$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: 0+C2lbR4P4F7RwGzKiXVcAtHl1liie9kEY3ATprakUw= Subject key identifier: F8:3C:8E:1C:83:C3:6C:94:3E:91:7D:AB:91:D0:9D:56:A3:AA:F5:E2 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 063A Signing time: Thu 24 Apr 2025 22:25:03 +0000 Manifest this update: Thu 24 Apr 2025 22:25:03 +0000 Manifest next update: Thu 01 May 2025 22:25:03 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: zVDwqI1+Z13rXqbvKoF2ZztWkFZ8AVgXQbvwqVaKE1s=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: Apr 24 22:25:03 2025 GMT Not After : May 1 22:25:03 2025 GMT Subject: CN=680aba3f-fb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:6c:37:03:0f:f6:ed:7d:1f:82:19:39:d3: 22:0c:fa:42:1b:7d:fe:5f:95:6e:26:25:41:11:84: f6:09:f8:de:52:60:b8:31:e8:11:42:0a:40:9d:ce: a8:fb:18:57:b7:b4:d6:1f:83:6f:bd:3b:58:92:b0: 02:c0:3e:8d:e1:37:05:9f:85:b4:7d:46:2c:1c:53: 1d:fe:9d:4a:1b:df:dd:15:77:cf:de:46:23:b5:3d: 86:a5:34:2a:6a:24:e0:d6:6b:ec:ef:9a:84:b7:39: 78:ca:2a:a7:15:34:0b:03:b9:2e:3e:08:6d:5e:99: bd:94:9a:61:8e:10:71:4e:d5:81:9f:40:c1:d4:14: c0:c6:1e:7e:63:04:61:9e:99:7a:87:a5:33:65:4e: c7:2f:e3:1a:c6:9e:9f:4c:e5:96:30:d3:9a:2a:7f: d5:09:ba:f7:6a:45:d3:b4:18:ce:86:09:92:6a:83: 71:58:8e:c1:4e:4b:15:05:48:d9:77:c7:26:b3:44: 62:4d:24:f8:80:dd:b3:88:d4:c2:6a:6b:a6:60:43: 05:66:fe:1b:ce:a3:0b:35:d9:ee:4b:a7:d2:1b:55: 04:bf:7f:fd:6e:6b:d7:0d:cf:29:b3:da:40:db:33: dc:13:b9:52:74:9d:63:48:55:3c:25:9c:cf:f2:e3: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:8E:1C:83:C3:6C:94:3E:91:7D:AB:91:D0:9D:56:A3:AA:F5:E2 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:36:9f:52:9a:d8:28:92:09:6d:6b:2e:23:45:13:c5:7a:dc: 48:64:0b:0e:9a:70:2b:14:92:09:7d:6b:a0:75:c0:95:92:b2: d8:18:59:fc:16:eb:78:64:0b:2c:2f:43:a1:49:da:99:47:4a: 65:fc:e9:99:57:f6:fb:e0:48:71:7c:fc:67:fb:88:c5:95:cb: 79:e3:2a:46:51:00:92:03:ff:89:a0:7e:47:ee:9a:e9:52:26: 62:3a:d8:e5:5a:d7:a2:f1:b6:f9:64:53:c3:49:c5:7c:c8:2b: 30:e8:4c:51:ff:7d:e8:d5:0d:f9:e3:3a:2a:1c:ad:5d:76:fd: 58:de:f5:8c:de:e9:ad:04:05:ea:9f:5f:04:b7:0b:8e:36:d9: e0:00:8a:67:b6:0b:86:88:24:d0:79:01:31:16:cb:99:e5:18: 3d:84:cd:11:c1:18:3b:d4:c5:3c:42:a9:17:d2:52:d8:e4:8b: b0:86:d6:a8:31:62:eb:7b:fd:b7:97:bd:9d:64:a0:76:56:f8: 19:23:37:39:a5:0e:50:d4:38:22:37:43:d9:87:6e:3e:f1:fe: 74:e8:7a:ba:82:3b:6c:0b:30:ed:10:55:d6:43:06:81:d2:8e: 90:c6:11:25:09:eb:4f:ca:47:7a:00:7c:f0:dd:a9:4f:df:a3: 61:6c:8e:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUwNDI0MjIyNTAzWhcNMjUwNTAxMjIyNTAzWjAYMRYwFAYD VQQDEw02ODBhYmEzZi1mYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDdsNwMP9u19H4IZOdMiDPpCG33+X5VuJiVBEYT2CfjeUmC4MegRQgpAnc6o +xhXt7TWH4NvvTtYkrACwD6N4TcFn4W0fUYsHFMd/p1KG9/dFXfP3kYjtT2GpTQq aiTg1mvs75qEtzl4yiqnFTQLA7kuPghtXpm9lJphjhBxTtWBn0DB1BTAxh5+YwRh npl6h6UzZU7HL+Maxp6fTOWWMNOaKn/VCbr3akXTtBjOhgmSaoNxWI7BTksVBUjZ d8cms0RiTST4gN2ziNTCamumYEMFZv4bzqMLNdnuS6fSG1UEv3/9bmvXDc8ps9pA 2zPcE7lSdJ1jSFU8JZzP8uOtowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg8jhyD w2yUPpF9q5HQnVajqvXiMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYNp9Smtgokgltay4jRRPFetxIZAsOmnArFJIJfWugdcCVkrLYGFn8 Fut4ZAssL0OhSdqZR0pl/OmZV/b74EhxfPxn+4jFlct54ypGUQCSA/+JoH5H7prp UiZiOtjlWtei8bb5ZFPDScV8yCsw6ExR/33o1Q354zoqHK1ddv1Y3vWM3umtBAXq n18EtwuONtngAIpntguGiCTQeQExFsuZ5Rg9hM0RwRg71MU8QqkX0lLY5Iuwhtao MWLre/23l72dZKB2VvgZIzc5pQ5Q1DgiN0PZh24+8f506Hq6gjtsCzDtEFXWQwaB 0o6QxhElCetPykd6AHzw3alP36NhbI7H -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:13 2025 by rpki-client