$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: 6JyPWggLUTe1Gjbx7wv9M6SkWd2UkS6JrBpOnyBaPoc= Subject key identifier: 64:5B:BB:A3:FE:00:7D:63:F8:F7:1B:44:60:D9:D4:1E:48:D4:2A:13 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0B49 Signing time: Thu 24 Apr 2025 19:01:56 +0000 Manifest this update: Thu 24 Apr 2025 19:01:55 +0000 Manifest next update: Thu 01 May 2025 19:01:55 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: lGHg/MmuVsh6yBE3Us5nuFl/m9Oo2Zcz8+2eledRJ94=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Apr 24 19:01:55 2025 GMT Not After : May 1 19:01:55 2025 GMT Subject: CN=680a8aa3-dd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:a8:7f:5e:f3:0b:1f:99:a8:d3:ce:43:ba: f0:df:9e:f2:f6:27:55:d2:2e:f9:29:33:c4:b8:40: 48:21:cf:41:6b:1d:6e:cf:d7:a2:6d:3d:a8:a9:0d: 88:77:78:9b:8a:c7:5b:64:73:d9:48:c9:54:ca:87: da:b3:79:b3:67:a9:78:54:90:65:e1:ac:81:e5:9c: 2b:78:b8:cb:fc:c6:5e:9e:a8:e1:62:8a:33:71:d0: 98:14:94:9f:99:b9:29:63:8c:59:f6:ad:07:ed:51: 09:94:b6:81:48:14:35:ae:3a:75:81:7e:39:0f:58: a8:af:72:7f:c4:64:27:19:9c:4e:96:86:2c:58:0e: 3e:6b:4e:79:3a:6b:97:62:c6:fb:17:57:c9:76:0f: 2b:2a:9a:71:db:63:f5:66:75:8f:04:87:77:00:3c: cb:70:9d:40:d9:68:a3:ec:f3:2e:83:18:fe:69:a8: fa:37:cc:c4:38:b4:13:40:3c:45:f0:77:e7:ca:94: 66:00:5c:03:f6:af:49:02:cf:36:2a:b1:9a:a5:78: 26:31:1f:91:04:20:86:50:e1:12:9b:ed:4d:d6:4d: 84:42:03:2c:05:ab:b9:20:20:ea:e2:b1:3a:a7:06: 1d:b5:f2:c7:dc:f8:81:b9:9e:83:9d:95:0d:1e:66: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:BB:A3:FE:00:7D:63:F8:F7:1B:44:60:D9:D4:1E:48:D4:2A:13 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1b:24:f2:31:18:8d:59:a7:d6:19:0d:73:66:74:f1:b6:b3: 11:ad:be:4d:39:34:8e:da:16:93:b3:97:7e:9d:9e:41:c9:2e: c0:53:72:d5:9e:ef:13:aa:3d:bb:82:d1:2a:37:0d:35:9d:e3: 68:ef:bc:25:9e:a5:66:70:7e:ea:46:ef:77:a2:00:45:81:8c: 4d:c3:ca:47:52:ae:6a:2a:00:72:75:eb:0c:30:cf:94:f0:40: 97:47:85:82:bb:b1:4f:ba:8d:e7:d5:95:a5:b0:29:a4:54:72: 4f:5f:90:b4:d1:4c:d5:f6:f2:ce:02:d7:b2:d6:38:88:ff:d0: 02:bb:9c:9e:cb:83:20:bd:48:91:70:d1:17:e8:55:c4:ef:7e: 46:e3:4d:76:da:cc:84:e5:7b:13:dd:6a:9d:63:e5:5a:cb:7c: 76:a2:9f:3d:07:09:8c:7e:f7:93:a6:7b:12:c3:c0:74:81:62: e8:83:54:9d:d3:77:65:40:13:d4:23:a0:b8:f2:17:58:21:06: fc:ee:45:6e:99:4a:c2:81:e4:4f:b9:c0:a7:eb:7e:a1:38:01: 94:c9:11:6a:24:4d:88:ff:6e:b6:3f:a5:78:03:7e:8d:24:db: f5:ec:c3:59:bc:42:60:37:9a:7d:9e:1b:f0:4d:1a:c0:7e:d5: 3d:5d:bd:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUwNDI0MTkwMTU1WhcNMjUwNTAxMTkwMTU1WjAYMRYwFAYD VQQDEw02ODBhOGFhMy1kZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kWof17zCx+ZqNPOQ7rw357y9idV0i75KTPEuEBIIc9Bax1uz9eibT2oqQ2I d3ibisdbZHPZSMlUyofas3mzZ6l4VJBl4ayB5ZwreLjL/MZenqjhYoozcdCYFJSf mbkpY4xZ9q0H7VEJlLaBSBQ1rjp1gX45D1ior3J/xGQnGZxOloYsWA4+a055OmuX Ysb7F1fJdg8rKppx22P1ZnWPBId3ADzLcJ1A2Wij7PMugxj+aaj6N8zEOLQTQDxF 8HfnypRmAFwD9q9JAs82KrGapXgmMR+RBCCGUOESm+1N1k2EQgMsBau5ICDq4rE6 pwYdtfLH3PiBuZ6DnZUNHmYsQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRbu6P+ AH1j+PcbRGDZ1B5I1CoTMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQGyTyMRiNWafWGQ1zZnTxtrMRrb5NOTSO2haTs5d+nZ5ByS7AU3LV nu8Tqj27gtEqNw01neNo77wlnqVmcH7qRu93ogBFgYxNw8pHUq5qKgBydesMMM+U 8ECXR4WCu7FPuo3n1ZWlsCmkVHJPX5C00UzV9vLOAtey1jiI/9ACu5yey4MgvUiR cNEX6FXE735G40122syE5XsT3WqdY+Vay3x2op89BwmMfveTpnsSw8B0gWLog1Sd 03dlQBPUI6C48hdYIQb87kVumUrCgeRPucCn636hOAGUyRFqJE2I/262P6V4A36N JNv17MNZvEJgN5p9nhvwTRrAftU9Xb2i -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:31 2025 by rpki-client