$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json) Hash identifier: 0CKd6ubL1sUFNV3cGABpuvTj1ioqsr8JvpT03ljr8Ls= Subject key identifier: 36:D6:64:46:7E:2E:39:8C:5B:40:08:78:16:8F:06:DB:4F:A2:85:47 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft Manifest number: 018B Signing time: Mon 21 Apr 2025 02:30:31 +0000 Manifest this update: Mon 21 Apr 2025 02:30:31 +0000 Manifest next update: Mon 28 Apr 2025 02:30:31 +0000 Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: j8nJL8dBYXINSM0s51dB2emLfwynFgaCruei9deC6SQ=) 2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: /+LBjF6lBPLxhQK10OGPQmB3GU8J3/dgM8FRgJhuXxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Apr 21 02:30:31 2025 GMT Not After : Apr 28 02:30:31 2025 GMT Subject: CN=6805adc7-a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:1f:91:1a:28:10:f7:34:0e:94:cf:7b:bd: 26:cb:29:0a:e3:f9:e7:11:47:29:06:56:7e:74:ef: d0:3b:42:ab:9c:5d:31:bf:e6:d3:9a:c7:fa:d8:cd: 72:9b:03:16:8d:8c:61:ec:2f:ed:ab:c8:b2:b2:2f: f5:6b:52:a1:8b:7e:0a:ea:9c:69:ec:65:6a:ef:59: 9f:8a:27:e4:ad:eb:5f:be:1d:de:32:99:9a:a3:54: 79:92:19:7f:70:2d:65:e2:18:18:52:26:b9:ee:4e: f0:ce:5a:28:48:db:ef:71:d2:c1:4a:fc:7f:de:9c: 5b:09:9d:ee:f3:b3:9c:7d:a3:3f:7a:7c:b1:82:16: 47:ce:34:7a:4f:28:5b:96:c3:07:45:98:20:d2:58: 3c:10:98:aa:3f:38:82:5c:16:b9:53:50:f8:54:d0: 87:f3:9b:70:be:c2:f4:b4:73:3b:ac:88:47:28:23: 6c:cb:f6:70:88:ae:a0:7b:9c:41:6f:05:2c:00:71: f3:ea:2e:eb:7b:b1:22:7a:54:41:64:9b:c4:d9:e8: 9b:c8:94:45:5b:f2:b2:f5:e6:d9:df:32:a5:a9:5b: fd:5a:71:46:93:c6:c4:33:ca:de:0b:83:81:8f:46: 8e:2b:4b:54:7f:d6:8c:b8:1f:22:43:db:91:21:de: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D6:64:46:7E:2E:39:8C:5B:40:08:78:16:8F:06:DB:4F:A2:85:47 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3b:38:72:20:2f:ce:62:3d:8e:61:8d:52:3b:f2:9c:93:ec: ce:ec:b7:8c:6c:b9:ca:bb:87:53:e6:78:43:62:29:18:18:b1: 51:5e:29:31:5b:7a:1e:a3:5e:6f:8a:75:d0:c9:6b:40:9e:fe: c7:a6:81:c8:3d:38:eb:e1:5a:38:1a:53:20:d9:63:13:0c:e7: ea:31:07:23:5a:c7:6f:47:53:b5:7e:6a:0d:fe:29:1a:65:a8: 3f:03:4d:21:58:43:3b:25:37:17:b2:30:7a:54:87:8d:f7:2f: f9:f6:fe:fc:8b:e9:c6:4f:d8:50:af:9a:59:8d:22:1b:54:7b: 6c:26:8d:c9:6b:f1:b3:bb:b0:43:83:5a:c0:38:84:b6:3f:6c: 6b:79:17:5c:ce:82:16:b8:b2:cc:f8:19:3f:24:b6:34:0f:5f: 51:76:f2:c4:86:d1:63:ef:ac:e0:b4:75:0c:4d:5e:54:09:12: c4:cc:b0:38:ef:85:ed:f3:82:59:92:ea:a0:9b:97:71:97:3f: 90:57:b0:97:71:5c:ca:b7:e5:30:98:fe:5b:df:28:f2:cd:78: de:01:98:6f:8c:7f:bf:a3:6c:a5:aa:ff:44:db:3f:f5:ed:9b: b1:54:6a:02:d7:da:91:90:46:56:29:37:26:8f:36:71:b3:b3: 0f:8d:75:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjUwNDIxMDIzMDMxWhcNMjUwNDI4MDIzMDMxWjAYMRYwFAYD VQQDEw02ODA1YWRjNy1hMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbUfkRooEPc0DpTPe70myykK4/nnEUcpBlZ+dO/QO0KrnF0xv+bTmsf62M1y mwMWjYxh7C/tq8iysi/1a1Khi34K6pxp7GVq71mfiifkretfvh3eMpmao1R5khl/ cC1l4hgYUia57k7wzlooSNvvcdLBSvx/3pxbCZ3u87OcfaM/enyxghZHzjR6Tyhb lsMHRZgg0lg8EJiqPziCXBa5U1D4VNCH85twvsL0tHM7rIhHKCNsy/ZwiK6ge5xB bwUsAHHz6i7re7EielRBZJvE2eibyJRFW/Ky9ebZ3zKlqVv9WnFGk8bEM8reC4OB j0aOK0tUf9aMuB8iQ9uRId7zWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbWZEZ+ LjmMW0AIeBaPBttPooVHMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV bnhDYnFPd2xwbHZ5TnByUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmOzhyIC/OYj2OYY1SO/Kck+zO7LeMbLnKu4dT5nhDYikYGLFRXikx W3oeo15vinXQyWtAnv7HpoHIPTjr4Vo4GlMg2WMTDOfqMQcjWsdvR1O1fmoN/ika Zag/A00hWEM7JTcXsjB6VIeN9y/59v78i+nGT9hQr5pZjSIbVHtsJo3Ja/Gzu7BD g1rAOIS2P2xreRdczoIWuLLM+Bk/JLY0D19RdvLEhtFj76zgtHUMTV5UCRLEzLA4 74Xt84JZkuqgm5dxlz+QV7CXcVzKt+UwmP5b3yjyzXjeAZhvjH+/o2ylqv9E2z/1 7ZuxVGoC19qRkEZWKTcmjzZxs7MPjXUm -----END CERTIFICATE-----Generated at Tue Apr 22 16:19:09 2025 by rpki-client