$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: sk2WobJR08cEiHsKdDBNJHlMu6DQqmHpcLVu8AvdN14= Subject key identifier: 5D:61:6E:CA:53:F3:F1:9E:11:77:63:FF:27:1B:12:2E:67:5B:44:A8 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 0643 Signing time: Mon 12 May 2025 22:22:58 +0000 Manifest this update: Mon 12 May 2025 22:22:57 +0000 Manifest next update: Mon 19 May 2025 22:22:57 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: FM5k0Muhx8T2p0IUxRXs3KCJuVi4uCvmq85rHC4WolM=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: May 12 22:22:57 2025 GMT Not After : May 19 22:22:57 2025 GMT Subject: CN=682274c1-4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:75:46:75:f1:b1:71:0c:f3:38:56:80:c4: 1e:11:35:e4:43:04:3f:6f:2b:cf:99:63:c9:27:ee: cc:53:9e:33:e6:56:b4:20:d0:96:76:92:53:a4:84: 08:96:a0:91:6f:e9:52:df:3c:80:be:98:df:8c:83: e7:8c:3d:5a:06:c4:81:d2:c2:ee:de:5e:d4:57:8e: 2d:9e:fd:b6:ce:ba:34:6d:87:bd:97:21:6a:1b:bd: 61:6e:16:f3:a3:a0:bc:40:37:9e:4c:ea:d8:5b:f5: 5e:49:8e:42:aa:1f:5e:e2:89:0d:81:5b:0e:92:4e: 8f:91:4f:ae:b5:7f:61:31:31:2d:53:eb:bc:a6:76: f3:6f:25:2f:2d:d2:ab:4d:cb:01:4a:10:c6:c4:c4: 5f:7b:7c:e9:90:2b:d3:63:69:19:eb:96:5f:57:9a: eb:c1:5f:bc:5e:70:3b:37:2d:73:ae:5f:bc:99:8a: 33:f4:87:27:fa:b3:78:e9:fc:f0:51:1d:b0:a1:fc: 28:a1:c9:83:ef:97:fa:77:b6:7c:bc:07:38:8c:c7: 2e:b5:90:e4:9a:20:0a:a5:df:9c:6b:39:08:11:78: ab:3b:d7:f3:02:ff:02:e0:0f:29:06:e5:42:6c:60: 9f:a7:91:fe:b2:3d:eb:27:49:b0:39:66:e2:16:1a: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:61:6E:CA:53:F3:F1:9E:11:77:63:FF:27:1B:12:2E:67:5B:44:A8 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f5:de:b1:d3:3d:79:24:cf:3d:b1:e6:26:b9:70:26:b5:fc: 09:96:9d:77:b5:20:93:7f:0c:bb:84:98:41:8b:99:34:97:fe: d1:1f:43:51:65:6d:b2:d6:a1:60:ed:12:de:41:ed:d5:9a:c7: 39:f1:9c:0b:71:e9:e6:50:71:d2:c6:d7:5a:be:6a:41:7f:7b: f5:fa:56:6b:db:a3:30:9a:dd:d8:01:04:41:bc:29:30:35:fb: b0:f1:f1:e1:13:c6:d8:2a:58:08:5f:cc:7d:65:e3:67:83:2e: c8:fa:86:62:e1:dd:b7:16:30:c0:34:39:4c:c7:31:0e:11:88: d0:a6:e3:87:14:d9:fc:0c:87:04:b6:23:7d:e1:b6:11:03:3c: 70:14:37:ff:5d:6c:0f:28:88:dc:fe:cb:b1:fa:17:3b:23:b7: e9:98:e4:bf:ef:e1:72:81:d8:d3:47:a4:0b:a2:1a:f2:b6:e9: 29:a2:4e:31:c0:63:10:dc:17:7f:d6:a9:9d:a5:38:e0:bf:d8: d8:b3:6d:ec:e0:24:80:a3:bf:e9:21:74:4c:22:3a:ab:9c:8d: fe:47:25:db:a9:91:63:ad:d9:a0:8c:aa:95:b5:54:cc:8d:2b: 67:3a:5f:f5:36:2f:ff:a5:72:a9:48:03:81:2e:1e:5b:7f:d3: 58:fc:d3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUwNTEyMjIyMjU3WhcNMjUwNTE5MjIyMjU3WjAYMRYwFAYD VQQDEw02ODIyNzRjMS00YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx11RnXxsXEM8zhWgMQeETXkQwQ/byvPmWPJJ+7MU54z5la0INCWdpJTpIQI lqCRb+lS3zyAvpjfjIPnjD1aBsSB0sLu3l7UV44tnv22zro0bYe9lyFqG71hbhbz o6C8QDeeTOrYW/VeSY5Cqh9e4okNgVsOkk6PkU+utX9hMTEtU+u8pnbzbyUvLdKr TcsBShDGxMRfe3zpkCvTY2kZ65ZfV5rrwV+8XnA7Ny1zrl+8mYoz9Icn+rN46fzw UR2wofwoocmD75f6d7Z8vAc4jMcutZDkmiAKpd+cazkIEXirO9fzAv8C4A8pBuVC bGCfp5H+sj3rJ0mwOWbiFhrwVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1hbspT 8/GeEXdj/ycbEi5nW0SoMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY9d6x0z15JM89seYmuXAmtfwJlp13tSCTfwy7hJhBi5k0l/7RH0NR ZW2y1qFg7RLeQe3Vmsc58ZwLcenmUHHSxtdavmpBf3v1+lZr26Mwmt3YAQRBvCkw Nfuw8fHhE8bYKlgIX8x9ZeNngy7I+oZi4d23FjDANDlMxzEOEYjQpuOHFNn8DIcE tiN94bYRAzxwFDf/XWwPKIjc/sux+hc7I7fpmOS/7+FygdjTR6QLohrytukpok4x wGMQ3Bd/1qmdpTjgv9jYs23s4CSAo7/pIXRMIjqrnI3+RyXbqZFjrdmgjKqVtVTM jStnOl/1Ni//pXKpSAOBLh5bf9NY/NNy -----END CERTIFICATE-----Generated at Tue May 13 11:58:57 2025 by rpki-client