$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: ZyRolsJbnn7Vi7t0GpFUM7McYNZZq5UuWq3VyxrfXr0= Subject key identifier: F1:FE:55:15:2A:20:AF:7A:E9:ED:12:C6:41:49:8C:6B:A4:94:B2:E6 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 1015 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 100B Signing time: Thu 24 Apr 2025 17:26:40 +0000 Manifest this update: Thu 24 Apr 2025 17:26:39 +0000 Manifest next update: Thu 01 May 2025 17:26:39 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: RFFROCze33qEyecZfH5HJA+HHIksoC0gE2AnezOr2Rk=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4117 (0x1015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Apr 24 17:26:39 2025 GMT Not After : May 1 17:26:39 2025 GMT Subject: CN=680a7450-9038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:67:a4:0b:3f:39:1f:f1:f6:ce:91:8e:ab: 6b:d7:8b:67:5f:d7:97:88:01:46:fc:38:bb:e7:c2: 45:7f:50:ce:9b:5e:fc:a7:d6:7b:98:06:cc:d2:df: 21:0e:e4:6b:51:04:87:c5:40:3c:de:9a:5f:57:04: cb:80:f9:8b:5d:07:d8:3b:8f:78:3a:51:70:c9:38: a0:77:6c:95:5f:4f:b7:21:c5:fc:8f:31:6a:ff:c9: e5:03:e7:0d:97:30:2a:b2:7a:2b:7d:a4:d9:ea:8e: be:9a:e6:c9:b4:be:28:ed:5a:45:f5:81:2f:9e:1b: 9a:c4:c8:a8:cf:4d:b9:52:7d:7d:92:a1:0d:06:17: e8:d4:7e:64:e3:00:c6:31:5b:b5:99:a1:1c:3c:fd: a0:d6:12:bd:6b:6d:54:7f:4b:26:ea:fe:fb:bd:1a: 92:9e:54:49:3f:8e:ad:18:c9:b9:89:19:bf:2d:d7: f0:28:03:9b:fe:0c:fb:bf:8c:c7:02:cf:ea:ac:42: d7:ef:32:de:c4:3c:1a:19:91:82:a2:11:07:31:2e: 96:7b:b7:1f:b8:87:e6:61:56:8d:b2:cc:86:6f:07: 0d:5f:91:c4:f0:7c:af:dd:2b:5d:53:2f:dd:3e:4c: 11:f6:30:fc:e8:60:dc:94:3b:cf:ee:2f:8a:8d:70: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FE:55:15:2A:20:AF:7A:E9:ED:12:C6:41:49:8C:6B:A4:94:B2:E6 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1c:23:a9:38:5d:3a:2f:33:6d:b7:f6:79:c7:86:c2:3b:0b: 95:e7:b5:89:1e:3d:4d:79:c5:74:4d:3e:92:6c:89:6a:da:a1: 4e:cc:46:3c:43:56:08:ca:72:6a:93:aa:87:1e:d4:1f:bf:87: f6:10:f0:63:d6:bc:6a:3e:a7:78:6f:60:e9:e1:92:17:e2:1e: a7:b2:7b:c2:83:96:81:39:a9:3a:4c:74:7f:10:e7:c7:27:51: 1e:e9:aa:ce:7b:1b:31:88:88:48:b6:54:4a:03:c0:74:67:4c: 8e:64:8d:ae:a9:16:ca:2b:51:79:68:b0:14:fc:a5:91:2d:21: 39:c6:9e:a6:25:5a:b5:0e:ed:a5:d6:f7:7d:7a:4f:0d:d6:2a: 79:63:84:b1:ae:4c:56:1b:25:d5:26:df:79:9e:9f:58:ae:2f: 7e:f8:a4:17:44:35:3c:a4:ef:35:e8:2e:09:40:a2:44:2f:d0: f9:93:96:3d:5e:c7:d4:56:46:a1:54:25:54:ed:7c:77:d0:20: 7b:a1:f9:8c:db:ee:0c:87:53:aa:8c:e3:92:24:3f:96:5f:2a: 3b:21:6e:d8:05:55:b5:ff:47:08:68:5c:cf:01:71:9f:59:e5: 0e:32:d2:23:b8:23:63:3d:ab:4a:02:45:82:30:d7:73:9c:35: 79:3e:c2:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNDI0MTcyNjM5WhcNMjUwNTAxMTcyNjM5WjAYMRYwFAYD VQQDEw02ODBhNzQ1MC05MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4RnpAs/OR/x9s6Rjqtr14tnX9eXiAFG/Di758JFf1DOm178p9Z7mAbM0t8h DuRrUQSHxUA83ppfVwTLgPmLXQfYO494OlFwyTigd2yVX0+3IcX8jzFq/8nlA+cN lzAqsnorfaTZ6o6+mubJtL4o7VpF9YEvnhuaxMioz025Un19kqENBhfo1H5k4wDG MVu1maEcPP2g1hK9a21Uf0sm6v77vRqSnlRJP46tGMm5iRm/LdfwKAOb/gz7v4zH As/qrELX7zLexDwaGZGCohEHMS6We7cfuIfmYVaNssyGbwcNX5HE8Hyv3StdUy/d PkwR9jD86GDclDvP7i+KjXDvwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH+VRUq IK966e0SxkFJjGuklLLmMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHCOpOF06LzNtt/Z5x4bCOwuV57WJHj1NecV0TT6SbIlq2qFOzEY8 Q1YIynJqk6qHHtQfv4f2EPBj1rxqPqd4b2Dp4ZIX4h6nsnvCg5aBOak6THR/EOfH J1Ee6arOexsxiIhItlRKA8B0Z0yOZI2uqRbKK1F5aLAU/KWRLSE5xp6mJVq1Du2l 1vd9ek8N1ip5Y4SxrkxWGyXVJt95np9Yri9++KQXRDU8pO816C4JQKJEL9D5k5Y9 XsfUVkahVCVU7Xx30CB7ofmM2+4Mh1OqjOOSJD+WXyo7IW7YBVW1/0cIaFzPAXGf WeUOMtIjuCNjPatKAkWCMNdznDV5PsI2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:10 2025 by rpki-client