$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: w2Qe+Aaw4QrKAMpHpovEudYuHiIjOW4IVNY/jTxVtUQ= Subject key identifier: 2C:DB:0C:03:09:3A:75:1F:60:B2:BA:05:AB:57:6A:B5:85:22:1F:3C Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 04E3 Signing time: Thu 24 Apr 2025 23:33:19 +0000 Manifest this update: Thu 24 Apr 2025 23:33:19 +0000 Manifest next update: Thu 01 May 2025 23:33:19 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: st7b9EdQf103h4yKyBP034bj2W3+GP0iQwDNZSmCXX8=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Apr 24 23:33:19 2025 GMT Not After : May 1 23:33:19 2025 GMT Subject: CN=680aca3f-6107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:0a:84:15:46:2e:1e:34:f4:cf:4d:4f:23: 50:d8:9d:d9:b4:f8:11:88:24:6d:8c:56:ff:d1:73: 48:94:b6:ad:b8:ea:32:54:08:9b:d8:dc:85:a9:9c: 8a:59:bb:e9:b9:2f:d4:e7:bb:25:fe:27:e0:89:19: a9:fb:31:31:e2:15:7b:f1:c1:56:19:16:3d:4b:a7: ba:13:80:26:8a:56:de:3a:15:4a:aa:95:c1:91:76: 49:7c:a9:41:21:9a:cb:20:61:0b:0b:f3:32:80:96: bb:c1:dd:03:18:28:f3:75:7f:3b:24:71:42:92:50: 31:2e:3a:ef:08:45:6a:50:47:9f:37:96:75:39:02: a7:2e:b3:d6:eb:bb:8c:c0:60:e3:32:44:ee:7f:49: f9:45:bc:a0:99:52:c5:5c:28:94:01:92:12:76:f4: a6:02:1d:7f:fc:98:27:af:07:be:54:49:d5:7f:e1: b5:1e:3f:52:91:cd:11:2e:5d:60:2d:50:e5:70:1e: 7f:70:0d:28:03:5a:d1:a5:c7:62:5f:7d:4d:c8:7d: 41:5e:a6:b5:57:3e:4c:21:6a:99:bd:77:eb:37:46: 14:b3:0a:96:08:50:ac:68:fb:55:38:92:1b:02:31: 80:bf:bd:51:de:97:38:d8:64:da:e7:ea:a1:35:88: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:0C:03:09:3A:75:1F:60:B2:BA:05:AB:57:6A:B5:85:22:1F:3C X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:b8:6e:ff:e1:78:d3:03:f9:ad:a4:96:c5:3c:88:6b:4b: e9:2d:78:92:0a:d8:ea:85:55:32:6b:d8:47:ad:30:39:2c:a2: c0:de:17:cd:d8:68:c8:e3:76:f1:d7:da:ca:bd:b3:4a:fe:92: 22:43:68:f7:a7:38:05:14:5c:31:77:8e:b3:d1:88:0a:de:39: f4:7e:a0:11:91:3a:62:4c:d2:9a:ff:1a:b9:bd:36:87:c2:59: 92:65:0d:fd:7f:7b:15:37:ad:42:da:81:57:b1:ea:63:3b:b8: 81:1c:84:23:a3:c4:9d:e2:de:43:43:9b:15:5c:d5:22:65:26: 20:94:10:a4:30:ea:d5:fe:8c:32:72:e2:35:2a:8d:63:77:6b: a6:04:34:44:2c:03:cf:03:14:49:35:43:17:ec:37:ae:25:22: 72:c1:60:47:ac:be:71:0d:9f:f4:bc:1c:b3:0a:62:2a:f5:a9: 42:32:f0:3e:da:58:38:44:e3:2a:fb:f3:98:e6:ee:c4:9c:c2: 08:9e:c5:21:af:53:44:19:d1:c3:dc:f2:84:d7:da:5f:16:19: a6:e8:b6:60:a8:97:03:48:06:78:ca:06:bb:22:91:44:54:ec: e3:64:d0:35:ec:3b:ae:df:9a:cd:80:bf:6c:f7:f7:6b:8b:8d: 3e:dc:51:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwNDI0MjMzMzE5WhcNMjUwNTAxMjMzMzE5WjAYMRYwFAYD VQQDEw02ODBhY2EzZi02MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdEKhBVGLh409M9NTyNQ2J3ZtPgRiCRtjFb/0XNIlLatuOoyVAib2NyFqZyK WbvpuS/U57sl/ifgiRmp+zEx4hV78cFWGRY9S6e6E4AmilbeOhVKqpXBkXZJfKlB IZrLIGELC/MygJa7wd0DGCjzdX87JHFCklAxLjrvCEVqUEefN5Z1OQKnLrPW67uM wGDjMkTuf0n5RbygmVLFXCiUAZISdvSmAh1//Jgnrwe+VEnVf+G1Hj9Skc0RLl1g LVDlcB5/cA0oA1rRpcdiX31NyH1BXqa1Vz5MIWqZvXfrN0YUswqWCFCsaPtVOJIb AjGAv71R3pc42GTa5+qhNYjZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzbDAMJ OnUfYLK6BatXarWFIh88MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+crhu/+F40wP5raSWxTyIa0vpLXiSCtjqhVUya9hHrTA5LKLA3hfN 2GjI43bx19rKvbNK/pIiQ2j3pzgFFFwxd46z0YgK3jn0fqARkTpiTNKa/xq5vTaH wlmSZQ39f3sVN61C2oFXsepjO7iBHIQjo8Sd4t5DQ5sVXNUiZSYglBCkMOrV/owy cuI1Ko1jd2umBDRELAPPAxRJNUMX7DeuJSJywWBHrL5xDZ/0vByzCmIq9alCMvA+ 2lg4ROMq+/OY5u7EnMIInsUhr1NEGdHD3PKE19pfFhmm6LZgqJcDSAZ4yga7IpFE VOzjZNA17Duu35rNgL9s9/dri40+3FFW -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:54 2025 by rpki-client