$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: TfeJXgwvXmG202De1D1SdgpVsI3Xf66iJZMEoC8fCLA= Subject key identifier: 61:14:F7:CF:C5:28:77:DD:52:C1:65:30:8D:69:AE:C1:5B:1A:49:9F Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 1232 Signing time: Thu 24 Apr 2025 19:08:03 +0000 Manifest this update: Thu 24 Apr 2025 19:08:02 +0000 Manifest next update: Thu 01 May 2025 19:08:02 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: Gq2ZaKA5McVmuYNQYoNZReiR+KmRTbfQ34jCX2auxkw=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 5XwqomZ9BLQ4EjKkc4C/QpwLGFRZM50AcN0fv78p3Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: Apr 24 19:08:02 2025 GMT Not After : May 1 19:08:02 2025 GMT Subject: CN=680a8c12-e16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:1d:c0:cf:24:5d:6f:2c:8d:65:60:32:cc: 54:36:3e:57:07:48:0c:d1:85:87:13:35:a0:41:1b: 13:6a:a0:18:36:08:df:f8:a9:c9:2e:a7:87:32:e8: 1f:7e:b2:69:89:fc:e3:5e:0e:3a:74:cb:5d:c5:2c: b4:02:a8:57:6e:36:6a:f7:2e:c7:67:8d:f2:be:23: 8d:6f:3e:39:c0:f6:b0:9f:af:b8:ed:20:2a:03:9a: 28:ca:9e:35:7f:c7:b3:b3:71:f2:3b:15:bd:6c:47: 2e:85:f2:75:15:26:b8:21:4e:5b:12:76:8d:02:f8: 0a:9b:ec:68:87:5f:4a:8f:66:fb:2b:16:85:c4:2c: e5:34:27:fb:85:03:de:8f:0b:91:c3:4a:d6:ff:7d: 0b:8b:4a:41:6a:05:a6:bf:c0:c7:a2:a9:9e:00:3c: a6:bf:fa:e3:91:7e:22:07:28:b7:5b:64:04:0a:0d: 95:90:38:93:72:79:f8:69:ac:ca:c4:25:22:30:f0: 58:58:85:60:de:f7:93:99:06:cf:2f:f5:3c:65:d9: 02:b4:00:04:f6:18:50:95:84:99:a4:05:28:ec:c7: 8e:6e:0f:16:8d:b0:56:d0:8d:f9:7f:07:92:01:68: 7b:8e:c9:22:bf:91:a3:ce:97:44:29:06:d2:14:28: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:14:F7:CF:C5:28:77:DD:52:C1:65:30:8D:69:AE:C1:5B:1A:49:9F X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:2e:b3:8f:d9:45:02:fe:d7:69:40:95:15:f4:b0:0a:b4:5f: 5c:7d:17:6d:29:a5:78:2c:56:f3:b1:25:3f:a0:b6:bd:b4:81: 45:46:4f:74:01:b7:96:b7:65:3c:2f:70:ab:cb:06:14:c6:56: 80:b5:9f:f9:1d:02:f5:cc:a8:95:e0:3b:4b:19:35:42:6f:11: 16:b7:39:f6:ff:e0:64:5c:80:6d:0b:21:70:59:e3:70:d8:d8: af:d9:ac:b3:1f:18:65:b9:d6:ef:5d:51:1f:0a:1e:f3:e1:34: de:1b:cd:35:5c:29:ea:2c:ba:f0:52:46:7c:d6:51:39:e6:a0: 5c:0c:e1:2a:08:fd:0b:06:c0:ba:4f:2b:02:a3:6b:4c:13:6b: 5b:40:50:3b:9b:5b:63:bc:42:1c:fb:3b:10:c6:7e:e8:ae:cb: ee:cd:8f:f0:71:fa:ca:be:8d:ae:74:f9:e4:37:bc:62:ea:7f: 07:ec:4f:ff:60:26:4f:08:65:02:fb:25:36:e6:70:08:c4:96: 07:14:48:04:89:69:48:2f:da:21:1a:d6:ac:26:3c:4c:69:57: 8f:5f:c0:27:e1:8e:b1:c5:21:48:d5:0e:d5:4d:1d:f2:e7:0f: b2:33:d0:46:8e:be:44:29:2d:23:72:d4:f6:a9:42:fa:05:19: 80:1d:9d:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjUwNDI0MTkwODAyWhcNMjUwNTAxMTkwODAyWjAYMRYwFAYD VQQDEw02ODBhOGMxMi1lMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VwdwM8kXW8sjWVgMsxUNj5XB0gM0YWHEzWgQRsTaqAYNgjf+KnJLqeHMugf frJpifzjXg46dMtdxSy0AqhXbjZq9y7HZ43yviONbz45wPawn6+47SAqA5ooyp41 f8ezs3HyOxW9bEcuhfJ1FSa4IU5bEnaNAvgKm+xoh19Kj2b7KxaFxCzlNCf7hQPe jwuRw0rW/30Li0pBagWmv8DHoqmeADymv/rjkX4iByi3W2QECg2VkDiTcnn4aazK xCUiMPBYWIVg3veTmQbPL/U8ZdkCtAAE9hhQlYSZpAUo7MeObg8WjbBW0I35fweS AWh7jskiv5GjzpdEKQbSFCiQZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEU98/F KHfdUsFlMI1prsFbGkmfMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPLrOP2UUC/tdpQJUV9LAKtF9cfRdtKaV4LFbzsSU/oLa9tIFFRk90 AbeWt2U8L3CrywYUxlaAtZ/5HQL1zKiV4DtLGTVCbxEWtzn2/+BkXIBtCyFwWeNw 2Niv2ayzHxhludbvXVEfCh7z4TTeG801XCnqLLrwUkZ81lE55qBcDOEqCP0LBsC6 TysCo2tME2tbQFA7m1tjvEIc+zsQxn7orsvuzY/wcfrKvo2udPnkN7xi6n8H7E// YCZPCGUC+yU25nAIxJYHFEgEiWlIL9ohGtasJjxMaVePX8An4Y6xxSFI1Q7VTR3y 5w+yM9BGjr5EKS0jctT2qUL6BRmAHZ3N -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:29 2025 by rpki-client