$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json) Hash identifier: bQKmRYrkQM/8FeZuAbKrPDDgr5Z2TrqMQXFerARICas= Subject key identifier: 7C:08:B6:0A:06:B5:70:BD:E4:F8:BF:54:81:33:DA:66:FE:36:A1:7B Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft Manifest number: 0792 Signing time: Thu 24 Apr 2025 21:07:47 +0000 Manifest this update: Thu 24 Apr 2025 21:07:47 +0000 Manifest next update: Thu 01 May 2025 21:07:47 +0000 Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: MhUHawEwNdGaLo1BibFkZQ5npvcurwF+L5DYsdcv/TM=) 2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: er27YVYfgU7Qa2FTXbj/lK9/OoJ5L5A1uOvFRL1zqKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060, serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: Apr 24 21:07:47 2025 GMT Not After : May 1 21:07:47 2025 GMT Subject: CN=680aa823-1dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:9d:e2:1d:b3:7d:1e:20:26:c1:95:e7:42: 79:04:87:17:70:f6:ea:20:a1:ce:12:bb:49:34:78: b9:4a:d3:82:9e:09:e4:1a:2b:90:68:33:11:06:c0: a9:d4:7d:24:7d:08:60:5c:06:ad:6f:93:dd:f1:29: 12:bd:98:4c:9d:85:97:b7:b9:90:62:c8:6f:62:fc: 28:93:42:59:f6:e4:9f:85:25:22:2f:bb:35:c6:b5: 5d:72:56:7b:c9:43:69:b4:89:d8:7d:6b:a7:c0:c5: 3b:fa:11:19:b2:f4:55:18:1d:28:a2:76:92:ce:87: ae:4f:85:54:48:06:f8:9a:7a:40:ab:02:51:11:62: f8:70:97:d7:9d:8f:9d:f7:26:5f:8a:6b:bb:cf:aa: 30:4b:d7:3f:12:61:9b:b4:87:1c:a7:fa:71:7d:b9: 9f:55:7e:61:e4:2b:80:a8:10:d5:cd:6a:0f:ff:2f: f3:ff:13:83:4c:b9:78:2f:c6:0a:0a:80:f4:7f:e1: 80:a8:fe:8c:7b:3d:96:1a:11:03:7b:ec:53:1c:e8: 5a:26:4c:02:49:07:3a:cc:13:02:36:f9:72:13:7f: 38:f1:c9:d0:f6:16:f9:f1:19:94:f6:72:7e:a8:56: 62:f0:f8:46:72:86:13:d7:66:53:15:57:90:ad:e1: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:B6:0A:06:B5:70:BD:E4:F8:BF:54:81:33:DA:66:FE:36:A1:7B X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2c:4d:e7:9c:79:fa:36:5a:03:dd:c7:c4:ea:12:a8:23:9a: 17:81:9d:52:cc:9a:aa:5a:32:7b:68:22:4e:62:90:d1:a1:e4: 9a:99:84:a0:f2:a2:13:ca:8a:0b:b1:99:1b:93:fc:2d:d4:a8: 10:e6:6f:f3:62:bd:6b:1d:84:49:a9:8b:44:33:a6:e3:0a:0c: e5:ce:48:02:4e:fc:8a:f5:04:8f:9b:fa:ba:5c:53:72:23:3f: ef:e2:ed:54:f6:58:f1:47:30:73:87:20:78:9f:1b:4b:f8:71: 4d:36:19:79:c3:cf:8e:f6:b3:d7:c0:62:0f:7a:38:a0:73:39: 04:7c:d0:5f:b2:11:22:b2:df:ea:2e:23:13:b8:86:4d:77:ad: ec:ae:a3:35:95:fa:58:2c:b8:74:51:c2:f6:8d:4f:f3:87:c1: 8e:42:63:f8:11:77:60:3e:52:30:13:66:a6:2e:19:0f:96:4d: 13:a3:c8:ca:33:cd:a6:e6:93:5d:68:c9:52:20:52:d3:92:21: 4f:60:34:16:29:fb:f9:b8:49:35:cf:e1:8b:bc:7c:ec:d7:4e: bd:b0:0c:95:80:be:42:59:d2:ee:e7:41:e2:08:c0:4a:da:5f: fb:30:78:a0:90:2d:42:df:62:06:77:69:9c:f5:49:c1:f3:ec: a1:6c:8a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjUwNDI0MjEwNzQ3WhcNMjUwNTAxMjEwNzQ3WjAYMRYwFAYD VQQDEw02ODBhYTgyMy0xZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ+d4h2zfR4gJsGV50J5BIcXcPbqIKHOErtJNHi5StOCngnkGiuQaDMRBsCp 1H0kfQhgXAatb5Pd8SkSvZhMnYWXt7mQYshvYvwok0JZ9uSfhSUiL7s1xrVdclZ7 yUNptInYfWunwMU7+hEZsvRVGB0oonaSzoeuT4VUSAb4mnpAqwJREWL4cJfXnY+d 9yZfimu7z6owS9c/EmGbtIccp/pxfbmfVX5h5CuAqBDVzWoP/y/z/xODTLl4L8YK CoD0f+GAqP6Mez2WGhEDe+xTHOhaJkwCSQc6zBMCNvlyE3848cnQ9hb58RmU9nJ+ qFZi8PhGcoYT12ZTFVeQreFHuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwItgoG tXC95Pi/VIEz2mb+NqF7MB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzA2MC9BNzI1ODZCMDAzQjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhR b0FkS2hFSkZHQWFpajUzZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbLE3nnHn6NloD3cfE6hKoI5oXgZ1SzJqqWjJ7aCJOYpDRoeSamYSg 8qITyooLsZkbk/wt1KgQ5m/zYr1rHYRJqYtEM6bjCgzlzkgCTvyK9QSPm/q6XFNy Iz/v4u1U9ljxRzBzhyB4nxtL+HFNNhl5w8+O9rPXwGIPejigczkEfNBfshEist/q LiMTuIZNd63srqM1lfpYLLh0UcL2jU/zh8GOQmP4EXdgPlIwE2amLhkPlk0To8jK M82m5pNdaMlSIFLTkiFPYDQWKfv5uEk1z+GLvHzs1069sAyVgL5CWdLu50HiCMBK 2l/7MHigkC1C32IGd2mc9UnB8+yhbIpt -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:07 2025 by rpki-client