$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: HLg88NyQgM8oYutdt82+AgsvEMzu++z8VtZvaKQz8Oc= Subject key identifier: D7:09:B1:37:80:54:B8:0C:01:67:26:FB:87:48:A3:61:1B:EB:7C:EE Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0445 Signing time: Thu 15 May 2025 00:17:42 +0000 Manifest this update: Thu 15 May 2025 00:17:41 +0000 Manifest next update: Thu 22 May 2025 00:17:41 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: bPdHyo9Id8xjcW4nFXJmkI9Mz48z9TaH9Nz6O86EABw=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: May 15 00:17:41 2025 GMT Not After : May 22 00:17:41 2025 GMT Subject: CN=682532a5-dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:0a:c2:1e:ea:54:9c:e5:49:36:bc:fe:a6: ec:6e:02:9b:05:45:ae:e9:fe:c4:02:40:6a:86:fd: f0:ca:84:16:d6:0f:ae:bd:b9:e2:82:af:df:fe:40: 02:13:34:17:fd:2d:70:fa:04:70:41:59:cf:e8:8d: a1:f1:5c:6d:84:f3:19:71:6d:a0:92:b0:0c:b2:00: 0d:2d:27:42:44:14:4b:45:8a:76:54:cb:f2:b9:c1: 61:3f:8d:c1:64:eb:87:d8:2f:d5:cb:c9:01:16:f8: aa:33:06:ff:02:8e:50:7b:4f:57:12:e6:a8:d5:cf: 1c:d4:45:a5:cd:9a:0e:fd:25:b3:14:f3:e1:d7:10: f4:be:3f:be:87:5a:a2:01:bc:aa:ab:c7:31:79:08: 23:ff:fe:66:a9:a2:d4:77:b4:e4:d0:3b:7d:ef:b6: b3:94:fd:32:ac:64:51:33:88:41:7d:c5:de:b6:5f: 1a:14:a6:1f:2c:2d:6f:ca:4b:5b:8b:aa:ea:27:b6: 26:05:c9:91:52:c1:03:09:ec:e0:f7:81:54:f3:4c: 85:85:a9:9d:da:ea:0b:5a:7c:cd:79:0a:25:4d:b3: 9c:21:33:c4:03:e5:53:d2:11:85:d0:ff:52:8a:7c: 1f:55:2d:31:b3:b3:02:be:c7:dc:b5:7e:cb:4e:9d: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:B1:37:80:54:B8:0C:01:67:26:FB:87:48:A3:61:1B:EB:7C:EE X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:28:e7:bc:f0:d2:df:39:01:e1:3b:87:c7:c6:6f:2a:a9:74: 54:98:76:f8:c2:69:30:55:26:1d:55:1e:b1:77:ea:1d:1f:a2: 84:ab:88:3a:78:c0:cc:c4:58:2d:dc:f8:a0:30:47:e5:1b:48: a1:dd:21:47:12:0c:2a:6b:8b:3f:b3:67:8e:eb:09:21:9b:d3: 31:a4:65:37:53:d7:86:ca:38:4f:4c:76:c4:1c:e9:6b:be:0f: 37:1d:5e:a7:5c:c6:4a:c4:4e:09:af:97:cb:ef:47:6e:5e:64: 72:d7:cd:c9:1d:7b:c1:df:f7:ea:a2:a6:70:4d:f8:20:48:f8: a7:d0:a5:2a:d6:b1:91:5f:4c:9b:67:f1:18:e5:09:03:a7:78: a3:3c:e4:5a:28:fa:db:c9:4e:17:85:38:0f:45:a7:68:41:d8: 5e:08:b5:d4:ef:10:d4:79:dd:24:f5:97:29:7a:e9:4c:54:79: b6:a3:66:ea:f1:82:bb:3c:2d:c3:e5:26:54:32:af:f3:ed:4c: bf:cb:4a:4e:13:04:de:32:f5:a7:a3:2d:e0:96:bb:b8:99:15: 34:0a:a3:49:ff:eb:b7:bd:d1:80:02:39:58:cc:04:03:8f:df: f4:d0:16:28:f1:db:53:01:8a:9b:c4:ea:a8:78:96:5a:de:77: 8b:42:5b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwNTE1MDAxNzQxWhcNMjUwNTIyMDAxNzQxWjAYMRYwFAYD VQQDEw02ODI1MzJhNS1kZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKQKwh7qVJzlSTa8/qbsbgKbBUWu6f7EAkBqhv3wyoQW1g+uvbnigq/f/kAC EzQX/S1w+gRwQVnP6I2h8VxthPMZcW2gkrAMsgANLSdCRBRLRYp2VMvyucFhP43B ZOuH2C/Vy8kBFviqMwb/Ao5Qe09XEuao1c8c1EWlzZoO/SWzFPPh1xD0vj++h1qi Abyqq8cxeQgj//5mqaLUd7Tk0Dt977azlP0yrGRRM4hBfcXetl8aFKYfLC1vyktb i6rqJ7YmBcmRUsEDCezg94FU80yFhamd2uoLWnzNeQolTbOcITPEA+VT0hGF0P9S inwfVS0xs7MCvsfctX7LTp2e7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcJsTeA VLgMAWcm+4dIo2Eb63zuMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KOe88NLfOQHhO4fHxm8qqXRUmHb4wmkwVSYdVR6xd+odH6KEq4g6 eMDMxFgt3PigMEflG0ih3SFHEgwqa4s/s2eO6wkhm9MxpGU3U9eGyjhPTHbEHOlr vg83HV6nXMZKxE4Jr5fL70duXmRy183JHXvB3/fqoqZwTfggSPin0KUq1rGRX0yb Z/EY5QkDp3ijPORaKPrbyU4XhTgPRadoQdheCLXU7xDUed0k9ZcpeulMVHm2o2bq 8YK7PC3D5SZUMq/z7Uy/y0pOEwTeMvWnoy3glru4mRU0CqNJ/+u3vdGAAjlYzAQD j9/00BYo8dtTAYqbxOqoeJZa3neLQluu -----END CERTIFICATE-----Generated at Fri May 16 05:28:38 2025 by rpki-client