$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: 92UH39QxTKRsDHzEiT8SSjV8fS30Ak6+6DKmDvOaLAs= Subject key identifier: 05:2F:03:A5:97:91:0E:49:FA:83:9F:D7:C9:4D:31:04:7F:C3:75:B4 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:53:02 +0000 Manifest this update: Fri 25 Apr 2025 04:53:01 +0000 Manifest next update: Fri 02 May 2025 04:53:01 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: XNDYnyqk7Sp/bgivN4apQpuynGcq9K3zJ6vAdMZsYDc=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: Apr 25 04:53:01 2025 GMT Not After : May 2 04:53:01 2025 GMT Subject: CN=680b152d-9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:0e:56:8b:82:f7:28:25:06:df:40:ef:3c: 65:01:3b:75:e6:b0:d9:e5:44:ea:ea:cd:04:56:a4: 92:e3:94:b6:4a:6f:90:96:b3:38:aa:58:81:cb:76: 17:e0:df:37:c0:40:0b:b1:0c:ac:ee:b5:8b:ab:81: 6a:54:d0:e3:db:20:ee:e6:46:63:dc:c1:fe:84:74: c5:32:92:7d:f3:28:a0:6e:d4:0c:84:d1:0e:a5:53: ba:8e:02:aa:50:80:1e:3d:2b:ff:00:ce:20:23:ff: 14:70:3b:c8:48:69:5f:35:ab:42:79:48:92:4f:fb: b0:b5:57:2a:cc:7b:71:7b:84:7d:d1:c3:63:ab:80: fb:db:c8:e9:36:f2:9c:cc:1e:08:31:b4:73:2e:59: fe:c4:c5:ac:f7:0c:30:7a:a1:55:42:df:b5:75:c7: 90:5c:b5:65:ed:05:55:12:70:b5:d8:7f:f0:8d:8a: 27:a1:ac:e6:61:de:e8:9b:71:9f:3b:56:8c:50:b8: 11:f7:4e:b8:64:c5:62:7b:8a:ee:16:eb:79:c7:22: 34:dd:bc:d2:11:a3:81:82:ed:4f:df:c1:59:37:98: d6:09:92:cc:2b:91:4b:47:5b:a1:3a:c2:29:68:b1: 89:b1:60:50:b0:93:9d:18:f5:d7:67:1e:2d:b5:27: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2F:03:A5:97:91:0E:49:FA:83:9F:D7:C9:4D:31:04:7F:C3:75:B4 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:79:3a:ec:7a:71:3e:ab:d6:35:47:6a:e1:21:22:c0:86:22: f5:5b:ef:f2:ee:d4:8d:ee:4b:9d:80:d8:7b:47:38:f6:bc:eb: ab:38:c7:7b:b9:f7:72:bb:ba:3f:1c:7c:33:f1:f2:75:a7:70: 4f:01:e6:66:1c:de:1a:a0:a2:4f:4d:19:94:49:09:d8:63:67: 5c:b0:cb:7b:f7:0c:65:eb:7c:6f:b9:20:b3:44:05:e7:94:17: 31:d4:08:a4:1e:64:40:47:0a:b2:4c:6d:45:fa:dc:c3:ac:c1: c0:0b:2a:84:3c:07:08:cd:ca:d9:36:5c:71:1d:fa:a1:d4:92: 9f:c7:a6:88:5d:5d:6e:85:fc:e1:00:86:4b:c3:84:35:64:52: 3d:e1:4a:9e:b5:dd:13:5f:f7:b6:06:c1:13:a2:9c:aa:b2:0b: d9:96:11:65:ce:c7:29:24:ef:26:30:9d:f5:5f:af:79:d3:78: 3c:87:c5:3b:e9:ee:6d:47:3c:23:5d:3a:c6:14:ee:43:ed:0f: 3c:9f:d0:dd:4f:77:6d:03:29:c1:7b:06:95:44:b9:8c:fc:25: ee:ae:f2:ca:d8:56:a0:3d:30:8e:33:a0:f7:5c:0e:48:54:6e: 8f:d1:26:e5:67:fd:86:e3:a7:a2:f2:5e:b9:95:2c:0f:fa:11: 97:37:91:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUwNDI1MDQ1MzAxWhcNMjUwNTAyMDQ1MzAxWjAYMRYwFAYD VQQDEw02ODBiMTUyZC05NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tcOVouC9yglBt9A7zxlATt15rDZ5UTq6s0EVqSS45S2Sm+QlrM4qliBy3YX 4N83wEALsQys7rWLq4FqVNDj2yDu5kZj3MH+hHTFMpJ98yigbtQMhNEOpVO6jgKq UIAePSv/AM4gI/8UcDvISGlfNatCeUiST/uwtVcqzHtxe4R90cNjq4D728jpNvKc zB4IMbRzLln+xMWs9wwweqFVQt+1dceQXLVl7QVVEnC12H/wjYonoazmYd7om3Gf O1aMULgR9064ZMVie4ruFut5xyI03bzSEaOBgu1P38FZN5jWCZLMK5FLR1uhOsIp aLGJsWBQsJOdGPXXZx4ttSccZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUvA6WX kQ5J+oOf18lNMQR/w3W0MB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTk4Ny9GMEZBNEZBNkZDMjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVB Q3I2NHhFaWdueGxma1RuaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2eTrsenE+q9Y1R2rhISLAhiL1W+/y7tSN7kudgNh7Rzj2vOurOMd7 ufdyu7o/HHwz8fJ1p3BPAeZmHN4aoKJPTRmUSQnYY2dcsMt79wxl63xvuSCzRAXn lBcx1AikHmRARwqyTG1F+tzDrMHACyqEPAcIzcrZNlxxHfqh1JKfx6aIXV1uhfzh AIZLw4Q1ZFI94Uqetd0TX/e2BsETopyqsgvZlhFlzscpJO8mMJ31X69503g8h8U7 6e5tRzwjXTrGFO5D7Q88n9DdT3dtAynBewaVRLmM/CXurvLK2FagPTCOM6D3XA5I VG6P0SblZ/2G46ei8l65lSwP+hGXN5Ed -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:48 2025 by rpki-client