$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: VNz0e+wxjexAVCtmMZwUKjnFdZdV3BuNb+vOF6+MIjw= Subject key identifier: 36:7A:CE:4A:C4:32:10:94:0A:C8:33:1B:C3:74:DC:67:99:11:45:61 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0276 Signing time: Fri 25 Apr 2025 01:25:37 +0000 Manifest this update: Fri 25 Apr 2025 01:25:36 +0000 Manifest next update: Fri 02 May 2025 01:25:36 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: TMllKVjXIXTeg8nkdHU9lDeHZCfV5fSGVmuOo88vmsM=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: B23DJLnAzZgh7nzdSdjLo0fLxBwNcdmZ5yMaCdKP/mk=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: jVg82OUaVePNyDCOCMIUFjDkj+15X58I4cwm4Uj+6+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Apr 25 01:25:36 2025 GMT Not After : May 2 01:25:36 2025 GMT Subject: CN=680ae490-15e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:0b:5b:dc:27:e7:07:ba:29:e4:97:4d:4b: 3c:48:35:c8:4c:95:d4:65:25:82:ea:e1:56:91:bd: 8f:e2:4b:a7:fc:45:99:68:56:77:f8:5e:4c:f4:ea: d9:3e:b8:c3:86:c5:f2:5b:ac:ec:b3:bc:0a:cb:21: 86:0b:17:35:8a:b4:b3:f7:3a:6d:7b:d9:52:b6:04: de:77:3d:6e:4b:48:ff:88:c5:28:dc:d5:b6:3a:2e: a5:1f:e9:d1:0f:98:61:c3:d1:22:53:c2:eb:59:0e: 7c:5c:e3:5a:79:cc:4a:a9:2c:11:a4:e1:5e:bd:8f: bf:5c:74:65:7d:fa:76:d4:c0:40:00:a3:ec:8d:29: f8:96:60:7e:31:99:c9:ee:ad:a4:76:af:b1:8a:f0: 15:74:d1:6e:d9:c0:62:09:cc:84:70:3d:0d:53:c6: dc:9e:c0:69:d9:a9:71:51:6a:c9:de:79:80:57:28: 22:68:45:92:f3:ac:e1:18:56:7f:13:f1:70:c5:21: 4d:93:c0:2f:ee:4c:72:39:02:14:44:13:20:2a:c5: 8f:96:b0:b9:19:5c:2d:3b:08:44:7e:e7:a7:2c:a4: e6:07:55:25:99:c7:42:bd:a2:23:ee:27:ab:26:a9: 7b:33:05:3f:07:f1:b8:c8:33:d2:a1:b7:7b:66:90: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7A:CE:4A:C4:32:10:94:0A:C8:33:1B:C3:74:DC:67:99:11:45:61 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:82:fa:73:21:32:0a:90:65:3a:f5:13:a3:de:4b:95:b2:93: d5:36:82:99:77:60:d4:a9:85:0f:90:d5:a8:97:36:9c:8d:06: 02:ea:39:8f:6f:3f:e9:e8:8d:16:f0:07:ba:28:e9:08:c7:bc: 9e:59:b2:3a:c9:81:b4:68:9c:48:76:46:03:12:b7:f3:db:39: 88:01:f2:43:54:aa:f1:31:a2:08:c0:90:86:d4:32:29:98:c4: e3:4e:75:5a:cc:91:65:c0:5e:dc:31:f8:fe:cc:98:07:1e:6d: 20:95:44:2d:de:dc:18:8d:3d:3b:a7:5b:2d:bb:b2:3b:f5:e9: 5d:58:07:b0:8e:3a:46:31:60:e0:07:14:ed:6d:b8:48:bf:28: 98:c8:6f:89:15:58:23:b6:9f:40:13:ab:92:57:53:32:f1:a6: 3f:b6:9f:9f:af:14:c5:00:d2:69:75:2c:c9:20:f8:09:d4:5c: fd:31:e5:2d:86:47:4a:8e:67:da:78:44:a3:fe:50:f3:5e:de: 2d:b5:46:37:92:a8:91:b8:6f:75:11:bd:3d:71:bd:11:55:b2: 2b:d1:87:7f:88:72:19:4e:14:f1:6e:aa:de:48:58:2a:e4:5f: bc:cd:dd:21:ae:d7:62:63:8a:44:87:b4:ff:38:3a:4f:f5:7c: 30:b6:b9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUwNDI1MDEyNTM2WhcNMjUwNTAyMDEyNTM2WjAYMRYwFAYD VQQDEw02ODBhZTQ5MC0xNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8sLW9wn5we6KeSXTUs8SDXITJXUZSWC6uFWkb2P4kun/EWZaFZ3+F5M9OrZ PrjDhsXyW6zss7wKyyGGCxc1irSz9zpte9lStgTedz1uS0j/iMUo3NW2Oi6lH+nR D5hhw9EiU8LrWQ58XONaecxKqSwRpOFevY+/XHRlffp21MBAAKPsjSn4lmB+MZnJ 7q2kdq+xivAVdNFu2cBiCcyEcD0NU8bcnsBp2alxUWrJ3nmAVygiaEWS86zhGFZ/ E/FwxSFNk8Av7kxyOQIURBMgKsWPlrC5GVwtOwhEfuenLKTmB1UlmcdCvaIj7ier Jql7MwU/B/G4yDPSobd7ZpC2swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ6zkrE MhCUCsgzG8N03GeZEUVhMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1gvpzITIKkGU69ROj3kuVspPVNoKZd2DUqYUPkNWolzacjQYC6jmP bz/p6I0W8Ae6KOkIx7yeWbI6yYG0aJxIdkYDErfz2zmIAfJDVKrxMaIIwJCG1DIp mMTjTnVazJFlwF7cMfj+zJgHHm0glUQt3twYjT07p1stu7I79eldWAewjjpGMWDg BxTtbbhIvyiYyG+JFVgjtp9AE6uSV1My8aY/tp+frxTFANJpdSzJIPgJ1Fz9MeUt hkdKjmfaeESj/lDzXt4ttUY3kqiRuG91Eb09cb0RVbIr0Yd/iHIZThTxbqreSFgq 5F+8zd0hrtdiY4pEh7T/ODpP9Xwwtrmu -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:22 2025 by rpki-client