$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: k1tHmSjkyYzGV9clq5IRU28KObz4zwjVeXOks8wV4x4= Subject key identifier: BD:6C:9E:6A:D8:4E:61:8C:1A:95:92:BA:1D:F2:B7:4B:42:E2:8A:F6 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: 89 Signing time: Tue 13 May 2025 05:44:07 +0000 Manifest this update: Tue 13 May 2025 05:44:07 +0000 Manifest next update: Tue 20 May 2025 05:44:07 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: QLm8dfd2jQIwEW4PxHjk0Ub1jE0QCLAmvGPibublS1s=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: zTIt7VVx9LOh+fElZbmBDVws/qIJ7/N6iFJRXVOkuO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: May 13 05:44:07 2025 GMT Not After : May 20 05:44:07 2025 GMT Subject: CN=6822dc27-e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:e9:b0:b6:0f:26:fc:b8:78:e3:02:3c:89: 1b:da:ab:cd:f0:da:21:90:b9:fa:66:d3:d2:81:3d: ac:e8:f6:57:be:26:f2:bd:3f:11:13:e4:b7:e4:d7: 89:a1:c4:12:16:1b:5b:0a:fa:62:60:f3:26:cd:16: e5:ef:04:04:d0:63:c3:df:33:71:c4:89:9b:86:a8: 43:b4:2d:bb:79:a2:e4:00:96:83:0a:9b:e8:d7:87: e1:21:40:04:13:4a:62:21:1b:ae:35:3c:26:c6:bb: 02:c5:54:b5:05:49:be:b4:ea:76:3f:56:99:10:d7: d3:71:7d:f1:66:1a:7d:49:12:a9:ae:78:00:7b:7b: 08:a1:11:6a:b8:1f:1a:be:4e:6f:93:d8:7d:f7:63: 4d:79:55:3d:d7:0e:6c:42:66:ed:80:66:7c:a1:0a: 21:01:0e:3c:da:b3:c3:e7:fa:7e:29:4a:e5:55:65: 6f:fd:9a:9e:60:42:8a:a6:4a:da:bb:b1:b7:c4:68: 7e:53:cb:5d:b7:fb:c7:8f:41:bf:80:55:c4:1b:12: e3:45:81:d6:f5:ca:9e:fc:b0:a2:04:be:f5:44:f3: f9:4e:72:e8:44:fe:92:9a:ea:49:f2:a0:5a:a1:98: 8b:03:c8:f2:1d:20:ff:43:da:fc:e7:0f:eb:36:09: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:9E:6A:D8:4E:61:8C:1A:95:92:BA:1D:F2:B7:4B:42:E2:8A:F6 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:10:a7:5f:6d:96:e4:bb:7f:ca:8b:f9:cb:8e:8e:6b:5c:75: 5b:f3:47:c7:56:1e:79:a8:0b:ba:02:16:52:65:09:db:b2:06: 21:f8:9b:16:55:1c:37:dd:a1:0e:8c:53:e1:9d:d2:b7:ac:28: fd:3a:48:66:86:9a:d6:ee:6e:e2:5c:9e:a9:c9:f2:10:20:1f: 4c:ba:e8:f0:79:4f:91:d3:4f:3a:a4:3f:99:dd:ae:3a:a3:85: 75:a8:f0:a2:12:66:8f:b7:6d:61:53:08:7c:1b:7a:9a:ce:11: 06:6a:70:37:c4:a1:9c:2c:c0:f5:81:f7:9a:6d:9a:b3:b7:18: 1d:4b:63:d5:fe:0b:72:59:32:59:a0:ba:98:90:0e:3b:a5:e9: 60:03:a2:b7:1d:fd:3d:a1:3e:76:4d:4a:55:a5:1c:b9:a6:b0: 94:fe:b1:bb:3b:2f:78:d8:90:27:34:f6:96:43:a2:62:e5:c2: 32:07:a8:7a:38:13:05:51:16:8e:97:2a:14:e4:53:a3:a5:28: 5c:7a:a1:2e:4d:86:4a:2c:83:ce:ac:a4:03:07:d2:4e:93:0d: bd:60:09:fd:5f:10:49:fb:d7:d7:17:4c:94:e6:f3:17:fa:19: 98:d9:74:2d:83:ae:e5:82:a4:73:61:bf:41:55:14:35:b4:26: d1:87:5e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwNTEzMDU0NDA3WhcNMjUwNTIwMDU0NDA3WjAYMRYwFAYD VQQDEw02ODIyZGMyNy1lNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyPpsLYPJvy4eOMCPIkb2qvN8NohkLn6ZtPSgT2s6PZXvibyvT8RE+S35NeJ ocQSFhtbCvpiYPMmzRbl7wQE0GPD3zNxxImbhqhDtC27eaLkAJaDCpvo14fhIUAE E0piIRuuNTwmxrsCxVS1BUm+tOp2P1aZENfTcX3xZhp9SRKprngAe3sIoRFquB8a vk5vk9h992NNeVU91w5sQmbtgGZ8oQohAQ482rPD5/p+KUrlVWVv/ZqeYEKKpkra u7G3xGh+U8tdt/vHj0G/gFXEGxLjRYHW9cqe/LCiBL71RPP5TnLoRP6SmupJ8qBa oZiLA8jyHSD/Q9r85w/rNgm9mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1snmrY TmGMGpWSuh3yt0tC4or2MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXEKdfbZbku3/Ki/nLjo5rXHVb80fHVh55qAu6AhZSZQnbsgYh+JsW VRw33aEOjFPhndK3rCj9OkhmhprW7m7iXJ6pyfIQIB9MuujweU+R0086pD+Z3a46 o4V1qPCiEmaPt21hUwh8G3qazhEGanA3xKGcLMD1gfeabZqztxgdS2PV/gtyWTJZ oLqYkA47pelgA6K3Hf09oT52TUpVpRy5prCU/rG7Oy942JAnNPaWQ6Ji5cIyB6h6 OBMFURaOlyoU5FOjpShceqEuTYZKLIPOrKQDB9JOkw29YAn9XxBJ+9fXF0yU5vMX +hmY2XQtg67lgqRzYb9BVRQ1tCbRh14z -----END CERTIFICATE-----Generated at Wed May 14 15:21:41 2025 by rpki-client