$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: 0LcJLP2PSG14UiQo7wmUsGem14vqzo3eC4oZqkMTB+g= Subject key identifier: 31:94:94:B1:11:3E:E6:A6:07:A5:17:C8:59:70:BF:AE:ED:8B:03:C8 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: B7 Signing time: Thu 03 Apr 2025 05:16:11 +0000 Manifest this update: Thu 03 Apr 2025 05:16:11 +0000 Manifest next update: Thu 10 Apr 2025 05:16:11 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: mpoFA77HvIe5FWTKwrSFzVo/bs9B+wWbOc2kqwSKe6o=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987 Validity Not Before: Apr 3 05:16:11 2025 GMT Not After : Apr 10 05:16:11 2025 GMT Subject: CN=67ee199b-87df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:65:d8:8e:4a:d2:d7:7b:bb:4b:c3:5e:39: 6c:39:ae:8b:fd:27:c9:a6:7d:63:a8:32:8d:56:af: ad:9a:1c:58:95:fb:2e:ae:8a:2a:94:26:97:1c:34: 31:51:e8:a5:d6:33:57:0c:cb:d2:0e:d1:41:91:2c: 62:c9:33:02:9b:21:d5:4f:65:32:e3:fc:01:72:88: 82:2d:3a:ba:2e:85:cf:1e:4e:ea:90:76:37:4a:02: a7:f9:f8:d6:dc:df:6a:78:0f:71:80:84:3b:5f:6a: cf:92:a9:61:1b:13:66:8c:b7:45:54:0e:9f:8f:40: eb:bc:6f:64:7a:55:e4:7f:32:f8:6b:d3:16:03:b5: b9:93:9b:a9:dd:bd:3e:bd:ad:a1:9f:3f:97:89:12: e2:83:3b:9c:30:f6:b0:26:7d:79:2a:6a:ab:99:65: 3a:e2:15:1e:f9:d5:8e:18:90:8d:07:7b:7b:2a:1f: 73:02:eb:10:88:cd:b7:24:de:94:04:1b:af:f7:a8: dd:3b:5c:ef:40:16:e5:b0:53:14:73:9b:d6:c4:68: 4c:cb:f8:c0:ec:45:6f:ac:7c:ac:9c:48:8d:70:67: 72:03:9f:1b:01:30:36:36:28:59:02:58:fb:e3:9a: 34:6e:51:5f:d1:f8:ad:7f:e1:a3:b3:5b:84:96:b1: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:94:B1:11:3E:E6:A6:07:A5:17:C8:59:70:BF:AE:ED:8B:03:C8 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:78:06:0c:20:cd:5c:b9:6c:e8:64:e7:8f:01:3d:78:d5:4a: 81:73:30:7b:d1:9b:ce:1b:f2:62:5c:8f:a0:d6:ca:2c:aa:fb: 3f:c2:bd:d4:7f:ca:6d:55:9d:d5:09:1b:da:ce:5c:35:f8:81: d5:71:07:f4:0c:0a:5f:b9:03:14:9a:4d:a5:f5:bb:73:64:37: 8a:50:11:04:6d:73:63:ba:7f:84:4d:f5:02:78:4f:43:6e:87: 8e:1d:cc:ff:4b:26:bd:ef:a4:26:74:33:6a:99:70:38:a9:98: 52:44:d7:8f:80:96:0e:dd:7f:21:d2:4f:43:38:f1:2e:2d:1b: 0a:b2:ef:d5:e1:fc:85:64:0c:af:75:d2:6e:51:d3:63:e0:2d: 37:9b:f2:05:2d:83:c8:a1:3b:4d:20:95:f4:c1:df:ad:b3:a8: 2c:89:6f:9e:5a:5d:9e:13:19:11:25:87:38:c8:6d:af:62:26: 58:cc:ef:14:a4:2a:fa:82:5b:5e:c8:93:49:5a:4c:65:0e:1a: 10:02:2e:ef:f8:71:f2:1d:65:c4:9d:d9:3d:f9:90:af:c4:b5: a5:aa:68:1c:90:f6:7a:d3:35:d2:74:fe:3e:65:fa:4b:ae:3a: 83:e1:70:94:db:a0:c9:ab:42:18:e0:be:f6:62:6f:a5:7c:74: aa:95:5b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUwNDAzMDUxNjExWhcNMjUwNDEwMDUxNjExWjAYMRYwFAYD VQQDEw02N2VlMTk5Yi04N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnetl2I5K0td7u0vDXjlsOa6L/SfJpn1jqDKNVq+tmhxYlfsurooqlCaXHDQx Ueil1jNXDMvSDtFBkSxiyTMCmyHVT2Uy4/wBcoiCLTq6LoXPHk7qkHY3SgKn+fjW 3N9qeA9xgIQ7X2rPkqlhGxNmjLdFVA6fj0DrvG9kelXkfzL4a9MWA7W5k5up3b0+ va2hnz+XiRLigzucMPawJn15KmqrmWU64hUe+dWOGJCNB3t7Kh9zAusQiM23JN6U BBuv96jdO1zvQBblsFMUc5vWxGhMy/jA7EVvrHysnEiNcGdyA58bATA2NihZAlj7 45o0blFf0fitf+Gjs1uElrFrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGUlLER PuamB6UXyFlwv67tiwPIMB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTk4Ny9GMEZBNEZBNkZDMjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVB Q3I2NHhFaWdueGxma1RuaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAeAYMIM1cuWzoZOePAT141UqBczB70ZvOG/JiXI+g1sosqvs/wr3U f8ptVZ3VCRvazlw1+IHVcQf0DApfuQMUmk2l9btzZDeKUBEEbXNjun+ETfUCeE9D boeOHcz/Sya976QmdDNqmXA4qZhSRNePgJYO3X8h0k9DOPEuLRsKsu/V4fyFZAyv ddJuUdNj4C03m/IFLYPIoTtNIJX0wd+ts6gsiW+eWl2eExkRJYc4yG2vYiZYzO8U pCr6glteyJNJWkxlDhoQAi7v+HHyHWXEndk9+ZCvxLWlqmgckPZ60zXSdP4+ZfpL rjqD4XCU26DJq0IY4L72Ym+lfHSqlVum -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:30 2025 by rpki-client