$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json) Hash identifier: 52baMH5DUURCrhr6sQaZ2Oz+DX5tLWQUnS5epkUNqTQ= Subject key identifier: 73:C4:4F:E1:E3:68:03:90:E3:58:1E:2A:D4:F2:D5:4F:FE:3A:21:6D Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft Manifest number: 06D4 Signing time: Thu 24 Apr 2025 23:16:53 +0000 Manifest this update: Thu 24 Apr 2025 23:16:53 +0000 Manifest next update: Thu 01 May 2025 23:16:53 +0000 Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: IX4zHfhXxenvijoh0COUCpdGJLgDcwAs59IjqYOYoMw=) 2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: ywWchnTSu/qeQDeWbCVaFbaIpGcNtf7MxWBgX+a8m9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Validity Not Before: Apr 24 23:16:53 2025 GMT Not After : May 1 23:16:53 2025 GMT Subject: CN=680ac665-408c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:5f:d6:f2:06:e0:53:70:47:93:8a:27:d0: 61:74:10:7c:f2:ad:06:97:d1:d7:6f:d2:1e:e0:5a: 92:41:bd:b7:ba:27:ec:4e:3b:fc:7f:34:b4:77:a7: 83:fb:55:f1:75:8e:2b:13:e6:e0:a6:b6:3e:5a:c8: b9:f9:9c:3f:b2:da:2b:86:a7:da:af:ab:bb:13:2b: 1b:69:59:13:7e:a7:f4:51:3d:33:43:25:f3:d0:f8: 5d:89:f0:4c:6b:f5:24:dc:18:4c:42:45:d5:2b:58: 0a:04:f8:3e:6c:03:d4:37:02:cc:37:4b:73:90:2b: 88:e3:a1:13:db:8f:7c:35:48:53:33:11:21:f9:2b: 38:31:28:4b:22:ac:82:cb:c3:c7:10:3c:a8:ae:ed: 85:30:d9:19:95:0e:5b:c0:29:7b:6a:09:f1:9c:ce: 5d:fc:7a:f2:eb:c9:94:ad:43:f2:2b:f2:6d:b1:a6: 47:2d:8b:ef:7e:58:25:29:cb:b6:0e:c1:0d:9d:f5: e8:f0:df:e5:e4:a1:b5:96:f5:55:2b:d9:8b:0a:af: 1d:9b:24:77:d0:24:be:87:15:e2:41:9f:f9:de:7f: 8f:55:83:6c:6d:5a:40:74:cc:fa:dd:bf:4f:88:d3: 3c:69:c4:67:f3:1e:79:70:26:40:5a:53:b8:1c:93: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:4F:E1:E3:68:03:90:E3:58:1E:2A:D4:F2:D5:4F:FE:3A:21:6D X509v3 Authority Key Identifier: keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:26:69:8e:bc:89:83:1a:65:b5:af:43:42:2b:04:34:db:d0: bd:ea:7a:bb:b0:0f:f2:fc:f7:b0:16:06:3c:e7:f7:d1:01:66: 49:76:ca:53:a8:10:34:87:a8:49:f7:0d:cd:01:b2:42:3c:6c: e2:83:e1:2b:78:f5:ff:5a:d1:47:31:03:14:e0:db:0a:b6:40: 3b:c3:54:8d:bb:b9:1a:e2:7e:10:c2:f5:9d:90:71:2e:1c:3f: ec:a6:13:92:15:15:96:7d:dd:3e:7a:32:e8:22:16:bb:38:1a: d6:7d:fa:35:a2:3c:08:68:9d:8b:f4:06:75:ec:4c:67:06:49: 7c:3a:25:19:f3:4a:66:b2:45:3d:06:89:cb:59:32:72:3b:1a: 89:db:ba:2f:72:8e:43:83:5d:7d:ac:1c:13:2b:98:71:8f:e1: c4:69:74:90:4c:37:65:96:9d:96:5a:48:d1:e3:74:d5:2a:a1: 62:d6:ae:8e:2a:f4:d5:85:d6:f1:13:6f:ae:4c:ef:3a:d5:e3: b8:cc:a5:d0:11:6f:1f:50:3b:55:44:d3:68:ff:fe:33:89:f4: 41:25:52:9b:8f:f6:4b:ea:f7:af:9e:aa:20:90:0a:fa:b7:78: 40:a8:29:31:d7:ad:be:30:62:f1:38:f5:03:f6:62:67:55:70: 73:07:94:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx MEQ2NTdGRkUwHhcNMjUwNDI0MjMxNjUzWhcNMjUwNTAxMjMxNjUzWjAYMRYwFAYD VQQDEw02ODBhYzY2NS00MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8Vf1vIG4FNwR5OKJ9BhdBB88q0Gl9HXb9Ie4FqSQb23uifsTjv8fzS0d6eD +1XxdY4rE+bgprY+Wsi5+Zw/storhqfar6u7EysbaVkTfqf0UT0zQyXz0PhdifBM a/Uk3BhMQkXVK1gKBPg+bAPUNwLMN0tzkCuI46ET2498NUhTMxEh+Ss4MShLIqyC y8PHEDyoru2FMNkZlQ5bwCl7agnxnM5d/Hry68mUrUPyK/JtsaZHLYvvflglKcu2 DsENnfXo8N/l5KG1lvVVK9mLCq8dmyR30CS+hxXiQZ/53n+PVYNsbVpAdMz63b9P iNM8acRn8x55cCZAWlO4HJMPbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPET+Hj aAOQ41geKtTy1U/+OiFtMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp YTRCeVM4M21jRDBRMWxmXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkJmmOvImDGmW1r0NCKwQ029C96nq7sA/y/PewFgY85/fRAWZJdspT qBA0h6hJ9w3NAbJCPGzig+ErePX/WtFHMQMU4NsKtkA7w1SNu7ka4n4QwvWdkHEu HD/sphOSFRWWfd0+ejLoIha7OBrWffo1ojwIaJ2L9AZ17ExnBkl8OiUZ80pmskU9 BonLWTJyOxqJ27ovco5Dg119rBwTK5hxj+HEaXSQTDdllp2WWkjR43TVKqFi1q6O KvTVhdbxE2+uTO861eO4zKXQEW8fUDtVRNNo//4zifRBJVKbj/ZL6vevnqogkAr6 t3hAqCkx162+MGLxOPUD9mJnVXBzB5Rj -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:56 2025 by rpki-client