$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: +NRHA57ZTNu2RFIjJ3NHSNB/6dgmoE72qRSWEXdEb+Q= Subject key identifier: 7E:81:7B:DE:2F:32:46:BA:63:70:6A:5F:D5:20:50:B3:6A:CB:DB:86 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0280 Signing time: Sun 11 May 2025 01:09:55 +0000 Manifest this update: Sun 11 May 2025 01:09:54 +0000 Manifest next update: Sun 18 May 2025 01:09:54 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: jHC20QuXGaw/I80ZW1B4Jbq70xeVsJ+RJjFzaHIZYHI=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: May 11 01:09:54 2025 GMT Not After : May 18 01:09:54 2025 GMT Subject: CN=681ff8e2-895c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:c2:80:39:b3:ac:9c:75:3d:5c:04:b9:55: df:9d:a5:a0:8d:3f:cc:ed:82:64:d7:1c:2d:dd:5d: 1c:c2:a2:c5:ec:71:0f:f4:b3:78:85:2d:e1:fb:61: b6:f2:07:39:7d:66:96:36:c3:02:78:01:fb:93:0e: b6:b7:d8:1c:22:ee:9f:c6:5f:34:b7:52:85:f4:91: 09:43:b2:58:8c:e1:b6:1b:07:9a:11:99:ab:56:1b: e1:81:4c:0d:22:42:a5:19:8b:c1:d4:e3:31:cd:5b: 46:62:09:9c:d7:39:bc:85:d9:38:08:1b:de:1d:f7: b8:f9:0b:2f:2c:a5:77:b1:14:c1:4d:2c:23:89:97: d4:9a:ea:6f:54:85:c9:30:97:0c:28:22:29:a0:62: 3e:bf:eb:27:24:d1:8c:3f:70:48:0b:d3:7d:2a:09: 0c:06:c5:cb:af:aa:d9:65:c1:34:62:dd:8e:5c:5f: 67:af:ad:6a:49:47:6d:2a:da:96:52:d6:a8:97:88: e5:94:30:5e:42:55:fe:3a:4c:9d:d1:71:d8:c3:ec: 01:3d:dd:01:06:f3:a0:f0:88:1d:3e:e1:91:36:46: 26:e8:26:5e:2f:39:7c:92:20:71:1e:09:2f:37:53: d7:f3:12:aa:69:70:5a:31:22:a3:5c:dc:6b:b3:13: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:81:7B:DE:2F:32:46:BA:63:70:6A:5F:D5:20:50:B3:6A:CB:DB:86 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:3c:31:15:fa:85:c8:45:1f:ab:31:11:05:e6:26:e2:e2:9b: 6e:99:a5:f8:40:ff:0e:fc:d2:75:09:a5:d8:d7:fb:50:2e:6d: bb:31:aa:cb:2e:d8:a4:7f:b2:0f:14:96:7b:50:ca:4d:f8:83: 45:28:14:54:db:ea:c2:cf:48:22:08:64:13:54:b7:e6:88:d4: bd:a2:bc:15:51:6c:fa:5c:40:9c:47:af:15:a5:ef:24:0a:12: e2:34:c0:f2:fc:b4:b3:71:ee:25:e8:43:6e:d2:6b:c6:b8:22: 4b:17:aa:47:aa:ca:a3:15:d4:20:43:03:8e:f7:75:d5:a4:4c: c1:2c:c5:ae:19:49:a7:19:3f:57:02:d9:e9:45:ab:7d:4e:e5: da:e5:22:a2:eb:0b:3b:f2:35:58:aa:8c:90:20:58:45:a3:d7: b2:82:6c:07:d4:a1:48:0b:05:dd:0a:4b:90:e2:b3:3e:c4:bb: e1:3d:ad:68:2b:6e:1d:fa:06:7a:cb:f2:0b:88:fe:2f:22:00: 19:7a:27:bb:37:32:9e:69:17:cb:b3:99:4b:09:03:02:67:45: 48:2a:7f:0a:5e:7a:4f:23:84:5a:f8:9f:c9:bd:e5:89:cb:c4: 8a:b9:ea:c7:fa:58:88:ff:f3:b8:16:cc:b7:e1:7c:46:d0:25: 77:80:2b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUwNTExMDEwOTU0WhcNMjUwNTE4MDEwOTU0WjAYMRYwFAYD VQQDEw02ODFmZjhlMi04OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ObCgDmzrJx1PVwEuVXfnaWgjT/M7YJk1xwt3V0cwqLF7HEP9LN4hS3h+2G2 8gc5fWaWNsMCeAH7kw62t9gcIu6fxl80t1KF9JEJQ7JYjOG2GweaEZmrVhvhgUwN IkKlGYvB1OMxzVtGYgmc1zm8hdk4CBveHfe4+QsvLKV3sRTBTSwjiZfUmupvVIXJ MJcMKCIpoGI+v+snJNGMP3BIC9N9KgkMBsXLr6rZZcE0Yt2OXF9nr61qSUdtKtqW Utaol4jllDBeQlX+Okyd0XHYw+wBPd0BBvOg8IgdPuGRNkYm6CZeLzl8kiBxHgkv N1PX8xKqaXBaMSKjXNxrsxPlWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6Be94v Mka6Y3BqX9UgULNqy9uGMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWPDEV+oXIRR+rMREF5ibi4ptumaX4QP8O/NJ1CaXY1/tQLm27MarL Ltikf7IPFJZ7UMpN+INFKBRU2+rCz0giCGQTVLfmiNS9orwVUWz6XECcR68Vpe8k ChLiNMDy/LSzce4l6ENu0mvGuCJLF6pHqsqjFdQgQwOO93XVpEzBLMWuGUmnGT9X AtnpRat9TuXa5SKi6ws78jVYqoyQIFhFo9eygmwH1KFICwXdCkuQ4rM+xLvhPa1o K24d+gZ6y/ILiP4vIgAZeie7NzKeaRfLs5lLCQMCZ0VIKn8KXnpPI4Ra+J/JveWJ y8SKuerH+liI//O4Fsy34XxG0CV3gCvh -----END CERTIFICATE-----Generated at Mon May 12 19:44:13 2025 by rpki-client