$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json) Hash identifier: 5Rxs0g4/e+GlqF8Gh6hBY5aoSkwAQms1SE+PziXLEGg= Subject key identifier: 3A:1A:4D:A6:FB:92:0A:5C:02:ED:A9:F1:77:F6:55:B2:D2:2C:67:39 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft Manifest number: 0198 Signing time: Tue 13 May 2025 02:40:47 +0000 Manifest this update: Tue 13 May 2025 02:40:46 +0000 Manifest next update: Tue 20 May 2025 02:40:46 +0000 Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: aGBVdrKhUfvjVvWKG499x1A1YhP2H4llrezDd0e3vRQ=) 2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: dWU1gPzZFM9Cw+SS2wudvR0l02XzByvndbpoX+ljoqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: May 13 02:40:46 2025 GMT Not After : May 20 02:40:46 2025 GMT Subject: CN=6822b12e-3ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:a5:82:16:8e:9d:f1:6b:87:4f:b6:11:f1: ce:62:13:42:37:3b:c9:36:89:2b:5b:2e:03:ba:3f: ee:8c:da:43:77:ea:5f:86:73:dd:d7:80:ec:aa:7f: 79:48:14:bf:b2:9b:c6:5c:6a:35:08:1d:20:d2:39: 18:fd:16:31:28:45:7f:92:73:f9:03:c0:e2:dd:4b: da:ac:74:4f:5e:c1:f6:b1:5e:8b:26:b1:5f:bb:16: d4:dd:f9:62:bc:83:92:dc:e2:38:18:be:6b:c9:69: 3a:88:ea:24:f8:3b:95:76:cf:8e:78:36:83:7d:b9: 60:a8:cd:a8:ab:0e:1a:0b:e1:f4:20:9e:05:cc:e8: 4d:81:ff:eb:95:e4:32:62:92:d0:d0:e2:c2:65:ca: 8b:a4:ce:42:29:05:eb:d3:7a:e5:3b:37:66:70:38: 6f:8f:f6:26:4a:c3:bd:0b:31:1e:7b:aa:7d:8a:5b: 64:16:7a:8b:24:e8:c3:0e:2d:08:60:d4:df:e6:d0: c5:76:39:5a:ae:a5:5e:d1:16:94:89:03:21:83:0f: 1a:26:17:57:82:5f:29:7a:91:92:68:e9:1d:b4:82: 3c:cb:46:cd:89:0a:04:a1:97:d7:11:24:98:a9:df: 29:fd:d5:46:d1:ac:95:f7:d5:40:f7:2d:2a:f1:77: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:4D:A6:FB:92:0A:5C:02:ED:A9:F1:77:F6:55:B2:D2:2C:67:39 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:c7:21:ae:2e:39:8e:d7:2b:95:4b:3e:8b:34:13:89:77:7e: 6c:36:0d:50:7e:61:f6:35:9f:bf:46:d2:46:dd:fe:74:dc:04: f7:a1:6c:84:78:fa:67:ca:94:6e:8b:4b:38:e7:f5:e5:57:7d: 6e:ef:4a:eb:c4:41:f6:26:fb:3c:88:e0:5c:7f:2f:89:0d:b4: fa:e6:f3:60:cd:53:94:19:da:67:60:03:1f:30:c7:b4:69:22: 74:5f:49:33:d6:86:34:13:a9:d4:47:66:69:46:b8:c3:b5:ce: d3:e3:a7:12:72:03:a3:8e:5f:79:1d:50:61:e5:4c:25:bc:6c: 83:07:7f:8a:01:e4:4b:34:42:5f:92:de:f8:bd:bb:1e:c1:89: b9:23:16:85:63:d4:14:bd:a6:d5:f3:b5:da:7c:cb:75:b6:d0: df:24:b4:f6:b6:15:ae:7f:73:06:6a:d9:3b:da:3c:fc:2b:2d: 88:5c:3e:b6:cd:03:41:21:23:b4:2e:77:c9:11:1d:85:3c:91: 5c:ae:82:03:e4:a5:3e:13:86:d4:1a:da:9e:49:b4:ce:3d:69: 59:60:42:bf:3d:1c:55:b3:c2:9a:09:8b:82:7c:16:6e:d8:1a: fa:d5:10:9f:1f:b0:8f:52:f9:b8:55:6d:b1:48:c3:3f:a1:b5: da:38:11:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjUwNTEzMDI0MDQ2WhcNMjUwNTIwMDI0MDQ2WjAYMRYwFAYD VQQDEw02ODIyYjEyZS0zZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R+lghaOnfFrh0+2EfHOYhNCNzvJNokrWy4Duj/ujNpDd+pfhnPd14Dsqn95 SBS/spvGXGo1CB0g0jkY/RYxKEV/knP5A8Di3UvarHRPXsH2sV6LJrFfuxbU3fli vIOS3OI4GL5ryWk6iOok+DuVds+OeDaDfblgqM2oqw4aC+H0IJ4FzOhNgf/rleQy YpLQ0OLCZcqLpM5CKQXr03rlOzdmcDhvj/YmSsO9CzEee6p9iltkFnqLJOjDDi0I YNTf5tDFdjlarqVe0RaUiQMhgw8aJhdXgl8pepGSaOkdtII8y0bNiQoEoZfXESSY qd8p/dVG0ayV99VA9y0q8XeVewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoaTab7 kgpcAu2p8Xf2VbLSLGc5MB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV bnhDYnFPd2xwbHZ5TnByUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjxyGuLjmO1yuVSz6LNBOJd35sNg1QfmH2NZ+/RtJG3f503AT3oWyE ePpnypRui0s45/XlV31u70rrxEH2Jvs8iOBcfy+JDbT65vNgzVOUGdpnYAMfMMe0 aSJ0X0kz1oY0E6nUR2ZpRrjDtc7T46cScgOjjl95HVBh5UwlvGyDB3+KAeRLNEJf kt74vbsewYm5IxaFY9QUvabV87XafMt1ttDfJLT2thWuf3MGatk72jz8Ky2IXD62 zQNBISO0LnfJER2FPJFcroID5KU+E4bUGtqeSbTOPWlZYEK/PRxVs8KaCYuCfBZu 2Br61RCfH7CPUvm4VW2xSMM/obXaOBGr -----END CERTIFICATE-----Generated at Wed May 14 10:31:36 2025 by rpki-client