$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: wib/ud0Ab58VcNExd8QZKerC/7ALRwt2eD9vlgr2jHo= Subject key identifier: 09:87:D6:12:A6:1E:E2:A3:3F:81:EE:7E:31:8D:F3:1D:FC:13:73:04 Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0B9F Signing time: Thu 24 Apr 2025 18:53:18 +0000 Manifest this update: Thu 24 Apr 2025 18:53:17 +0000 Manifest next update: Thu 01 May 2025 18:53:17 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: yRNAmofhdOcHJJ2mbbqaYI/sEmVAfd0Ol2xvDyGwSAc=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Apr 24 18:53:17 2025 GMT Not After : May 1 18:53:17 2025 GMT Subject: CN=680a889e-7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:23:1d:13:2d:84:b6:c5:20:63:d5:75:56: 78:44:37:16:39:2f:5b:31:94:21:bd:2d:74:7d:9c: 06:f1:be:41:a6:3e:37:02:5c:2c:5e:31:3a:c5:19: 8d:00:21:68:43:a7:9a:81:b5:cc:5e:3f:03:74:48: 9f:51:f0:fb:77:29:ec:8e:2e:e7:34:82:d1:4f:22: 84:4e:cc:3d:39:4c:f3:84:a1:c9:50:a5:15:58:d2: b0:f9:46:7a:9b:7a:1f:96:84:70:4e:55:9a:14:be: 05:a0:e0:3e:ae:53:43:8a:1c:dc:f6:ba:71:85:e8: 55:81:9f:30:0c:77:e9:e2:e1:cf:f1:22:2a:5a:a2: 57:35:af:4f:70:83:08:cc:b6:da:9f:56:74:4a:3d: 2d:df:ae:24:d2:35:57:86:c2:82:48:34:09:ff:e8: 2c:b5:2a:b4:89:7c:d8:9e:f2:32:8a:71:be:7d:17: c4:4b:9f:f5:3a:7f:7e:19:d4:c6:cb:36:97:6b:74: 96:15:fc:38:34:8f:05:69:43:b7:04:f8:d8:f0:f6: b2:28:84:47:15:cf:56:a8:74:ad:23:9d:dd:dd:9f: ab:b7:83:3b:56:28:31:c7:ef:7b:84:b5:fe:2a:76: 2d:1d:5d:34:2f:90:00:06:24:7f:7a:90:dd:9e:8b: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:87:D6:12:A6:1E:E2:A3:3F:81:EE:7E:31:8D:F3:1D:FC:13:73:04 X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b3:51:c7:42:9f:23:15:ea:7d:d1:cd:1b:cd:86:7a:0b:4e: ea:fc:4d:69:de:f1:d0:12:63:8e:d9:cb:a2:a9:99:11:ac:f5: d6:3c:0e:bc:f8:72:b8:a5:93:e5:c4:f8:8e:5e:90:56:89:10: 2d:29:c8:f8:2a:8e:de:22:d9:1e:20:b7:18:f9:72:46:48:cc: 3f:7b:4b:91:11:35:4f:b2:66:a0:be:cf:f3:8f:50:c4:a3:90: 2a:23:fd:ae:37:2f:02:b2:a7:9d:df:d1:c5:dd:0d:60:58:b4: 6e:36:8f:90:16:ca:a5:08:d9:27:6f:e0:8d:14:1c:30:6c:44: e5:d8:ad:a5:ff:c7:00:8c:00:a8:9a:33:3a:59:78:28:f4:eb: 48:ab:7c:43:1d:d6:e7:cf:3e:3a:b7:af:4c:39:08:5a:16:1d: c2:c7:21:06:32:5e:3b:03:a8:54:5a:46:1f:40:d8:f8:05:63: ec:b3:04:7e:a8:9f:44:3f:49:5d:ac:1c:08:23:ef:11:d4:4c: 96:64:de:e2:16:c3:1e:86:67:9f:70:52:82:fb:9e:40:be:76: 40:7f:22:59:b7:f5:60:6e:fa:f4:92:82:3a:de:77:67:74:88: 95:df:89:d6:dc:2b:ba:41:9b:12:1c:34:19:3b:55:5e:14:8f: f2:ac:a8:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUwNDI0MTg1MzE3WhcNMjUwNTAxMTg1MzE3WjAYMRYwFAYD VQQDEw02ODBhODg5ZS03Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC4jHRMthLbFIGPVdVZ4RDcWOS9bMZQhvS10fZwG8b5Bpj43AlwsXjE6xRmN ACFoQ6eagbXMXj8DdEifUfD7dynsji7nNILRTyKETsw9OUzzhKHJUKUVWNKw+UZ6 m3ofloRwTlWaFL4FoOA+rlNDihzc9rpxhehVgZ8wDHfp4uHP8SIqWqJXNa9PcIMI zLban1Z0Sj0t364k0jVXhsKCSDQJ/+gstSq0iXzYnvIyinG+fRfES5/1On9+GdTG yzaXa3SWFfw4NI8FaUO3BPjY8PayKIRHFc9WqHStI53d3Z+rt4M7Vigxx+97hLX+ KnYtHV00L5AABiR/epDdnotOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmH1hKm HuKjP4HufjGN8x38E3MEMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCns1HHQp8jFep90c0bzYZ6C07q/E1p3vHQEmOO2cuiqZkRrPXWPA68 +HK4pZPlxPiOXpBWiRAtKcj4Ko7eItkeILcY+XJGSMw/e0uRETVPsmagvs/zj1DE o5AqI/2uNy8Csqed39HF3Q1gWLRuNo+QFsqlCNknb+CNFBwwbETl2K2l/8cAjACo mjM6WXgo9OtIq3xDHdbnzz46t69MOQhaFh3CxyEGMl47A6hUWkYfQNj4BWPsswR+ qJ9EP0ldrBwII+8R1EyWZN7iFsMehmefcFKC+55AvnZAfyJZt/Vgbvr0koI63ndn dIiV34nW3Cu6QZsSHDQZO1VeFI/yrKiv -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:46 2025 by rpki-client