$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: 5T4NE6XbTT/ZH+gsmqssRxdGOC0Sl0SerXmnPX+LHHE= Subject key identifier: 03:3A:9C:7F:75:90:C5:F6:7D:D3:57:9D:03:49:8D:35:7A:B2:52:03 Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 0277 Signing time: Fri 25 Apr 2025 01:27:50 +0000 Manifest this update: Fri 25 Apr 2025 01:27:50 +0000 Manifest next update: Fri 02 May 2025 01:27:50 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: hgm/97A0XMEFeAmxbSSYGARUbIU/SS7z430NCbgstC4=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Validity Not Before: Apr 25 01:27:50 2025 GMT Not After : May 2 01:27:50 2025 GMT Subject: CN=680ae516-4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:ea:64:4e:cd:d7:de:bd:ba:a7:ed:39:1a: 12:b4:4f:8c:ed:d0:30:32:ce:6c:aa:48:5a:a1:ae: 9d:b1:ee:18:bc:c3:66:89:61:89:31:f1:5e:d6:c5: 7e:e6:a2:09:2e:c4:ea:9d:a8:24:c2:9b:a8:f2:a9: c8:3f:07:c3:62:a2:56:39:48:29:35:da:31:3d:97: fc:8c:24:9b:f2:d7:c1:5f:3c:75:0a:8e:39:04:f4: 99:15:90:a3:64:76:94:14:65:aa:a7:a9:90:47:29: ea:6b:8e:22:68:3e:b2:31:82:5f:aa:83:f8:fc:a1: be:b4:77:ac:93:e9:7b:8f:ef:d7:4b:fe:50:5f:f6: 7b:64:f1:db:7f:07:2c:24:4c:f6:80:4c:63:02:d0: 9a:02:42:48:64:4e:3a:ef:00:fa:1c:b8:80:cc:59: 0a:9c:40:5a:45:2d:89:60:b1:c5:da:dc:ff:75:fc: 06:7c:4c:f1:5c:8b:6e:c1:f7:d8:42:85:18:04:e7: eb:8a:dd:71:91:72:54:bb:c1:72:71:7b:19:5c:44: bb:c9:47:29:d8:07:20:ff:4b:fc:b2:90:03:44:84: 12:26:e5:54:d9:e2:96:63:b5:d5:d0:a6:b6:a2:22: 51:42:4c:b7:de:84:5a:cb:e6:68:2d:6d:b9:3c:6b: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:9C:7F:75:90:C5:F6:7D:D3:57:9D:03:49:8D:35:7A:B2:52:03 X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:81:34:2a:5b:ea:ac:e3:31:93:87:4e:c1:48:2b:5a:7f:ae: 2c:30:c5:a5:10:2f:3d:06:df:45:9b:2e:3b:44:2c:24:61:ca: 1a:af:c6:b7:fe:96:b3:98:96:2e:8c:96:6e:e1:07:bd:4d:e6: 76:8f:45:44:57:0c:00:b2:59:2a:d5:07:98:e1:4c:18:f4:d3: 01:78:9a:f3:d4:5e:e8:d8:5d:db:7d:6c:98:48:fb:88:7a:9b: 7a:38:79:53:6d:45:9a:fe:02:6d:64:db:3e:f6:77:ce:e8:96: 1c:60:ea:35:2a:a1:20:d2:2a:13:63:4e:fc:58:f7:54:45:6a: 2a:d9:56:b4:15:72:ab:6e:3f:95:64:f5:cf:52:56:b4:a0:2f: d9:34:35:e1:e2:f0:b9:2a:1f:25:c8:05:b7:42:09:f8:6d:c1: fa:b1:f4:d8:96:ae:a4:ce:0f:bc:3e:69:b3:4c:d7:f6:76:6e: fc:58:9f:a5:b4:44:35:99:53:85:7e:1d:59:cd:29:d6:bd:8d: 19:c9:6c:fe:ee:89:5e:50:dd:d4:df:7e:cf:6a:00:b6:71:e0: e0:8a:22:8d:af:54:8a:88:52:3c:c8:79:88:28:77:71:c9:e7: 44:e5:72:80:d3:a9:c2:77:3d:37:d7:83:19:32:b3:63:ba:8d: c5:68:58:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjUwNDI1MDEyNzUwWhcNMjUwNTAyMDEyNzUwWjAYMRYwFAYD VQQDEw02ODBhZTUxNi00ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPfqZE7N1969uqftORoStE+M7dAwMs5sqkhaoa6dse4YvMNmiWGJMfFe1sV+ 5qIJLsTqnagkwpuo8qnIPwfDYqJWOUgpNdoxPZf8jCSb8tfBXzx1Co45BPSZFZCj ZHaUFGWqp6mQRynqa44iaD6yMYJfqoP4/KG+tHesk+l7j+/XS/5QX/Z7ZPHbfwcs JEz2gExjAtCaAkJIZE467wD6HLiAzFkKnEBaRS2JYLHF2tz/dfwGfEzxXItuwffY QoUYBOfrit1xkXJUu8FycXsZXES7yUcp2Acg/0v8spADRIQSJuVU2eKWY7XV0Ka2 oiJRQky33oRay+ZoLW25PGusLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAM6nH91 kMX2fdNXnQNJjTV6slIDMB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcgTQqW+qs4zGTh07BSCtaf64sMMWlEC89Bt9Fmy47RCwkYcoar8a3 /pazmJYujJZu4Qe9TeZ2j0VEVwwAslkq1QeY4UwY9NMBeJrz1F7o2F3bfWyYSPuI ept6OHlTbUWa/gJtZNs+9nfO6JYcYOo1KqEg0ioTY078WPdURWoq2Va0FXKrbj+V ZPXPUla0oC/ZNDXh4vC5Kh8lyAW3Qgn4bcH6sfTYlq6kzg+8PmmzTNf2dm78WJ+l tEQ1mVOFfh1ZzSnWvY0ZyWz+7oleUN3U337PagC2ceDgiiKNr1SKiFI8yHmIKHdx yedE5XKA06nCdz0314MZMrNjuo3FaFj1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:14 2025 by rpki-client