$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: cU/WF3oFc8i3tWsFBRz5oXwAkeH/4IepwPuIUC2XZ6E= Subject key identifier: 18:BC:CB:54:70:C7:34:B2:67:58:2E:6C:14:BF:0B:A8:62:4C:09:D1 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D05 Signing time: Thu 24 Apr 2025 18:02:52 +0000 Manifest this update: Thu 24 Apr 2025 18:02:51 +0000 Manifest next update: Thu 01 May 2025 18:02:51 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: ybtm/KR4tBw8cQTcUSxp1ttpydcDrTueS8tnVuKu8DM=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Apr 24 18:02:51 2025 GMT Not After : May 1 18:02:51 2025 GMT Subject: CN=680a7ccb-a474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:e3:2c:81:ed:35:45:f1:00:2a:e2:be:97: 86:a4:e5:87:1b:2d:41:25:99:42:57:2d:a8:5e:92: 43:b5:47:76:0e:7a:28:20:44:0d:39:28:8e:70:11: 65:85:ee:f0:3a:15:86:25:9f:aa:36:8c:09:9b:e7: d8:fa:42:0b:6c:14:27:7c:11:25:df:6d:35:51:36: 07:8b:3e:3c:0b:99:3c:99:89:91:20:df:e4:f0:5d: 1e:bd:45:a4:b4:95:f5:84:69:c7:34:9a:36:6d:55: 1e:e9:cb:9e:51:e3:3a:c0:c9:bc:d5:72:33:fa:93: fd:f1:7a:e6:a8:c9:12:b9:ee:56:9d:bd:c5:79:e6: e8:f5:11:74:e7:8c:c1:68:13:c3:2c:4a:e5:f0:2d: 34:fd:57:8e:47:d8:e2:5a:8e:7b:af:a9:5b:db:8a: 81:19:1b:a3:7f:b0:24:8a:be:13:4f:5e:43:98:cf: 20:ac:db:dd:3f:71:0c:a3:8c:ba:0e:b8:5b:99:d4: 9a:a1:a3:5a:bb:15:fb:37:6b:54:01:11:f9:a8:0d: 5e:47:b7:ed:9b:27:86:a3:94:34:5e:a8:74:fe:00: 50:66:9c:51:26:5d:55:e9:51:d1:6f:d4:17:bc:c3: 50:75:f0:77:d4:e5:d0:12:09:b8:dd:ce:3c:b7:2e: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BC:CB:54:70:C7:34:B2:67:58:2E:6C:14:BF:0B:A8:62:4C:09:D1 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c0:3f:4f:eb:97:2e:45:e2:99:b3:1f:0a:5e:c6:fa:07:f3: 5c:51:d7:42:02:a8:65:40:b0:65:18:fb:da:d5:91:52:22:f5: e9:c3:40:93:b7:75:4d:2f:b9:40:a5:4c:0a:66:49:a1:56:d3: 8a:96:12:bd:e6:77:49:c1:69:bb:13:4e:10:24:08:4e:d0:48: c0:5c:a0:6d:ae:d7:73:b7:a2:59:cf:07:3f:5f:42:d6:43:5c: b8:b1:13:ac:2b:35:3a:7a:96:ea:e1:08:c5:ab:85:4a:95:d1: 30:c3:85:f7:bc:16:70:3b:31:f3:32:55:b7:f8:29:f1:f1:f1: c6:65:fa:b2:1b:cc:5f:e3:2f:0b:f0:9b:d8:07:d3:eb:95:46: a9:56:9c:55:c7:94:ee:e4:b4:de:a6:13:61:a7:58:fe:2c:dc: 00:b8:03:1c:9e:1c:3a:97:4c:73:5b:13:98:14:a3:85:f0:4d: f1:20:ff:86:d0:59:c1:c1:c2:ba:5e:f9:e5:6a:e1:bc:6b:86: 2b:ab:53:fc:03:54:b1:df:82:63:bf:3d:ed:f1:d0:9d:ea:7c: c4:e6:e6:a1:61:87:01:0e:74:56:10:7a:07:d3:7e:8b:7c:e8: fc:4b:62:4d:69:92:0a:51:52:31:34:2b:7f:37:cb:89:fe:62: 55:51:17:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUwNDI0MTgwMjUxWhcNMjUwNTAxMTgwMjUxWjAYMRYwFAYD VQQDEw02ODBhN2NjYi1hNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOfjLIHtNUXxACrivpeGpOWHGy1BJZlCVy2oXpJDtUd2DnooIEQNOSiOcBFl he7wOhWGJZ+qNowJm+fY+kILbBQnfBEl3201UTYHiz48C5k8mYmRIN/k8F0evUWk tJX1hGnHNJo2bVUe6cueUeM6wMm81XIz+pP98XrmqMkSue5Wnb3Feebo9RF054zB aBPDLErl8C00/VeOR9jiWo57r6lb24qBGRujf7Akir4TT15DmM8grNvdP3EMo4y6 DrhbmdSaoaNauxX7N2tUARH5qA1eR7ftmyeGo5Q0Xqh0/gBQZpxRJl1V6VHRb9QX vMNQdfB31OXQEgm43c48ty6YvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi8y1Rw xzSyZ1gubBS/C6hiTAnRMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBawD9P65cuReKZsx8KXsb6B/NcUddCAqhlQLBlGPva1ZFSIvXpw0CT t3VNL7lApUwKZkmhVtOKlhK95ndJwWm7E04QJAhO0EjAXKBtrtdzt6JZzwc/X0LW Q1y4sROsKzU6epbq4QjFq4VKldEww4X3vBZwOzHzMlW3+Cnx8fHGZfqyG8xf4y8L 8JvYB9PrlUapVpxVx5Tu5LTephNhp1j+LNwAuAMcnhw6l0xzWxOYFKOF8E3xIP+G 0FnBwcK6XvnlauG8a4Yrq1P8A1Sx34Jjvz3t8dCd6nzE5uahYYcBDnRWEHoH036L fOj8S2JNaZIKUVIxNCt/N8uJ/mJVURdH -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:05 2025 by rpki-client