$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json) Hash identifier: +Kvk3F4c7+oARgMbIs0I5aewCCjeYX5XyeuxEKtYH2U= Subject key identifier: F1:59:0A:78:1F:21:8A:18:A4:2A:F3:2A:15:B1:7C:E9:55:BD:C1:F8 Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft Manifest number: 06CC Signing time: Wed 16 Apr 2025 23:09:59 +0000 Manifest this update: Wed 16 Apr 2025 23:09:59 +0000 Manifest next update: Wed 23 Apr 2025 23:09:59 +0000 Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: UBqs0YTwbAtuSxRMhL2eeynPr8HaZIUIrks/uq8diic=) 2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: ywWchnTSu/qeQDeWbCVaFbaIpGcNtf7MxWBgX+a8m9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Validity Not Before: Apr 16 23:09:59 2025 GMT Not After : Apr 23 23:09:59 2025 GMT Subject: CN=680038c7-0264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:f4:55:cd:95:43:10:e0:27:e1:5f:c4:ca: 94:71:d2:58:17:c7:46:b6:87:df:50:3a:3e:2c:4a: dd:9b:04:21:91:06:4a:3e:b8:f7:f4:0b:35:a4:8e: 1f:a9:b0:91:26:df:66:e1:6b:dc:2b:5c:70:d2:cc: 08:59:1e:a3:96:61:23:0e:39:b4:fa:a4:89:31:49: 5b:fb:56:99:3e:54:bb:8a:0e:33:6b:5e:11:ad:4e: db:dd:61:9d:59:29:2c:60:54:eb:a2:2f:c9:2f:d0: e4:8e:21:b8:25:a7:c8:7f:0f:4c:fe:bb:c7:41:2e: fc:99:1a:98:9f:b5:e5:f0:fc:f8:c3:d8:99:f9:47: 42:fc:c3:0f:92:66:f8:c4:5e:72:91:46:33:bf:bd: 26:41:d2:c9:d7:58:0b:ef:d0:4f:0e:ea:7b:1d:8c: 8a:b7:63:4f:b5:9f:ab:73:7c:fd:32:ee:a0:1e:9a: d9:18:8c:19:49:50:fe:1f:27:d3:f9:92:33:64:24: 7c:80:43:09:19:b4:1b:97:c3:38:68:ef:a1:61:3c: eb:5f:56:7d:2e:17:ab:63:92:2c:6b:33:26:eb:77: 2a:be:40:38:78:43:e1:34:09:fc:69:6e:e3:75:e5: ab:ac:98:53:8d:bb:4f:13:7f:f4:bf:7f:18:30:6c: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:59:0A:78:1F:21:8A:18:A4:2A:F3:2A:15:B1:7C:E9:55:BD:C1:F8 X509v3 Authority Key Identifier: keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:77:9e:ea:a2:e0:fc:57:89:f6:5a:56:cd:14:29:2f:3f: ce:ae:a8:ad:71:39:77:41:3c:48:55:b6:71:db:67:62:76:9d: 02:e0:ba:f9:bd:e6:e5:02:1b:45:5f:87:82:68:85:8f:fb:a0: 46:5b:56:6d:71:9f:97:6d:02:78:44:0a:32:18:b3:e0:35:a1: 30:2a:56:2c:42:ff:87:81:d8:24:86:de:a3:8a:41:75:d1:08: 87:9f:22:e6:07:ca:ba:01:61:7d:f2:34:7b:78:4a:db:72:af: 03:31:c8:44:46:d0:52:9f:1d:46:d1:30:f9:f9:43:52:ce:52: 9b:bd:6c:b5:89:6c:2f:1f:16:bf:54:2b:b5:f2:fb:5c:16:80: fc:0c:aa:e0:8f:6b:32:bf:52:c0:8e:23:b0:77:f5:be:b8:2d: 85:61:c9:95:33:24:d5:14:d6:2f:a3:f3:09:12:94:c6:92:b3: 22:74:f6:e3:9f:73:cd:c8:c5:5e:55:e6:9b:fa:d8:37:4e:2c: 1a:0c:5e:d9:2e:b0:c7:54:fe:83:d9:bf:6a:29:fc:87:c0:da: f9:be:66:b0:de:ae:05:01:a9:a4:a6:da:f7:22:f7:dc:18:92: e6:89:07:ed:bf:1d:d8:69:70:8e:4f:49:ec:1f:d0:92:a2:26: d9:1d:1e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx MEQ2NTdGRkUwHhcNMjUwNDE2MjMwOTU5WhcNMjUwNDIzMjMwOTU5WjAYMRYwFAYD VQQDEw02ODAwMzhjNy0wMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3P0Vc2VQxDgJ+FfxMqUcdJYF8dGtoffUDo+LErdmwQhkQZKPrj39As1pI4f qbCRJt9m4WvcK1xw0swIWR6jlmEjDjm0+qSJMUlb+1aZPlS7ig4za14RrU7b3WGd WSksYFTroi/JL9DkjiG4JafIfw9M/rvHQS78mRqYn7Xl8Pz4w9iZ+UdC/MMPkmb4 xF5ykUYzv70mQdLJ11gL79BPDup7HYyKt2NPtZ+rc3z9Mu6gHprZGIwZSVD+HyfT +ZIzZCR8gEMJGbQbl8M4aO+hYTzrX1Z9LherY5IsazMm63cqvkA4eEPhNAn8aW7j deWrrJhTjbtPE3/0v38YMGwh3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFZCngf IYoYpCrzKhWxfOlVvcH4MB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp YTRCeVM4M21jRDBRMWxmXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEa3ee6qLg/FeJ9lpWzRQpLz/OrqitcTl3QTxIVbZx22didp0C4Lr5 veblAhtFX4eCaIWP+6BGW1ZtcZ+XbQJ4RAoyGLPgNaEwKlYsQv+Hgdgkht6jikF1 0QiHnyLmB8q6AWF98jR7eErbcq8DMchERtBSnx1G0TD5+UNSzlKbvWy1iWwvHxa/ VCu18vtcFoD8DKrgj2syv1LAjiOwd/W+uC2FYcmVMyTVFNYvo/MJEpTGkrMidPbj n3PNyMVeVeab+tg3TiwaDF7ZLrDHVP6D2b9qKfyHwNr5vmaw3q4FAamkptr3Ivfc GJLmiQftvx3YaXCOT0nsH9CSoibZHR4r -----END CERTIFICATE-----Generated at Fri Apr 18 10:22:48 2025 by rpki-client