$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: aVDmUy8zQE/tmqvuwuFEj+IK1nBQjEX04AacKL6fcSM= Subject key identifier: DA:75:2E:FF:CE:0A:06:B2:40:AC:18:22:3B:CB:D0:F0:6D:92:65:0B Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BC0 Signing time: Thu 24 Apr 2025 18:47:44 +0000 Manifest this update: Thu 24 Apr 2025 18:47:43 +0000 Manifest next update: Thu 01 May 2025 18:47:43 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: gnjy4chR5osSGji2nd+k3G92sl5bXgNuptrY86JrgzQ=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Apr 24 18:47:43 2025 GMT Not After : May 1 18:47:43 2025 GMT Subject: CN=680a8750-7679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:46:b4:e2:60:c4:42:f4:19:88:8e:8e:c3: 57:ae:e2:62:db:b6:4f:e3:14:79:bf:6c:51:0d:01: f1:86:3f:07:93:4e:28:5f:ab:12:ba:a5:f1:bd:1c: 75:2d:3a:19:41:f0:4b:31:10:d8:91:dd:88:c5:0b: bc:7b:f6:1e:b2:1c:4f:36:8a:b0:76:dc:94:87:9a: e7:64:68:65:fe:78:98:0b:f8:46:08:2e:69:fb:d5: af:fa:f6:a1:e0:da:83:2f:24:60:e5:2e:a9:d6:8d: 7e:c5:d1:3b:7f:46:c3:11:5d:a8:69:84:35:b9:e6: a3:ae:ba:74:8c:a2:79:38:c4:d7:7b:53:7b:b5:1e: 26:58:b8:fb:4d:b7:f9:eb:12:81:b5:36:b5:1c:82: aa:71:4b:90:f1:ee:e5:bc:10:6b:e9:28:1c:a7:78: 6c:25:d9:15:46:56:27:a3:36:66:67:8f:44:34:33: 62:10:ad:14:81:00:0f:33:b0:51:6c:8b:29:e7:8d: 18:0e:29:01:99:5d:01:13:ca:10:43:61:4c:5c:a9: 3a:75:fc:45:be:36:87:6e:d5:74:9d:83:e6:3d:55: ab:5b:41:6a:29:a7:61:b1:cc:f9:de:24:81:a5:cc: 32:10:7a:6f:ea:d8:f9:a1:51:30:00:be:52:64:22: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:2E:FF:CE:0A:06:B2:40:AC:18:22:3B:CB:D0:F0:6D:92:65:0B X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8f:a2:46:83:9f:7b:d9:14:c5:14:91:37:ae:da:42:ba:e8: cd:e1:44:88:07:9c:cc:ce:30:dd:5a:27:11:e2:56:57:e9:0f: e3:4f:f2:e9:96:0c:46:88:bc:36:ec:3b:05:82:58:0b:b2:c7: 85:d0:69:88:f5:12:a0:99:de:5d:9a:0c:8f:a4:26:a0:fd:90: 2c:48:c3:e6:8d:f3:90:32:3b:63:80:7e:b1:fd:b0:7f:e0:6e: 27:f1:48:79:35:97:7f:28:2f:ca:ab:c5:06:33:f0:81:48:f7: 1a:eb:b8:28:b8:34:23:79:4f:07:e1:ee:20:c2:fc:14:59:34: dc:87:81:5b:9d:dd:be:9f:63:3d:45:91:20:e2:f0:63:53:da: f7:e6:78:34:69:74:f0:97:7c:10:9c:b6:c2:a0:a2:85:a8:e0: a1:d8:d4:dd:4c:60:6c:9a:85:61:eb:e8:83:40:30:22:f5:13: d5:fb:f4:c8:61:a1:14:16:3f:f0:32:56:9f:b8:67:b6:c8:e7: eb:da:fc:ba:73:ce:46:b0:6e:96:9e:45:f8:ef:66:e0:1e:02: 20:68:9f:52:4e:b7:d3:6a:99:7e:4e:80:e3:db:87:01:7c:ff: 5f:f6:6d:2b:91:f6:75:98:be:ea:eb:95:6d:bb:d9:65:cf:76: e7:13:9d:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNDI0MTg0NzQzWhcNMjUwNTAxMTg0NzQzWjAYMRYwFAYD VQQDEw02ODBhODc1MC03Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk9GtOJgxEL0GYiOjsNXruJi27ZP4xR5v2xRDQHxhj8Hk04oX6sSuqXxvRx1 LToZQfBLMRDYkd2IxQu8e/YeshxPNoqwdtyUh5rnZGhl/niYC/hGCC5p+9Wv+vah 4NqDLyRg5S6p1o1+xdE7f0bDEV2oaYQ1ueajrrp0jKJ5OMTXe1N7tR4mWLj7Tbf5 6xKBtTa1HIKqcUuQ8e7lvBBr6Sgcp3hsJdkVRlYnozZmZ49ENDNiEK0UgQAPM7BR bIsp540YDikBmV0BE8oQQ2FMXKk6dfxFvjaHbtV0nYPmPVWrW0FqKadhscz53iSB pcwyEHpv6tj5oVEwAL5SZCI3kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp1Lv/O CgayQKwYIjvL0PBtkmULMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUj6JGg5972RTFFJE3rtpCuujN4USIB5zMzjDdWicR4lZX6Q/jT/Lp lgxGiLw27DsFglgLsseF0GmI9RKgmd5dmgyPpCag/ZAsSMPmjfOQMjtjgH6x/bB/ 4G4n8Uh5NZd/KC/Kq8UGM/CBSPca67gouDQjeU8H4e4gwvwUWTTch4Fbnd2+n2M9 RZEg4vBjU9r35ng0aXTwl3wQnLbCoKKFqOCh2NTdTGBsmoVh6+iDQDAi9RPV+/TI YaEUFj/wMlafuGe2yOfr2vy6c85GsG6WnkX472bgHgIgaJ9STrfTapl+ToDj24cB fP9f9m0rkfZ1mL7q65Vtu9llz3bnE51e -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:12 2025 by rpki-client