$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: AXim149e9TRzC84yI5vHbGtLv1ObEQW61BAnn4wfFvU= Subject key identifier: EC:C8:5E:6A:FC:BE:58:9A:2F:6C:93:C5:CB:50:8E:5D:CF:F0:85:08 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 0184 Signing time: Sat 29 Mar 2025 03:17:32 +0000 Manifest this update: Sat 29 Mar 2025 03:17:31 +0000 Manifest next update: Sat 05 Apr 2025 03:17:31 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: a67k1CGVcJIN5UzKhuBlzsaHDKYtytKf/mSGCIvLASo=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: BWLI/lFMOk0gs1uM9uMc8V3aTl6ezInYU2HutDGOR1Y=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: KfEf5+IVw2cc5iVIvA+8UOcszxul9bOLbJUOX0WGbIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A Validity Not Before: Mar 29 03:17:31 2025 GMT Not After : Apr 5 03:17:31 2025 GMT Subject: CN=67e7664c-a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:a9:c0:39:71:78:bc:9a:a9:de:a2:5b:61: 39:ff:88:87:04:c0:1b:16:c4:9c:9f:e5:7b:7d:b1: b0:ed:f6:47:62:39:b3:72:12:ba:ae:70:d1:ce:24: 4c:78:db:f0:2f:ed:e2:6a:49:73:b4:c9:a8:0b:ea: c8:7a:9b:79:14:3a:c6:aa:b1:27:ed:e8:c7:08:29: 5d:5a:10:d4:ae:66:57:c2:65:bb:1b:c5:c7:31:5e: e4:94:90:00:35:6b:2f:74:e9:c3:21:47:f1:c8:0b: 6d:eb:65:a9:cb:77:ac:cf:f0:fb:e4:96:34:d7:3a: 95:bb:2a:a2:5f:da:35:56:c8:35:f2:97:db:23:c3: 83:ba:2f:dd:8d:82:0e:fc:1c:24:b9:87:ab:d9:02: fc:74:9a:f8:70:b1:36:fc:94:e2:10:0e:43:05:b4: b0:82:19:b2:d6:16:ba:92:b2:03:6e:c4:76:6a:47: f6:06:4a:59:0e:99:28:08:67:9f:24:76:6b:4c:8e: c1:98:20:22:bc:d3:23:37:b0:b3:da:a1:c7:2e:51: b0:1e:71:ba:c1:b2:b7:a3:81:bf:8e:b3:fb:3f:73: 6a:21:6c:d9:bf:91:32:92:da:6a:dd:aa:59:48:74: 3f:a5:c0:28:10:6b:1e:18:b1:f4:76:c7:b7:7c:14: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:5E:6A:FC:BE:58:9A:2F:6C:93:C5:CB:50:8E:5D:CF:F0:85:08 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a8:d8:43:9b:50:45:d3:fd:a5:14:be:71:7d:35:55:29:90: 96:a9:35:f7:3e:f5:2f:e5:0a:07:58:78:cc:8b:dc:79:42:ab: 79:ea:fb:21:b8:48:62:23:d2:a1:d5:22:52:86:3d:05:a2:ab: db:5e:a9:cc:cb:21:7d:e1:5a:84:50:45:52:7a:46:56:ff:e7: ce:ec:d9:73:2f:4a:a8:ad:4f:32:d9:c0:0a:99:72:f1:c0:0c: 94:52:a0:c9:1e:5a:37:0f:06:b4:c3:d0:ca:8c:0d:46:05:a6: 15:e9:c2:1c:30:1e:b0:41:1b:bf:fc:39:e9:2a:9c:b3:a5:26: 64:d3:00:22:b4:1d:2c:b1:1e:53:26:0d:c9:4e:44:5c:d9:ec: fb:47:29:5d:c5:13:4c:11:59:57:0b:72:d5:eb:b5:b1:ed:89: 3e:b4:f5:55:c6:a2:7b:14:61:a5:64:f0:3e:97:4a:95:b4:43: 8e:31:7f:94:1a:08:cb:c3:05:c3:20:02:7a:2d:44:8d:34:f3: 15:9b:1b:fb:ec:e3:99:e4:42:b3:0f:18:33:54:42:13:0b:f3: 97:2e:a4:33:e3:c6:2a:ab:77:6b:6a:c0:77:35:5d:61:d1:76: c0:b1:39:d6:3e:6b:69:4d:35:f1:f2:e0:dd:1d:ca:32:42:69: 24:09:b2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUwMzI5MDMxNzMxWhcNMjUwNDA1MDMxNzMxWjAYMRYwFAYD VQQDEw02N2U3NjY0Yy1hOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppypwDlxeLyaqd6iW2E5/4iHBMAbFsScn+V7fbGw7fZHYjmzchK6rnDRziRM eNvwL+3iaklztMmoC+rIept5FDrGqrEn7ejHCCldWhDUrmZXwmW7G8XHMV7klJAA NWsvdOnDIUfxyAtt62Wpy3esz/D75JY01zqVuyqiX9o1Vsg18pfbI8ODui/djYIO /BwkuYer2QL8dJr4cLE2/JTiEA5DBbSwghmy1ha6krIDbsR2akf2BkpZDpkoCGef JHZrTI7BmCAivNMjN7Cz2qHHLlGwHnG6wbK3o4G/jrP7P3NqIWzZv5Eyktpq3apZ SHQ/pcAoEGseGLH0dse3fBREKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzIXmr8 vliaL2yTxctQjl3P8IUIMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqNhDm1BF0/2lFL5xfTVVKZCWqTX3PvUv5QoHWHjMi9x5Qqt56vsh uEhiI9Kh1SJShj0FoqvbXqnMyyF94VqEUEVSekZW/+fO7NlzL0qorU8y2cAKmXLx wAyUUqDJHlo3Dwa0w9DKjA1GBaYV6cIcMB6wQRu//DnpKpyzpSZk0wAitB0ssR5T Jg3JTkRc2ez7RyldxRNMEVlXC3LV67Wx7Yk+tPVVxqJ7FGGlZPA+l0qVtEOOMX+U GgjLwwXDIAJ6LUSNNPMVmxv77OOZ5EKzDxgzVEITC/OXLqQz48Yqq3drasB3NV1h 0XbAsTnWPmtpTTXx8uDdHcoyQmkkCbIq -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:27 2025 by rpki-client