$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: jUqBAes5irRrGjE/UareTRasijH2Huq+tq4Ec3T12zY= Subject key identifier: 8B:04:CB:2B:40:54:5B:2A:04:26:62:F2:49:93:77:91:3C:D4:C8:6B Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 6F Signing time: Fri 25 Apr 2025 05:54:24 +0000 Manifest this update: Fri 25 Apr 2025 05:54:24 +0000 Manifest next update: Fri 02 May 2025 05:54:24 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: kDI8ZqGYETOyHYpZBMWBcfCuMbDc/HguUI49fvVJdeE=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Apr 25 05:54:24 2025 GMT Not After : May 2 05:54:24 2025 GMT Subject: CN=680b2390-4f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:99:37:79:62:45:85:6b:75:e4:95:8d:85: 34:5e:f9:ba:48:f0:0b:48:d7:aa:e1:58:f5:5e:53: c4:cd:6d:2d:01:e9:48:5c:43:2a:75:65:7c:73:f1: 92:2d:50:85:b4:93:b7:e6:7c:9a:79:be:8d:65:a7: 41:24:cc:6e:6b:6b:07:dc:cd:32:95:f1:f0:28:a1: 17:7b:19:0e:21:26:f0:31:b7:e7:a0:a6:31:ce:ba: 49:18:45:78:d7:2d:4c:ce:e2:de:de:4b:25:1a:b4: 8e:2d:25:ec:ca:e3:47:8a:a3:a7:5f:c0:21:94:8f: 58:48:da:3e:b7:83:2b:45:75:9a:25:e6:0f:1c:68: 1b:ac:b5:70:1d:ad:a7:4d:e6:bf:a8:d7:70:d6:46: be:b2:c7:64:b2:ea:eb:6b:8a:83:30:d7:67:41:ff: 30:87:e1:63:5c:64:c7:11:a4:0b:8e:63:1b:16:89: 1b:4e:21:ed:0c:8e:d5:d6:68:25:4e:c2:8d:b5:4b: 47:b4:47:d6:8c:f5:e2:c7:18:ca:cd:25:95:6b:ae: f6:d7:c2:44:ce:6e:f2:f0:0e:b3:5a:5c:c2:2e:1a: c9:85:37:f2:da:48:25:0a:d1:88:b6:e1:5e:7d:38: 22:aa:02:7a:6b:db:f9:34:de:f9:73:c1:97:d9:bb: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:CB:2B:40:54:5B:2A:04:26:62:F2:49:93:77:91:3C:D4:C8:6B X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:34:c8:49:dc:af:f3:20:d6:16:b3:e9:58:38:38:88:55:6d: 6d:26:eb:cb:df:78:58:d0:7e:ad:bb:7a:21:50:91:1d:09:a0: 7e:28:83:cf:82:5f:6e:50:4c:86:9e:56:35:d4:3a:eb:38:8f: 2f:2b:d8:99:d4:1f:c7:7d:c7:cc:f4:d9:48:84:c4:75:b6:34: 8c:12:c8:19:ce:23:11:58:85:d7:da:f5:66:f4:f8:28:46:a0: 66:30:35:67:64:d5:57:99:fd:1c:62:44:b1:87:09:4e:bd:1b: 47:08:80:42:b0:97:d2:86:41:ba:4f:3b:93:f2:21:52:b0:5e: 6e:57:d5:6b:4d:04:db:8a:e7:6f:1c:19:8a:9b:ac:f6:84:91: 09:21:c4:46:20:f4:09:b4:46:37:8e:4d:42:54:a8:2a:e5:79: 3d:bb:76:3d:e4:32:ee:51:6e:4c:24:44:4f:54:2d:6b:b9:f8: b3:30:54:eb:a0:4b:85:8f:d1:13:85:1a:81:5c:18:3e:10:0e: f0:2f:2c:da:3e:d7:0e:56:84:82:a5:86:0b:99:fb:df:6d:6e: 10:ed:9f:bb:d9:47:38:46:03:1c:34:97:5d:80:2d:66:8f:ef: ec:51:ff:72:95:f0:7b:07:3a:b5:9d:9b:04:d4:6c:14:40:42: ca:b9:ca:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMUJERUIwQzI3NUM5MEU4MUJGQTNBQUZFMjEzRTRFNzEy MUVCNzM0QTAeFw0yNTA0MjUwNTU0MjRaFw0yNTA1MDIwNTU0MjRaMBgxFjAUBgNV BAMTDTY4MGIyMzkwLTRmOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR+pk3eWJFhWt15JWNhTRe+bpI8AtI16rhWPVeU8TNbS0B6UhcQyp1ZXxz8ZIt UIW0k7fmfJp5vo1lp0EkzG5rawfczTKV8fAooRd7GQ4hJvAxt+egpjHOukkYRXjX LUzO4t7eSyUatI4tJezK40eKo6dfwCGUj1hI2j63gytFdZol5g8caBustXAdradN 5r+o13DWRr6yx2Sy6utrioMw12dB/zCH4WNcZMcRpAuOYxsWiRtOIe0MjtXWaCVO wo21S0e0R9aM9eLHGMrNJZVrrvbXwkTObvLwDrNaXMIuGsmFN/LaSCUK0Yi24V59 OCKqAnpr2/k03vlzwZfZu23DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiwTLK0BU WyoEJmLySZN3kTzUyGswHwYDVR0jBBgwFoAUG96wwnXJDoG/o6r+IT5OcSHrc0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzEzRDgwNjA4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzk2d3duWEpEb0dfbzZyLUlUNU9jU0hyYzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzEzRDgwNjA4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9H X282ci1JVDVPY1NIcmMwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKM0yEncr/Mg1haz6Vg4OIhVbW0m68vfeFjQfq27eiFQkR0JoH4og8+C X25QTIaeVjXUOus4jy8r2JnUH8d9x8z02UiExHW2NIwSyBnOIxFYhdfa9Wb0+ChG oGYwNWdk1VeZ/RxiRLGHCU69G0cIgEKwl9KGQbpPO5PyIVKwXm5X1WtNBNuK528c GYqbrPaEkQkhxEYg9Am0RjeOTUJUqCrleT27dj3kMu5RbkwkRE9ULWu5+LMwVOug S4WP0ROFGoFcGD4QDvAvLNo+1w5WhIKlhguZ+99tbhDtn7vZRzhGAxw0l12ALWaP 7+xR/3KV8HsHOrWdmwTUbBRAQsq5ypQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:40 2025 by rpki-client