$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: llIHDcWW111KvXK7Zx1qPIQI72PCj4PjG0UoxCCSLkE= Subject key identifier: E8:2A:AF:B2:EE:11:7A:DE:1B:F1:1A:EE:FD:3C:E6:54:00:EA:39:10 Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 0196 Signing time: Fri 25 Apr 2025 02:34:08 +0000 Manifest this update: Fri 25 Apr 2025 02:34:07 +0000 Manifest next update: Fri 02 May 2025 02:34:07 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: IRcMPvsKubBDfqr6Muksnbe09rWljyqgpiYl3LNSRC4=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: Apr 25 02:34:07 2025 GMT Not After : May 2 02:34:07 2025 GMT Subject: CN=680af49f-dc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:d3:fe:e7:37:8c:3f:bf:dd:90:71:fe:16: 06:83:2d:17:19:a6:33:c1:a8:42:98:bb:a1:d4:b8: 99:2e:b1:a3:7e:dd:12:87:1e:83:58:e6:3c:21:07: 65:71:28:5d:d7:97:48:c4:87:4c:c7:85:98:0b:98: 5a:49:f2:26:f7:82:26:95:b2:5f:cf:c6:8f:8a:04: dd:1b:1a:24:87:7c:4d:a6:47:31:63:a0:8a:75:cd: 62:f1:c1:bc:6d:28:66:49:c8:7f:ea:b4:57:91:7b: 20:6d:26:8f:89:db:71:71:73:4a:4b:9c:4d:ad:c6: 92:3b:84:c8:26:fc:37:fa:92:59:6e:11:c9:09:39: d3:7d:8b:94:2c:b0:78:6c:58:2d:c4:17:f2:b2:62: fd:a0:ff:0f:96:9a:a9:61:b1:c9:32:f3:ed:19:37: 46:6b:42:38:9a:20:80:54:b2:ff:c5:c2:3c:0f:68: 80:19:6f:80:e1:5e:bf:d6:f8:30:5a:b1:b4:ec:06: b6:be:f4:c2:3c:95:22:e3:76:c8:81:b0:4d:a9:7b: 86:a6:54:06:54:84:84:f4:08:e7:30:e6:f0:ff:85: 73:00:9e:a7:d1:cd:84:11:64:29:50:ca:bb:95:d4: 32:ee:c0:89:11:eb:e7:29:52:eb:8f:f1:8a:77:9b: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:AF:B2:EE:11:7A:DE:1B:F1:1A:EE:FD:3C:E6:54:00:EA:39:10 X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2d:60:7d:18:8b:8e:6a:39:fb:05:29:05:37:a4:bd:65:a6: a6:b3:9f:fd:b2:26:2c:d8:04:1b:d7:01:13:e3:88:82:9e:9a: a9:74:23:11:44:16:c6:93:f4:e0:c5:cd:70:14:ee:6c:49:72: 68:52:51:a3:37:46:71:e5:e1:77:7f:7f:3f:30:89:d8:31:65: 9e:56:3f:7f:e8:b5:3a:86:6e:11:ab:29:4f:70:84:4f:f1:8b: 05:c9:f2:24:c4:4a:17:0b:97:5c:26:ab:8b:e3:40:b5:14:e2: fa:5c:5d:be:b0:27:f8:cb:31:19:07:aa:98:61:57:3d:8d:2b: f5:11:75:e1:17:1d:8e:57:83:8b:e8:b7:62:ab:d3:26:e5:cb: dc:5c:5a:d6:78:2d:fc:da:2e:df:82:d0:55:f4:e1:4a:66:6e: d8:b0:09:e1:5b:d2:da:fe:2b:c2:d5:c5:47:6d:0e:ca:2a:4a: 88:ad:aa:99:27:c6:cc:23:a0:33:e7:17:1c:25:51:39:7c:ee: 15:59:6e:2a:00:42:62:4e:d0:3e:c9:5b:29:1a:df:44:64:12: ff:8e:35:ff:30:e9:89:20:be:6c:51:ce:6b:52:73:9a:f4:66: 83:32:6a:6a:30:6d:5c:60:81:38:c3:d9:49:59:6c:62:fd:60: 5f:f7:57:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwNDI1MDIzNDA3WhcNMjUwNTAyMDIzNDA3WjAYMRYwFAYD VQQDEw02ODBhZjQ5Zi1kYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG7T/uc3jD+/3ZBx/hYGgy0XGaYzwahCmLuh1LiZLrGjft0Shx6DWOY8IQdl cShd15dIxIdMx4WYC5haSfIm94ImlbJfz8aPigTdGxokh3xNpkcxY6CKdc1i8cG8 bShmSch/6rRXkXsgbSaPidtxcXNKS5xNrcaSO4TIJvw3+pJZbhHJCTnTfYuULLB4 bFgtxBfysmL9oP8PlpqpYbHJMvPtGTdGa0I4miCAVLL/xcI8D2iAGW+A4V6/1vgw WrG07Aa2vvTCPJUi43bIgbBNqXuGplQGVISE9AjnMObw/4VzAJ6n0c2EEWQpUMq7 ldQy7sCJEevnKVLrj/GKd5uVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgqr7Lu EXreG/Ea7v085lQA6jkQMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKLWB9GIuOajn7BSkFN6S9Zaams5/9siYs2AQb1wET44iCnpqpdCMR RBbGk/Tgxc1wFO5sSXJoUlGjN0Zx5eF3f38/MInYMWWeVj9/6LU6hm4RqylPcIRP 8YsFyfIkxEoXC5dcJquL40C1FOL6XF2+sCf4yzEZB6qYYVc9jSv1EXXhFx2OV4OL 6Ldiq9Mm5cvcXFrWeC382i7fgtBV9OFKZm7YsAnhW9La/ivC1cVHbQ7KKkqIraqZ J8bMI6Az5xccJVE5fO4VWW4qAEJiTtA+yVspGt9EZBL/jjX/MOmJIL5sUc5rUnOa 9GaDMmpqMG1cYIE4w9lJWWxi/WBf91eY -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:07 2025 by rpki-client