$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: jZaLTIvBcgeO4jjT9GtNS/mUSfDrJqwSDpQNaVX9SJA= Subject key identifier: 5C:49:22:5F:B1:12:9F:87:B4:FB:26:6C:DB:FE:9D:FD:2A:5E:51:10 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BAA Signing time: Wed 12 Mar 2025 18:44:01 +0000 Manifest this update: Wed 12 Mar 2025 18:44:00 +0000 Manifest next update: Wed 19 Mar 2025 18:44:00 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 9/8WmikI6RokOx2DjRSQDYeEk31/5+78lPy7NodUVDg=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 18:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9 Validity Not Before: Mar 12 18:44:00 2025 GMT Not After : Mar 19 18:44:00 2025 GMT Subject: CN=67d1d5f0-abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ad:2a:ac:b8:65:70:c0:37:07:d0:00:d1:f2: 70:c0:d3:87:ab:4f:cb:2b:e6:f5:ab:6d:e5:fa:18: 81:c9:cb:6b:d4:29:c2:72:dc:96:f2:62:7b:ec:cd: 00:5a:af:cf:29:c1:4e:96:26:3b:6d:90:0e:a5:6d: 48:30:d0:c6:da:2b:93:9d:36:18:3f:50:f5:05:e0: 6c:b0:c5:c6:c4:30:de:36:95:ec:91:97:38:c5:4d: bb:fd:6c:ec:e4:48:a2:b3:77:57:33:28:59:66:f5: 46:ad:44:f5:d1:71:da:63:81:1a:f5:b9:32:5b:16: 48:d8:3e:ef:02:69:23:28:f7:e1:66:c8:79:3a:b4: e9:37:f8:de:e3:f4:cf:81:73:12:2e:f2:a7:2d:8a: 00:0e:8e:e2:e9:4d:7d:db:49:3d:f1:1c:fa:0e:27: cf:b3:38:ef:38:87:e6:dc:50:2c:16:b9:e8:05:76: e7:05:ad:ab:fd:65:73:b3:ba:f8:48:25:b3:e9:06: 1a:70:1c:bc:a3:e6:c9:06:64:85:0e:b8:3c:3a:30: ad:46:a9:1a:69:02:26:bf:2a:63:21:9b:81:d5:73: 3d:61:c1:96:6d:8a:f5:e2:9a:13:50:1c:7b:66:0d: e2:09:07:44:79:31:ca:88:ef:e4:72:e8:f2:d6:fa: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:22:5F:B1:12:9F:87:B4:FB:26:6C:DB:FE:9D:FD:2A:5E:51:10 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:6b:44:24:b1:e5:12:98:41:12:10:8a:47:92:b0:82:2d:25: bf:24:f1:8d:89:12:7d:26:80:14:82:0e:fc:d3:88:0d:f5:22: b5:9e:59:5c:35:0c:ae:49:e6:00:c4:79:c4:17:17:8c:7e:c5: 5a:a6:93:1b:81:ef:5c:22:c0:ea:a5:da:da:dd:bf:f3:12:8f: 2e:16:22:fc:9d:40:52:8e:30:23:49:18:fd:d7:6b:37:d0:a1: 4c:a1:a4:3f:51:d6:a6:ab:d0:8c:cc:88:ec:22:03:47:4c:fd: db:fd:ef:33:5d:15:de:3a:8a:f3:b9:41:a9:e5:3b:18:a0:11: 36:05:75:83:06:40:c9:f0:09:30:a3:b9:98:9e:61:b2:3d:ba: e8:fc:6e:5a:78:db:ea:bb:e3:ee:6e:d9:6e:2f:a4:de:12:81: fc:5b:3e:7c:9c:87:23:86:3d:9f:68:02:bb:5f:e1:ea:fe:51: e9:24:a3:03:e9:7e:5a:55:c0:50:c5:2d:b9:f8:00:89:7a:e1: dc:e1:29:72:76:77:f3:a4:b1:2d:1c:fd:f8:f6:5a:1b:b5:ba: 36:8a:a2:78:ba:e1:0a:f2:f5:2c:24:10:42:3d:35:7c:60:01: 06:6f:22:a4:85:de:45:01:60:dd:ce:b1:9c:74:29:48:8a:96: fc:4d:88:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwMzEyMTg0NDAwWhcNMjUwMzE5MTg0NDAwWjAYMRYwFAYD VQQDEw02N2QxZDVmMC1hYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/q0qrLhlcMA3B9AA0fJwwNOHq0/LK+b1q23l+hiByctr1CnCctyW8mJ77M0A Wq/PKcFOliY7bZAOpW1IMNDG2iuTnTYYP1D1BeBssMXGxDDeNpXskZc4xU27/Wzs 5Eiis3dXMyhZZvVGrUT10XHaY4Ea9bkyWxZI2D7vAmkjKPfhZsh5OrTpN/je4/TP gXMSLvKnLYoADo7i6U1920k98Rz6DifPszjvOIfm3FAsFrnoBXbnBa2r/WVzs7r4 SCWz6QYacBy8o+bJBmSFDrg8OjCtRqkaaQImvypjIZuB1XM9YcGWbYr14poTUBx7 Zg3iCQdEeTHKiO/kcujy1vpsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxJIl+x Ep+HtPsmbNv+nf0qXlEQMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCra0QkseUSmEESEIpHkrCCLSW/JPGNiRJ9JoAUgg7804gN9SK1nllc NQyuSeYAxHnEFxeMfsVappMbge9cIsDqpdra3b/zEo8uFiL8nUBSjjAjSRj912s3 0KFMoaQ/Udamq9CMzIjsIgNHTP3b/e8zXRXeOorzuUGp5TsYoBE2BXWDBkDJ8Akw o7mYnmGyPbro/G5aeNvqu+PubtluL6TeEoH8Wz58nIcjhj2faAK7X+Hq/lHpJKMD 6X5aVcBQxS25+ACJeuHc4SlydnfzpLEtHP349lobtbo2iqJ4uuEK8vUsJBBCPTV8 YAEGbyKkhd5FAWDdzrGcdClIipb8TYib -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:04 2025 by rpki-client