$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: Z67ANQLDluWRjPIaXD5blntzAp9M2jh/WNHhKBLlBP0= Subject key identifier: E1:68:17:4A:FA:CC:CC:2B:69:1A:92:CC:FD:63:D4:D2:79:39:53:DF Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 0676 Signing time: Thu 24 Apr 2025 22:06:41 +0000 Manifest this update: Thu 24 Apr 2025 22:06:41 +0000 Manifest next update: Thu 01 May 2025 22:06:41 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: vcqiVxK7TH7wpOEgqBzw+tyYtapTUGmt2GU23UxZiTQ=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: m/HWFJ3zaTbb526BBQjKgkfjO3ab/2s+A2oNRFabdSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Apr 24 22:06:41 2025 GMT Not After : May 1 22:06:41 2025 GMT Subject: CN=680ab5f1-fb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:d4:c2:6f:13:29:76:9d:c2:58:c6:7c:ec: 7c:23:10:7e:94:35:6c:1e:04:75:75:7d:4a:90:63: 60:af:bd:b4:e4:f7:31:56:f4:7f:9c:aa:c1:7e:31: f4:d0:d4:fc:ff:e5:30:e3:91:5d:4e:f6:64:58:31: 2d:13:d5:20:4f:00:54:79:cb:53:89:26:e3:8b:7c: 98:4f:2a:cf:37:05:2c:82:bf:62:6a:04:c2:2b:e4: 93:39:76:d0:02:12:96:5d:fd:b4:65:3b:2e:74:60: 23:aa:e9:38:a0:c2:cc:5a:da:b5:0e:be:13:c9:aa: 4b:2a:25:98:0c:5a:c9:f0:ba:ab:95:c5:32:17:bc: 61:5b:90:8a:6b:29:c5:d1:36:7a:f7:35:29:72:1e: 53:ec:6a:f8:90:3f:c0:45:3b:73:09:a3:1d:85:b3: 28:9a:21:71:e7:66:84:85:3d:cb:e5:7a:ae:1d:77: de:fa:80:9d:f9:0b:a8:f1:c1:24:09:32:d1:45:4b: e2:28:37:2c:98:a8:f0:4c:91:cc:f9:7a:1b:06:b8: 57:7b:9e:0b:4e:e3:39:fc:8e:9f:65:2b:f4:81:b1: 4a:00:df:41:5a:3e:ed:21:eb:b0:78:14:e9:6e:0f: 99:14:d1:86:60:48:11:74:f5:6b:a2:7e:4d:1f:b0: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:68:17:4A:FA:CC:CC:2B:69:1A:92:CC:FD:63:D4:D2:79:39:53:DF X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3b:ee:37:56:fd:17:f2:e3:2e:20:24:56:1c:54:12:c4:36: 75:53:7c:d9:8e:b0:a4:9d:ec:8d:8e:03:d3:fa:26:c9:41:d5: be:11:09:7d:3d:16:f8:fe:ad:2b:7b:3a:d6:aa:82:88:23:08: de:03:66:9e:2d:93:2f:10:51:91:f5:f2:e6:3f:e3:46:50:2e: 45:fc:97:4a:55:97:5e:a7:52:8e:6c:ed:7e:88:40:46:b6:eb: 3d:c6:23:5c:2a:97:f4:96:76:d1:5b:fb:60:43:59:9a:6f:19: eb:69:2f:4a:8e:1f:d9:08:e8:42:44:90:32:aa:13:a2:e4:35: dd:63:c0:55:3e:94:8a:c2:d3:62:97:29:ce:55:59:e6:ac:dd: ab:66:ec:5e:26:ae:3b:5a:00:f3:55:4e:e8:ca:a8:ec:ad:4c: 30:7e:95:ac:d0:7b:37:f0:2c:80:d6:6b:dc:f1:41:29:1f:2a: c9:a6:f5:6b:d2:a7:18:5e:14:bd:7f:fb:0e:b0:48:fb:f7:c6: 65:9b:e7:b0:aa:f1:85:ae:e3:c5:24:a6:73:c8:32:2c:fd:53: 66:7b:d5:13:d9:f8:80:04:b1:5a:53:b5:32:e0:ed:50:58:b5: 0a:53:70:b4:99:24:2b:f7:2d:34:5b:70:35:14:b9:76:04:9b: 61:8d:54:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwNDI0MjIwNjQxWhcNMjUwNTAxMjIwNjQxWjAYMRYwFAYD VQQDEw02ODBhYjVmMS1mYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPXUwm8TKXadwljGfOx8IxB+lDVsHgR1dX1KkGNgr7205PcxVvR/nKrBfjH0 0NT8/+Uw45FdTvZkWDEtE9UgTwBUectTiSbji3yYTyrPNwUsgr9iagTCK+STOXbQ AhKWXf20ZTsudGAjquk4oMLMWtq1Dr4TyapLKiWYDFrJ8LqrlcUyF7xhW5CKaynF 0TZ69zUpch5T7Gr4kD/ARTtzCaMdhbMomiFx52aEhT3L5XquHXfe+oCd+Quo8cEk CTLRRUviKDcsmKjwTJHM+XobBrhXe54LTuM5/I6fZSv0gbFKAN9BWj7tIeuweBTp bg+ZFNGGYEgRdPVron5NH7Bu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFoF0r6 zMwraRqSzP1j1NJ5OVPfMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9O+43Vv0X8uMuICRWHFQSxDZ1U3zZjrCkneyNjgPT+ibJQdW+EQl9 PRb4/q0rezrWqoKIIwjeA2aeLZMvEFGR9fLmP+NGUC5F/JdKVZdep1KObO1+iEBG tus9xiNcKpf0lnbRW/tgQ1mabxnraS9Kjh/ZCOhCRJAyqhOi5DXdY8BVPpSKwtNi lynOVVnmrN2rZuxeJq47WgDzVU7oyqjsrUwwfpWs0Hs38CyA1mvc8UEpHyrJpvVr 0qcYXhS9f/sOsEj798Zlm+ewqvGFruPFJKZzyDIs/VNme9UT2fiABLFaU7Uy4O1Q WLUKU3C0mSQr9y00W3A1FLl2BJthjVRt -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:53 2025 by rpki-client