$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft File: gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json) Hash identifier: OVyUvTSyvMgfdebv0evz76mt6b1sLcfI0Ta2ipT83BA= Subject key identifier: A4:07:10:C2:ED:93:6C:6B:9A:6C:7B:9B:40:A2:A7:7D:94:35:CF:1A Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft Manifest number: 349F Signing time: Thu 24 Apr 2025 14:27:09 +0000 Manifest this update: Thu 24 Apr 2025 14:27:08 +0000 Manifest next update: Thu 01 May 2025 14:27:08 +0000 Files and hashes: 1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: ZUC04nqzH8+JQAGUhAUfNfvASDYkiLf49w3peiaD5jI=) 2: CFAE1776E7C811ECA2BF6554C4F9AE02.roa (hash: QARDRv4cItQzZWCbzQNYEiniGbYK33outlCobD5Vmvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Apr 24 14:27:08 2025 GMT Not After : May 1 14:27:08 2025 GMT Subject: CN=680a4a3c-f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:e2:e5:68:26:02:24:10:cb:ed:77:02:11: 6a:8b:b3:d1:1c:09:bf:e4:22:c1:ce:04:23:db:f0: 94:43:88:65:f0:6f:0d:d1:9d:ed:e8:05:cf:ea:f0: 51:45:dc:68:be:e8:27:bf:72:17:9a:fa:32:5d:65: 15:9a:bb:ec:88:6e:f4:57:45:89:f3:6d:c2:e3:d0: bb:15:90:d9:e8:98:80:13:b7:a1:59:19:18:4d:03: 37:55:f1:86:a9:c8:fa:1e:1b:c2:1f:61:ff:b9:f0: 53:cd:f2:d5:75:dc:a9:7c:dc:57:70:c3:e0:02:15: 61:e1:f6:59:9c:e1:64:2f:6c:5b:48:35:8a:ec:7f: c9:f2:d7:8d:e7:b9:ee:4d:44:c7:2e:72:9d:9d:94: 15:2a:68:53:be:85:6f:9d:40:65:f3:8d:49:15:e2: bf:2b:9c:05:ea:9e:f8:11:64:c8:95:a7:ac:1e:00: b0:5f:47:3e:09:81:54:5a:a1:16:85:d5:e1:aa:80: 80:5a:03:2f:b8:8c:33:d2:d5:ca:d6:e7:63:5c:af: f7:f0:94:ea:c0:54:0f:13:c7:fb:a2:7b:2a:67:31: 12:f7:2c:8a:6f:fb:ba:fa:25:f9:d6:4b:b9:e0:35: ed:a1:eb:c6:9e:f6:b5:a8:10:fd:11:22:70:ff:bb: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:07:10:C2:ED:93:6C:6B:9A:6C:7B:9B:40:A2:A7:7D:94:35:CF:1A X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5a:0c:cf:88:1a:e0:cb:4e:5b:52:9a:cc:6d:22:9d:cc:b7: aa:c4:44:ac:19:7b:b4:fc:c8:9c:72:40:9f:63:b9:65:06:cb: 00:eb:c4:22:ef:67:c4:3c:84:c6:c1:ff:d6:cf:8e:b3:f4:02: 5e:55:99:1b:17:da:97:d2:0d:c2:c6:8b:e1:96:22:01:1d:27: 4e:b7:d9:08:96:e2:18:84:dc:1a:8f:36:9b:5b:51:69:d5:76: 33:ff:c4:ed:32:4c:27:de:5e:5e:48:23:2c:e4:66:e9:e6:c2: b2:c8:cd:46:32:02:f1:85:91:78:43:d7:ea:2a:d4:5a:d7:f8: 63:df:fd:f1:b2:b8:07:b7:86:fb:de:2f:6f:85:9e:4a:97:90: fa:79:55:d1:ca:ae:66:3d:ee:a6:f5:be:ff:40:71:ec:4c:3c: 51:e0:b4:32:c7:1f:33:6e:1d:89:fd:1d:41:a9:96:63:1d:cf: 27:d0:dc:6e:84:dd:d5:85:6a:3c:8d:ab:22:1f:7b:02:23:f3: 88:78:4d:fa:c6:6e:6c:13:3a:b9:34:e4:6d:70:48:e6:50:b6: e2:90:89:b5:92:80:d4:58:2b:0e:fa:d4:d0:58:9f:67:94:29: 18:c0:51:ef:1f:35:8b:f1:9a:fa:2e:97:b8:39:96:e5:4b:db: d3:6e:d6:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUwNDI0MTQyNzA4WhcNMjUwNTAxMTQyNzA4WjAYMRYwFAYD VQQDEw02ODBhNGEzYy1mOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr37i5WgmAiQQy+13AhFqi7PRHAm/5CLBzgQj2/CUQ4hl8G8N0Z3t6AXP6vBR Rdxovugnv3IXmvoyXWUVmrvsiG70V0WJ823C49C7FZDZ6JiAE7ehWRkYTQM3VfGG qcj6HhvCH2H/ufBTzfLVddypfNxXcMPgAhVh4fZZnOFkL2xbSDWK7H/J8teN57nu TUTHLnKdnZQVKmhTvoVvnUBl841JFeK/K5wF6p74EWTIlaesHgCwX0c+CYFUWqEW hdXhqoCAWgMvuIwz0tXK1udjXK/38JTqwFQPE8f7onsqZzES9yyKb/u6+iX51ku5 4DXtoevGnva1qBD9ESJw/7uZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQHEMLt k2xrmmx7m0Cip32UNc8aMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkNGQy9CRjg0QjU3NDFEODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMy SDNFMjhKY1p2ODlNUlROQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpWgzPiBrgy05bUprMbSKdzLeqxESsGXu0/MicckCfY7llBssA68Qi 72fEPITGwf/Wz46z9AJeVZkbF9qX0g3CxovhliIBHSdOt9kIluIYhNwajzabW1Fp 1XYz/8TtMkwn3l5eSCMs5Gbp5sKyyM1GMgLxhZF4Q9fqKtRa1/hj3/3xsrgHt4b7 3i9vhZ5Kl5D6eVXRyq5mPe6m9b7/QHHsTDxR4LQyxx8zbh2J/R1BqZZjHc8n0Nxu hN3VhWo8jasiH3sCI/OIeE36xm5sEzq5NORtcEjmULbikIm1koDUWCsO+tTQWJ9n lCkYwFHvHzWL8Zr6Lpe4OZblS9vTbtZm -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:20 2025 by rpki-client