$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: xKchAVkNUcrynFqFv6XinDVIV9imzjkWGu8wErawlxM= Subject key identifier: 76:D0:26:3F:48:71:B2:C7:BF:0A:A6:A0:C5:7A:9B:B5:A3:D9:11:E4 Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0E40 Signing time: Wed 14 May 2025 17:53:46 +0000 Manifest this update: Wed 14 May 2025 17:53:45 +0000 Manifest next update: Wed 21 May 2025 17:53:45 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: KkZI1AoxUmvM01dH2CCRor6057kS9rCStrJVsVfAuLc=) 2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: te7ZL6Agw1ZkmX73jXqU7VyXLTyhkC8WpICIHQQUpj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: May 14 17:53:45 2025 GMT Not After : May 21 17:53:45 2025 GMT Subject: CN=6824d8aa-00ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:f5:15:fb:36:1f:da:2e:bb:33:2d:c2:d6: 66:88:14:f5:80:2b:08:e8:2e:9d:ca:85:2b:09:b5: 4a:61:35:9b:39:f3:c3:c6:48:84:52:8f:36:08:65: b0:79:fb:e2:d9:54:21:0f:cd:af:2f:62:be:22:b9: ec:20:53:4e:16:79:42:9c:73:7a:d3:10:8b:d4:32: c6:63:f0:59:e0:c9:ab:e5:45:ef:6b:57:a5:41:6e: 2b:7d:a8:29:56:dc:66:0e:6f:a4:68:e7:bb:a1:a6: 45:ec:a0:b5:46:10:0e:3a:b1:9c:f0:e8:14:46:db: a9:a8:66:91:84:fc:39:1b:ca:f4:0b:76:eb:c7:cb: 26:23:99:f1:e8:66:bf:1d:68:cd:0e:00:e0:99:2d: d1:42:a6:c7:4c:ed:09:32:5a:a3:cb:bd:84:01:84: 2f:8d:31:57:8b:68:65:de:3b:98:35:b3:60:03:76: 79:3e:2f:82:2a:ac:b9:cd:57:ba:89:7d:0c:1b:72: 16:89:6a:0a:ea:be:c1:2f:40:ae:71:44:1d:28:eb: 2a:25:95:80:ff:f3:5b:7f:5a:9e:4f:b4:f9:65:02: 16:94:8b:77:77:f7:42:54:5e:17:9a:d7:98:94:20: 58:2d:fd:85:37:e0:f1:8a:6b:2c:d5:01:37:e6:c7: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:26:3F:48:71:B2:C7:BF:0A:A6:A0:C5:7A:9B:B5:A3:D9:11:E4 X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e1:ec:b8:f0:b7:af:86:3d:9b:14:c5:68:f9:33:ec:2a:39: f5:08:7d:e3:9d:53:70:c4:fc:3f:fa:3f:a6:a6:41:ea:ec:8d: 89:8e:c6:39:3d:f9:10:d7:19:ab:9c:e1:a1:a6:e6:54:76:aa: ee:1b:bd:e8:18:3d:d8:8a:31:a7:d6:3c:83:b1:29:50:06:05: 18:04:db:25:0f:73:b7:29:61:82:c8:33:8b:06:89:4f:13:ee: 34:6c:ce:6c:42:08:0a:3e:b6:3a:25:79:bf:44:ad:c7:d2:a3: f3:49:d4:14:d7:b6:96:03:1b:21:15:e9:8d:49:d3:c5:7a:a8: ca:f7:2e:d0:42:f1:fa:ab:70:a1:d7:ac:74:35:60:96:92:d7: 14:b7:af:ce:86:d2:83:a4:11:60:c9:8e:93:b8:5c:29:5b:b7: ef:5d:3b:94:57:51:11:38:61:e6:6e:ae:fd:7c:2b:3c:da:7a: 6c:d8:23:f0:9e:e7:17:30:ae:1c:fc:b0:e7:40:9b:6b:72:05: 3c:95:e8:cb:a9:02:3e:fd:cd:6a:50:cd:a2:63:9c:92:d8:9f: f9:9a:7e:df:74:1f:80:e2:fe:80:dc:c3:a9:14:ad:b8:b0:ee: 77:c7:cf:13:bd:66:2f:67:9b:10:48:65:ff:bc:db:87:9d:2d: 11:02:95:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjUwNTE0MTc1MzQ1WhcNMjUwNTIxMTc1MzQ1WjAYMRYwFAYD VQQDEw02ODI0ZDhhYS0wMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR/1Ffs2H9ouuzMtwtZmiBT1gCsI6C6dyoUrCbVKYTWbOfPDxkiEUo82CGWw efvi2VQhD82vL2K+IrnsIFNOFnlCnHN60xCL1DLGY/BZ4Mmr5UXva1elQW4rfagp VtxmDm+kaOe7oaZF7KC1RhAOOrGc8OgURtupqGaRhPw5G8r0C3brx8smI5nx6Ga/ HWjNDgDgmS3RQqbHTO0JMlqjy72EAYQvjTFXi2hl3juYNbNgA3Z5Pi+CKqy5zVe6 iX0MG3IWiWoK6r7BL0CucUQdKOsqJZWA//Nbf1qeT7T5ZQIWlIt3d/dCVF4XmteY lCBYLf2FN+Dximss1QE35se0dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbQJj9I cbLHvwqmoMV6m7Wj2RHkMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG4ey48Levhj2bFMVo+TPsKjn1CH3jnVNwxPw/+j+mpkHq7I2JjsY5 PfkQ1xmrnOGhpuZUdqruG73oGD3YijGn1jyDsSlQBgUYBNslD3O3KWGCyDOLBolP E+40bM5sQggKPrY6JXm/RK3H0qPzSdQU17aWAxshFemNSdPFeqjK9y7QQvH6q3Ch 16x0NWCWktcUt6/OhtKDpBFgyY6TuFwpW7fvXTuUV1EROGHmbq79fCs82nps2CPw nucXMK4c/LDnQJtrcgU8lejLqQI+/c1qUM2iY5yS2J/5mn7fdB+A4v6A3MOpFK24 sO53x88TvWYvZ5sQSGX/vNuHnS0RApXP -----END CERTIFICATE-----Generated at Thu May 15 06:52:38 2025 by rpki-client