b:75:3b:85:b5:de:6d:88:89:6f:50:d2: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:9B:1B:8C:88:18:9F:D4:26:8C:CB:D0:08:0F:26:37:87:72:09 X509v3 Authority Key Identifier: keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9d:1a:df:01:73:25:b0:01:e1:be:d5:b5:b2:7c:17:65:57: 2d:a6:15:76:30:c0:95:d5:d9:02:5f:15:57:93:b2:b5:2d:7d: 5f:2d:65:a5:c1:f7:3f:ed:e5:74:95:82:88:bc:0d:e3:30:af: 38:90:3a:f3:8e:f8:68:30:ce:4a:e1:ae:6b:c7:8e:e3:b7:8a: 77:24:8a:98:b1:99:e9:b3:f7:2b:72:84:72:4a:16:bb:57:8a: 69:78:69:a7:1e:f9:bd:03:46:47:9b:dc:f9:85:4a:c6:85:34: 19:c6:f2:40:2d:ac:6e:39:a3:ec:5c:93:e6:cd:3e:ac:cb:e7: 81:22:94:13:68:4b:3a:58:ce:6f:a3:7c:de:a6:fa:67:c2:c4: f9:01:af:38:e0:e6:42:c3:fe:91:16:79:a3:eb:00:22:e6:18: eb:56:ce:ca:45:13:f2:79:43:bf:c7:c0:df:5c:5e:0e:ed:13: 37:f8:da:92:80:3d:af:72:6f:f3:74:fc:93:a6:ba:5d:76:8b: 39:09:e2:df:3e:02:99:c4:ca:02:c3:d6:54:99:0d:be:8f:54: ff:0b:0b:f6:d8:1a:80:91:63:af:ae:ef:bd:de:a3:50:08:55: cc:96:44:6d:54:64:21:3f:6e:43:4c:74:fd:0f:dd:79:3f:53: c2:6f:39:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NDgxMTAvBgNVBAUTKEIyMDA1OTA2NDAzRTk5RTc2ODU5QUFBQkIxRENCRERB RTQ0MjA2RjYwHhcNMjUwNDExMDU0MDE3WhcNMjUwNDE4MDU0MDE3WjAYMRYwFAYD VQQDEw02N2Y4YWI0MS0wNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T8bgzkO1FZbr2jo19lQ6RePlAz1xkGboUhYa5aFImnL1BItb8jeRroHb6/A UBsxTUMnDoEUtaJAvQkpkZg+q/jC87BNGU7XhvtditkfGPqix/iR3v8JeUbqoHOL xn2hzgbQeNxFo4wooGZMqtyc5pAXYnjNi5tHToemKxNzZ9G35z+glrtD+iBmaR4y 0nbAkQFXqokOYGm5gAxSW1CTM6lDn75PGRlaAOsYpj/CNDhHRv4l/7MMmds+OSLt Py9R/OhnZBqp8JFd2wGF12YshuW9O8KfUxDz4KySGfQBMVD+ZXEXVnlyjQpFIG5g CRUbYJordTuFtd5tiIlvUNLKNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgFmxuM iBif1CaMy9AIDyY3h3IJMB8GA1UdIwQYMBaAFLIAWQZAPpnnaFmqq7HcvdrkQgb2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0OC9BQUNEMTNBODQy QjExMUVGOTJFNTY1NzhDNEY5QUUwMi9zZ0JaQmtBLW1lZG9XYXFyc2R5OTJ1UkNC dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnQlpCa0EtbWVkb1dhcXJzZHk5MnVSQ0J2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0OC9BQUNEMTNBODQyQjExMUVGOTJFNTY1NzhDNEY5QUUwMi9zZ0JaQmtBLW1l ZG9XYXFyc2R5OTJ1UkNCdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/nRrfAXMlsAHhvtW1snwXZVctphV2MMCV1dkCXxVXk7K1LX1fLWWl wfc/7eV0lYKIvA3jMK84kDrzjvhoMM5K4a5rx47jt4p3JIqYsZnps/crcoRySha7 V4ppeGmnHvm9A0ZHm9z5hUrGhTQZxvJALaxuOaPsXJPmzT6sy+eBIpQTaEs6WM5v o3zepvpnwsT5Aa844OZCw/6RFnmj6wAi5hjrVs7KRRPyeUO/x8DfXF4O7RM3+NqS gD2vcm/zdPyTprpddos5CeLfPgKZxMoCw9ZUmQ2+j1T/Cwv22BqAkWOvru+93qNQ CFXMlkRtVGQhP25DTHT9D915P1PCbzn3 -----END CERTIFICATE-----Generated at Sat Apr 12 19:12:02 2025 by rpki-client