$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: O/4kujVQ/b6UHMzgQX2yYeT7eEUmDUordrt7kU27ec0= Subject key identifier: 78:2A:88:61:11:7C:B8:C8:F3:78:B4:F5:F8:F0:FE:2F:C7:74:5E:C7 Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 014E Signing time: Fri 25 Apr 2025 03:23:45 +0000 Manifest this update: Fri 25 Apr 2025 03:23:44 +0000 Manifest next update: Fri 02 May 2025 03:23:44 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: wXOrSCmOpV3jRKpc44H635ohPHZcTq6WriUW6KQgV2k=) 2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: hT9kfP+ZFoK6ZtvZIIqmgr1UkECM4lGeHTqxjZ5+Wc0=) 3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: Nm3Cq0H330hcq1ka7PepkHLo38lsxcixtabz9iT0KA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Apr 25 03:23:44 2025 GMT Not After : May 2 03:23:44 2025 GMT Subject: CN=680b0041-66b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:7f:70:c5:8d:21:46:ad:5f:9a:b5:0f:71: c5:9b:53:0a:8a:72:83:80:93:5e:af:62:33:dd:79: 3f:f8:b2:74:55:1d:f8:2e:35:c0:28:40:4d:c6:2d: ba:d1:08:e0:87:7c:dc:c7:36:07:c2:eb:dd:4a:d1: c5:c1:4d:03:4e:cb:d8:fe:65:0e:07:7a:81:8d:e8: 79:6a:ae:a0:43:a5:cc:4f:7c:03:de:1c:25:01:bf: 63:a8:a0:a9:bc:f2:f8:0c:da:df:e9:7b:66:41:e7: d9:01:d0:0d:73:e8:98:ad:86:6d:a2:0a:3e:b3:96: 52:90:ba:c4:d5:17:e9:dd:b1:ce:9a:dd:ed:37:bb: 5d:d8:a3:50:29:31:f7:47:7d:2e:77:92:06:c4:4e: 0f:cb:2f:10:6e:e8:60:79:d0:82:79:4a:de:6e:7d: 2b:1e:bb:7e:ed:40:97:24:9e:ca:4f:ef:0f:45:21: 1b:d2:40:7e:dd:62:a6:73:d8:eb:0e:02:cb:75:9c: cd:cf:95:21:88:18:bc:e5:18:c8:ed:fe:0b:c4:7a: 19:1a:09:b9:12:1b:e9:12:15:b4:cd:03:43:d0:90: 63:38:6b:73:f6:df:ea:c5:c2:0a:76:e3:58:47:87: 1b:5f:60:50:80:e5:2c:c3:83:86:ef:8c:a0:ff:74: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:88:61:11:7C:B8:C8:F3:78:B4:F5:F8:F0:FE:2F:C7:74:5E:C7 X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f8:d4:24:9a:ea:ec:50:9d:2c:94:a9:7a:37:39:b8:d4:b4: 36:53:8c:55:c0:69:09:8b:8e:ad:33:13:74:9c:0b:78:66:fc: 8b:5e:d4:01:60:50:8c:07:19:f3:eb:cf:f7:98:2a:15:1a:c6: c9:39:e0:9c:78:10:76:eb:f4:27:16:21:9e:c3:3a:a2:cc:4e: e9:4a:b0:84:2f:cb:17:29:be:29:20:5f:d9:80:a4:46:15:a6: 9e:2c:06:3d:8f:1f:67:4a:0a:8d:59:c2:34:2b:26:3e:27:bf: 73:8f:07:6d:83:5e:6c:6d:58:c2:0e:6b:4b:15:72:ac:61:56: d0:b5:91:bf:91:9d:31:99:9d:9a:67:68:61:f4:f1:f4:a3:db: 4e:4b:47:61:2b:5e:0a:7d:b5:81:fa:7e:87:ec:17:a6:48:05: 73:1e:93:90:c6:02:d1:e8:e7:22:0f:a9:1b:1b:a7:c4:ee:e9: 76:f2:24:2d:06:49:99:59:9a:57:81:46:8c:b8:81:a3:16:5c: 54:e0:5d:f2:91:3c:1f:56:c6:01:88:bd:1d:9b:be:39:20:dd: 14:04:25:fe:d9:33:81:13:85:b1:b1:c7:3c:c6:ea:45:16:b0: 4e:b6:24:7f:50:8f:f4:f4:eb:4f:0f:d0:a9:d1:59:42:e5:14: 34:36:df:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjUwNDI1MDMyMzQ0WhcNMjUwNTAyMDMyMzQ0WjAYMRYwFAYD VQQDEw02ODBiMDA0MS02NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNp/cMWNIUatX5q1D3HFm1MKinKDgJNer2Iz3Xk/+LJ0VR34LjXAKEBNxi26 0Qjgh3zcxzYHwuvdStHFwU0DTsvY/mUOB3qBjeh5aq6gQ6XMT3wD3hwlAb9jqKCp vPL4DNrf6XtmQefZAdANc+iYrYZtogo+s5ZSkLrE1Rfp3bHOmt3tN7td2KNQKTH3 R30ud5IGxE4Pyy8QbuhgedCCeUrebn0rHrt+7UCXJJ7KT+8PRSEb0kB+3WKmc9jr DgLLdZzNz5UhiBi85RjI7f4LxHoZGgm5EhvpEhW0zQND0JBjOGtz9t/qxcIKduNY R4cbX2BQgOUsw4OG74yg/3RJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgqiGER fLjI83i09fjw/i/HdF7HMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO+NQkmursUJ0slKl6Nzm41LQ2U4xVwGkJi46tMxN0nAt4ZvyLXtQB YFCMBxnz68/3mCoVGsbJOeCceBB26/QnFiGewzqizE7pSrCEL8sXKb4pIF/ZgKRG FaaeLAY9jx9nSgqNWcI0KyY+J79zjwdtg15sbVjCDmtLFXKsYVbQtZG/kZ0xmZ2a Z2hh9PH0o9tOS0dhK14KfbWB+n6H7BemSAVzHpOQxgLR6OciD6kbG6fE7ul28iQt BkmZWZpXgUaMuIGjFlxU4F3ykTwfVsYBiL0dm745IN0UBCX+2TOBE4Wxscc8xupF FrBOtiR/UI/09OtPD9Cp0VlC5RQ0Nt8s -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:06 2025 by rpki-client