$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: i+AVZhIUPVkNe5kH/OEuGIUTFmAd1SVedLta8NSFvF8= Subject key identifier: 79:6E:17:53:EC:73:5C:F6:0A:CA:D9:EB:78:F3:71:8F:99:1D:7C:07 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 04DC Signing time: Thu 10 Apr 2025 23:44:52 +0000 Manifest this update: Thu 10 Apr 2025 23:44:52 +0000 Manifest next update: Thu 17 Apr 2025 23:44:52 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: 59UCLzr/ft4CcekETX1ec3ZOX404t1Twqr1h33BDVYA=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Apr 10 23:44:52 2025 GMT Not After : Apr 17 23:44:52 2025 GMT Subject: CN=67f857f4-210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:2c:54:4a:a0:e6:66:cd:3c:ef:67:72:fc: f0:3b:d6:b0:5a:9a:ac:3b:41:e9:03:a4:38:e8:c9: 7b:d2:9e:9a:5c:cc:1a:14:4e:44:82:a1:79:b2:49: fb:29:5c:44:3e:af:37:3c:85:c5:a5:75:52:5b:c1: 83:7f:96:ce:49:cf:7b:74:5b:39:31:27:84:9f:e6: d4:36:ec:75:6e:3f:9d:61:17:b0:55:eb:c0:68:52: 82:5f:da:b3:f6:dc:be:af:db:89:2a:e8:07:cb:9f: a0:db:0f:10:81:7e:85:50:01:2b:74:4e:1c:ce:3a: 0d:73:62:cc:b5:53:70:32:c8:4e:44:83:12:e8:cf: f0:10:90:fb:36:d8:72:c6:1e:b5:31:ff:b7:1a:0e: 12:3d:8d:74:7f:f1:94:66:2b:bb:6d:84:c0:6a:ba: 24:49:3c:b9:0e:d0:e4:84:91:ac:ee:ef:0b:a1:70: 38:2c:bd:f2:02:3d:9f:d0:0c:95:20:c4:af:4a:05: c6:38:a8:98:00:86:1b:b9:6f:08:f2:16:07:ed:7b: e9:c0:47:44:f7:3d:b0:e4:6f:fe:69:7e:1f:f4:af: f8:2f:4b:15:8e:df:c4:fe:2c:18:07:78:e0:ab:5d: c3:fd:2c:07:10:49:77:20:2c:da:0e:75:ff:23:1f: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:17:53:EC:73:5C:F6:0A:CA:D9:EB:78:F3:71:8F:99:1D:7C:07 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4e:45:50:2b:c6:8c:00:d7:be:ce:57:20:ee:d6:42:5f:1c: a1:c3:6f:c0:90:e3:7b:73:87:61:4e:3c:ae:a0:08:5f:08:76: d8:c9:d5:54:44:7c:ad:9a:8f:2b:1b:1a:7f:30:6a:e5:b7:36: e4:1c:5b:5f:7a:b0:04:42:96:95:6c:5d:ae:47:06:81:d0:47: 79:94:99:e5:3d:0b:22:ac:29:92:62:ed:f1:31:7b:e2:06:a6: 7c:1d:fe:ca:81:c6:9e:2c:d5:f7:0d:df:a7:db:c9:18:6a:1c: a5:3c:f7:df:8d:da:d4:23:c4:79:e3:9b:a2:6f:6a:ec:3c:53: 59:a3:1b:f6:1c:57:91:d4:ab:2a:09:1b:c7:65:d0:1f:fd:47: 2f:6a:77:64:7f:6a:eb:f7:0c:c2:81:52:0d:71:2c:c6:85:4b: 4a:e8:1f:a4:b0:da:35:d7:71:12:82:9f:d6:fa:c2:a3:80:89: 00:a3:cb:7b:1f:6a:9e:73:40:d3:31:02:43:c5:92:43:67:9f: 8e:92:f0:a7:c7:c6:95:11:a2:ac:d7:eb:9c:78:31:1a:45:3b: 33:bf:07:94:98:17:61:25:58:29:6c:a4:53:ba:04:70:c4:0a: 1d:29:c1:44:75:07:4c:87:a5:9a:ce:d4:02:32:6f:5b:93:a2: 88:0f:8b:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwNDEwMjM0NDUyWhcNMjUwNDE3MjM0NDUyWjAYMRYwFAYD VQQDEw02N2Y4NTdmNC0yMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrksVEqg5mbNPO9ncvzwO9awWpqsO0HpA6Q46Ml70p6aXMwaFE5EgqF5skn7 KVxEPq83PIXFpXVSW8GDf5bOSc97dFs5MSeEn+bUNux1bj+dYRewVevAaFKCX9qz 9ty+r9uJKugHy5+g2w8QgX6FUAErdE4czjoNc2LMtVNwMshORIMS6M/wEJD7Nthy xh61Mf+3Gg4SPY10f/GUZiu7bYTAarokSTy5DtDkhJGs7u8LoXA4LL3yAj2f0AyV IMSvSgXGOKiYAIYbuW8I8hYH7XvpwEdE9z2w5G/+aX4f9K/4L0sVjt/E/iwYB3jg q13D/SwHEEl3ICzaDnX/Ix+XbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHluF1Ps c1z2CsrZ63jzcY+ZHXwHMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaTkVQK8aMANe+zlcg7tZCXxyhw2/AkON7c4dhTjyuoAhfCHbYydVU RHytmo8rGxp/MGrltzbkHFtferAEQpaVbF2uRwaB0Ed5lJnlPQsirCmSYu3xMXvi BqZ8Hf7KgcaeLNX3Dd+n28kYahylPPffjdrUI8R545uib2rsPFNZoxv2HFeR1Ksq CRvHZdAf/Ucvandkf2rr9wzCgVINcSzGhUtK6B+ksNo113ESgp/W+sKjgIkAo8t7 H2qec0DTMQJDxZJDZ5+OkvCnx8aVEaKs1+uceDEaRTszvweUmBdhJVgpbKRTugRw xAodKcFEdQdMh6WaztQCMm9bk6KID4sb -----END CERTIFICATE-----Generated at Sat Apr 12 17:47:57 2025 by rpki-client