$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: KNZh/aDs5PKnJJt8/yVY9kBFmfW/nhWglvP7Brru75Q= Subject key identifier: 44:50:3E:38:D5:05:84:D3:3A:B7:C1:37:0A:1F:F3:03:05:DB:5D:2A Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0E36 Signing time: Thu 24 Apr 2025 17:44:59 +0000 Manifest this update: Thu 24 Apr 2025 17:44:59 +0000 Manifest next update: Thu 01 May 2025 17:44:59 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: 5UJWRvMn1k70cSQe31x2xvMt1Y6mDrvG0ujLoy7vey4=) 2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: te7ZL6Agw1ZkmX73jXqU7VyXLTyhkC8WpICIHQQUpj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: Apr 24 17:44:59 2025 GMT Not After : May 1 17:44:59 2025 GMT Subject: CN=680a789b-9361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:91:17:9f:cb:82:c3:e6:f2:d7:cd:e3:03: 2d:9b:be:70:9c:75:7c:ab:6d:a4:b5:d9:38:3d:0f: 4c:2e:d5:42:5d:71:25:69:d0:18:99:c8:50:c4:59: af:bd:9a:9f:cf:0c:4f:18:14:06:08:c5:2a:5a:c6: 74:78:23:ec:68:53:9d:81:01:9e:24:b8:82:58:29: 7b:87:e4:2b:f5:fb:da:a3:c4:01:ab:27:c2:22:6f: 21:63:ad:8a:da:a1:0c:10:08:ee:30:fa:85:a6:38: d5:cd:8e:86:1e:cd:02:ab:e7:0f:01:d5:ad:8a:a9: e9:ad:30:2f:13:74:c4:42:47:be:ad:54:77:23:82: 0e:38:6f:e4:99:01:2b:c4:a9:22:6e:0a:f7:f6:23: 7f:20:8d:3d:50:b5:87:94:8f:26:c1:f4:1c:3c:b7: 35:8f:0d:6c:d5:65:55:5d:16:13:4d:24:bb:ff:cc: 2b:1d:64:8c:98:66:69:76:34:c9:b2:2f:f0:ff:0d: 1e:84:17:25:12:fe:7a:50:dc:0b:9f:cc:60:9d:cc: 50:a1:d3:6e:90:4c:21:b2:83:f0:a6:aa:dd:dc:7e: 95:25:66:fa:5b:38:b7:af:8b:e9:36:7c:3c:18:1d: 51:24:36:74:59:e8:bd:e0:f9:4c:70:ee:25:b3:11: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:50:3E:38:D5:05:84:D3:3A:B7:C1:37:0A:1F:F3:03:05:DB:5D:2A X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:ac:56:e8:5a:a0:fd:2e:25:95:f1:67:50:df:59:7e:d7: 81:83:10:9a:8e:b4:f6:1b:dc:87:65:af:0b:7d:85:b6:b1:00: 58:6b:ab:63:5c:2d:ef:6d:a4:b2:73:b5:70:50:87:bf:d1:69: fc:59:70:3f:d5:f6:27:c6:e4:dd:b3:92:bf:5d:78:d5:be:9a: 89:7b:eb:20:86:d9:46:e3:a0:5b:bd:48:53:e2:f9:07:89:03: c5:79:df:db:8e:83:36:ad:fe:5f:e4:4a:15:91:6e:11:44:7b: 93:f1:98:87:e3:2b:cb:a8:ad:2e:fe:85:fe:0c:33:26:a8:31: 15:93:55:38:54:3b:41:64:16:fd:5a:5f:f5:d4:99:3c:7b:ad: 9e:03:e6:00:8a:7a:5c:8d:6b:e7:7a:5d:da:83:42:17:21:5a: e4:5c:b6:87:36:33:7c:7a:0c:d2:dc:4e:54:6b:aa:52:b6:61: 0a:4b:1f:db:91:da:7c:7d:c6:86:b7:d2:97:19:af:55:9c:ff: 25:7e:24:00:78:79:91:1e:84:da:a7:9a:dd:49:76:dc:30:a0: 4a:dd:5a:9a:da:76:ce:9b:d4:ee:48:4a:3d:cd:75:bb:99:17: 53:26:74:b2:26:7c:64:db:ec:e9:09:f2:21:fc:b8:8e:db:5e: 21:13:73:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjUwNDI0MTc0NDU5WhcNMjUwNTAxMTc0NDU5WjAYMRYwFAYD VQQDEw02ODBhNzg5Yi05MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkqRF5/LgsPm8tfN4wMtm75wnHV8q22ktdk4PQ9MLtVCXXEladAYmchQxFmv vZqfzwxPGBQGCMUqWsZ0eCPsaFOdgQGeJLiCWCl7h+Qr9fvao8QBqyfCIm8hY62K 2qEMEAjuMPqFpjjVzY6GHs0Cq+cPAdWtiqnprTAvE3TEQke+rVR3I4IOOG/kmQEr xKkibgr39iN/II09ULWHlI8mwfQcPLc1jw1s1WVVXRYTTSS7/8wrHWSMmGZpdjTJ si/w/w0ehBclEv56UNwLn8xgncxQodNukEwhsoPwpqrd3H6VJWb6Wzi3r4vpNnw8 GB1RJDZ0Wei94PlMcO4lsxH2HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERQPjjV BYTTOrfBNwof8wMF210qMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmBqxW6Fqg/S4llfFnUN9ZfteBgxCajrT2G9yHZa8LfYW2sQBYa6tj XC3vbaSyc7VwUIe/0Wn8WXA/1fYnxuTds5K/XXjVvpqJe+sghtlG46BbvUhT4vkH iQPFed/bjoM2rf5f5EoVkW4RRHuT8ZiH4yvLqK0u/oX+DDMmqDEVk1U4VDtBZBb9 Wl/11Jk8e62eA+YAinpcjWvnel3ag0IXIVrkXLaHNjN8egzS3E5Ua6pStmEKSx/b kdp8fcaGt9KXGa9VnP8lfiQAeHmRHoTap5rdSXbcMKBK3Vqa2nbOm9TuSEo9zXW7 mRdTJnSyJnxk2+zpCfIh/LiO214hE3ME -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:19 2025 by rpki-client