$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: +E8nBn4siJcd2Wo5VHyDvfbXKjWtBbWrhGQ6UOtDbvM= Subject key identifier: 7B:11:DC:48:A8:98:E4:20:E2:65:66:47:3A:4D:A9:14:9C:39:F2:D4 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 04EC Signing time: Mon 12 May 2025 23:32:19 +0000 Manifest this update: Mon 12 May 2025 23:32:19 +0000 Manifest next update: Mon 19 May 2025 23:32:19 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: Ya6BeWiU8CgMFodD6yrMJu2SMQt9gPtjW3Np4k0F9cY=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: May 12 23:32:19 2025 GMT Not After : May 19 23:32:19 2025 GMT Subject: CN=68228503-d2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:a8:6e:58:5c:e2:59:6a:74:d3:b1:5a:a5: 2f:60:05:8d:7f:71:52:57:63:99:bd:57:03:44:09: 1d:bc:e1:56:cc:2f:85:c2:13:7e:2c:01:aa:47:bb: 3a:4f:2f:0c:17:9b:f6:f3:4c:b4:21:37:d2:34:27: 24:48:35:6b:75:dc:11:60:29:f4:4d:7c:42:2c:7b: ba:c9:44:ed:44:31:52:3a:24:ee:1c:4a:8c:52:49: e8:26:96:9d:28:df:1d:54:e9:5a:02:99:ad:73:28: a9:c2:9d:54:52:26:b6:06:78:87:89:85:1b:46:dd: cb:ed:06:6f:d0:41:03:c3:2a:b2:e4:5c:6c:d6:2b: b3:c4:1b:fa:ef:f1:2f:91:ea:7f:dd:c5:ff:3b:49: 7b:c9:79:2f:73:98:32:0a:0a:7a:08:a9:8f:7b:bd: 9a:97:60:77:a3:6c:8a:48:54:42:a1:35:a5:7a:f1: b0:d1:54:9f:91:ae:1c:dc:b8:da:b0:27:9c:b5:61: 81:48:a8:82:a3:16:5d:c2:2f:21:d4:fe:0f:43:e6: e3:f4:b3:41:24:66:ba:bf:d9:e6:2c:75:8a:63:ce: 7a:4f:9d:36:a2:37:32:25:d4:be:2e:2b:a4:e8:e7: 8b:e0:5a:46:c9:5e:30:dc:59:39:34:12:57:3e:80: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:DC:48:A8:98:E4:20:E2:65:66:47:3A:4D:A9:14:9C:39:F2:D4 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:33:5a:88:b6:7f:a3:95:fd:ca:fc:66:0b:c9:75:d9:e7:09: 2e:31:68:bc:70:8e:2b:23:70:9b:03:79:53:8a:6f:ea:46:31: c3:9a:49:5f:4e:d6:a7:81:17:d2:f0:22:29:cf:b0:cd:ba:84: 70:df:85:b4:b6:fb:c4:ef:ce:4b:23:c1:1c:5a:d0:a3:a7:83: 37:6d:b4:36:68:85:80:12:c6:e9:62:2f:9d:fe:b9:0f:34:01: 29:aa:37:96:78:bf:41:ac:2c:23:30:d2:e2:d8:eb:4c:9c:51: ec:99:a9:6b:96:58:73:e0:b4:de:87:af:99:8d:33:f3:2d:4c: 93:ca:1c:ff:02:62:f3:22:35:64:4c:3a:69:ea:dd:80:89:e2: a6:68:47:9b:a1:59:ae:36:0b:8a:ef:e8:82:c7:6d:ea:1b:db: 3c:01:54:58:11:ea:41:12:8a:a9:89:1b:00:09:94:f5:31:42: 10:d0:8e:23:25:92:9d:fb:23:59:d5:a0:1f:22:0f:aa:1b:cf: fc:f9:92:fa:bc:81:59:2d:22:c7:80:d1:f6:ee:75:55:cd:d3: bb:cf:5e:c9:d7:cb:d0:46:56:0a:9b:80:f0:f9:6a:5e:64:f7: 40:06:80:d4:9c:f0:25:77:7c:4f:19:b9:13:6f:f4:d5:75:2c: 13:44:f6:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwNTEyMjMzMjE5WhcNMjUwNTE5MjMzMjE5WjAYMRYwFAYD VQQDEw02ODIyODUwMy1kMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiaoblhc4llqdNOxWqUvYAWNf3FSV2OZvVcDRAkdvOFWzC+FwhN+LAGqR7s6 Ty8MF5v280y0ITfSNCckSDVrddwRYCn0TXxCLHu6yUTtRDFSOiTuHEqMUknoJpad KN8dVOlaApmtcyipwp1UUia2BniHiYUbRt3L7QZv0EEDwyqy5Fxs1iuzxBv67/Ev kep/3cX/O0l7yXkvc5gyCgp6CKmPe72al2B3o2yKSFRCoTWlevGw0VSfka4c3Lja sCectWGBSKiCoxZdwi8h1P4PQ+bj9LNBJGa6v9nmLHWKY856T502ojcyJdS+Liuk 6OeL4FpGyV4w3Fk5NBJXPoAiGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsR3Eio mOQg4mVmRzpNqRScOfLUMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfM1qItn+jlf3K/GYLyXXZ5wkuMWi8cI4rI3CbA3lTim/qRjHDmklf TtangRfS8CIpz7DNuoRw34W0tvvE785LI8EcWtCjp4M3bbQ2aIWAEsbpYi+d/rkP NAEpqjeWeL9BrCwjMNLi2OtMnFHsmalrllhz4LTeh6+ZjTPzLUyTyhz/AmLzIjVk TDpp6t2AieKmaEeboVmuNguK7+iCx23qG9s8AVRYEepBEoqpiRsACZT1MUIQ0I4j JZKd+yNZ1aAfIg+qG8/8+ZL6vIFZLSLHgNH27nVVzdO7z17J18vQRlYKm4Dw+Wpe ZPdABoDUnPAld3xPGbkTb/TVdSwTRPax -----END CERTIFICATE-----Generated at Tue May 13 05:06:40 2025 by rpki-client