$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: 0uFLjRnvh2GSgXzc2bLR9mjX6ycJHHnTQSN2KzKenag= Subject key identifier: 49:57:12:ED:02:7B:65:71:6D:CC:65:D0:14:2D:6A:57:CE:3E:7E:C2 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 62 Signing time: Sat 05 Apr 2025 06:17:46 +0000 Manifest this update: Sat 05 Apr 2025 06:17:46 +0000 Manifest next update: Sat 12 Apr 2025 06:17:46 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: sQCfuuYckx7G0rLc2TgzhM98xA1FPeizGU8cfjwiXOU=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E Validity Not Before: Apr 5 06:17:46 2025 GMT Not After : Apr 12 06:17:46 2025 GMT Subject: CN=67f0cb0a-ee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:04:19:c0:77:e4:44:f4:c0:a3:14:5d:e1: 02:86:9a:b7:5c:15:40:be:bf:a0:ea:95:33:8f:c3: 59:d3:5a:15:f8:3d:27:f3:60:bf:3b:c2:b2:8e:29: e1:f0:8c:e4:cb:75:e0:a6:10:84:2b:82:f0:1a:a0: aa:e9:70:46:a4:b6:d6:31:b7:cc:76:3a:f4:86:9c: 5d:31:58:bc:6a:d4:50:d9:fa:28:2c:e8:11:b0:09: 69:60:6c:47:06:9f:4f:6b:e7:7e:6d:0b:33:5c:32: be:b9:8c:33:ba:17:3f:16:98:a9:4e:df:c5:67:01: 65:e6:4f:ce:53:e8:33:f2:5e:52:6a:fa:93:5a:a6: c1:f4:fe:0f:49:22:ea:66:be:3a:dc:f8:6f:17:1e: 40:f4:bd:97:ed:41:a4:cf:25:21:8a:9f:fa:2b:28: e3:af:5c:24:a1:7d:1d:1a:85:06:77:23:f1:d8:47: fa:e0:03:51:91:87:f5:a9:d4:6e:ae:5e:60:d3:e1: fb:c5:c7:70:7f:63:d2:46:cc:34:f1:a8:b9:71:2f: 69:78:16:f3:b8:b5:7c:a7:6a:55:23:de:5c:c0:2e: f6:cf:71:98:b9:89:70:0d:b6:7f:2c:44:9c:31:87: 66:5a:41:68:04:b5:6f:ff:92:34:f5:49:73:69:97: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:12:ED:02:7B:65:71:6D:CC:65:D0:14:2D:6A:57:CE:3E:7E:C2 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:35:56:79:b2:a0:73:63:fc:c7:36:3f:04:c2:62:11:f6:f1: 25:4c:8b:51:6b:7b:b8:87:c2:07:cf:17:96:10:44:25:65:aa: a8:28:12:21:61:bd:8e:d7:4c:9a:1a:07:a8:3d:15:85:73:c1: ee:7a:dc:4d:34:26:d9:ce:9a:50:32:b8:eb:43:2d:06:8d:89: ec:bf:4e:72:59:f8:2d:07:44:7c:92:29:fb:f6:49:95:c2:0f: 2e:0c:1e:3e:1d:54:6f:98:1a:1f:80:81:6d:5c:f6:a5:4c:35: 17:07:11:4e:7e:59:4e:39:c7:02:2c:9c:71:9e:13:dc:32:e2: e9:24:5f:44:d2:26:fa:9a:bf:56:6b:19:a3:8d:b6:73:0b:e9: 2a:dc:72:2d:9b:d2:f4:1b:f7:bf:52:0f:2c:84:7e:d9:7a:12: c9:c9:88:c6:5c:65:50:4d:7b:fe:8d:7b:d6:6c:3d:4d:ba:0a: bc:82:99:c5:bf:a2:8e:56:40:c3:47:98:d9:81:9e:3f:77:8d: 5b:4b:48:aa:24:27:d6:ba:c1:db:5e:c7:85:d7:31:60:ed:b7: 51:51:9b:9e:76:61:e4:1a:8b:fb:bb:49:71:8d:be:4a:58:8b: 4b:ef:54:54:d8:56:64:35:00:13:fb:b2:bf:b6:aa:88:94:e7: b6:1b:bb:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNTA0MDUwNjE3NDZaFw0yNTA0MTIwNjE3NDZaMBgxFjAUBgNV BAMTDTY3ZjBjYjBhLWVlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDAgQZwHfkRPTAoxRd4QKGmrdcFUC+v6DqlTOPw1nTWhX4PSfzYL87wrKOKeHw jOTLdeCmEIQrgvAaoKrpcEakttYxt8x2OvSGnF0xWLxq1FDZ+igs6BGwCWlgbEcG n09r535tCzNcMr65jDO6Fz8WmKlO38VnAWXmT85T6DPyXlJq+pNapsH0/g9JIupm vjrc+G8XHkD0vZftQaTPJSGKn/orKOOvXCShfR0ahQZ3I/HYR/rgA1GRh/Wp1G6u XmDT4fvFx3B/Y9JGzDTxqLlxL2l4FvO4tXynalUj3lzALvbPcZi5iXANtn8sRJwx h2ZaQWgEtW//kjT1SXNpl7UfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVcS7QJ7 ZXFtzGXQFC1qV84+fsIwHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzY0MjNCRTA2N0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05 S3gyU2c4OGhHOEpzejBvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEI1VnmyoHNj/Mc2PwTCYhH28SVMi1Fre7iHwgfPF5YQRCVlqqgoEiFh vY7XTJoaB6g9FYVzwe563E00JtnOmlAyuOtDLQaNiey/TnJZ+C0HRHySKfv2SZXC Dy4MHj4dVG+YGh+AgW1c9qVMNRcHEU5+WU45xwIsnHGeE9wy4ukkX0TSJvqav1Zr GaONtnML6Srcci2b0vQb979SDyyEftl6EsnJiMZcZVBNe/6Ne9ZsPU26CryCmcW/ oo5WQMNHmNmBnj93jVtLSKokJ9a6wdtex4XXMWDtt1FRm552YeQai/u7SXGNvkpY i0vvVFTYVmQ1ABP7sr+2qoiU57Ybu28= -----END CERTIFICATE-----Generated at Sat Apr 5 19:33:12 2025 by rpki-client