$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: J+mzsJbAhzBdU8cnctOgu25osLsbh7b+IPkEeMwYOMU= Subject key identifier: FD:AD:B8:80:52:62:E9:D9:01:9B:CC:3F:A0:EB:8F:D0:1C:4A:1D:CC Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 101A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1010 Signing time: Sun 04 May 2025 17:20:24 +0000 Manifest this update: Sun 04 May 2025 17:20:23 +0000 Manifest next update: Sun 11 May 2025 17:20:23 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: Mu4FO8VipAPNC+Dm7B1NlfsnN2MEGaLC/rlKY5WJQdA=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4122 (0x101a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: May 4 17:20:23 2025 GMT Not After : May 11 17:20:23 2025 GMT Subject: CN=6817a1d8-075d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:24:15:31:69:f0:9e:6f:a0:f0:16:ae:af: 64:3e:bb:5c:77:37:b9:9a:67:8e:fb:62:51:83:66: 0c:05:ee:45:52:29:3c:9a:e4:48:37:8f:76:e1:de: 09:03:48:3e:e3:1a:ec:d8:fd:d4:35:64:88:dd:df: fa:e2:f9:33:f8:fe:c1:b1:26:72:da:23:a9:49:3b: 9c:14:77:ea:3b:cf:52:ab:8f:c2:2b:62:54:8c:0f: 0d:87:21:04:e8:35:15:b8:f9:04:7e:7e:00:a1:45: 0e:59:59:79:48:d8:25:45:70:3f:57:f3:5d:01:04: f6:62:a9:29:f1:0f:47:a1:22:79:18:4e:ee:00:be: 20:e1:e2:ee:71:75:9d:d0:9f:6a:4d:b4:81:e2:02: 28:2a:46:52:4e:6d:28:7c:70:b9:6b:96:4f:c7:5a: 39:79:d3:9b:c7:15:77:75:6e:5f:fe:f1:fa:bd:57: 28:1c:a9:f6:dd:73:d9:ce:d4:8f:dc:66:4f:6a:18: 9f:09:4e:6d:17:37:44:91:a7:1d:59:19:1b:96:7e: e8:28:17:f0:f3:55:70:cd:96:53:98:b9:aa:27:68: b1:7a:3d:ef:71:38:af:67:4e:6e:ba:0a:c7:e0:1b: c8:45:a3:36:72:e2:04:7c:d0:cc:b7:70:42:b0:4d: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:B8:80:52:62:E9:D9:01:9B:CC:3F:A0:EB:8F:D0:1C:4A:1D:CC X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:64:47:76:af:48:c5:f5:17:17:ad:d7:f5:ed:18:89:ed:f1: e4:6a:07:b0:85:a7:b0:ed:db:d6:88:3d:ac:40:1c:9b:4c:8c: 11:22:95:4a:e6:d2:0b:ea:a2:4a:8e:5d:04:49:0c:76:87:9f: 0a:aa:52:8b:cb:97:53:e1:ad:cc:c9:36:0f:05:d0:4e:da:5d: 0a:13:39:1c:9c:9a:63:e4:ee:6f:e3:e0:50:15:37:b1:67:00: ca:3b:b1:88:27:64:a0:b3:8e:10:0c:38:96:5f:01:a0:df:67: b5:51:f5:02:de:99:0d:71:b4:2e:33:73:bb:4e:fc:ce:70:ba: 5a:3c:3c:3b:34:d2:a5:f6:4b:f8:4d:08:03:2b:c2:01:e0:4c: c2:2b:30:08:1f:b9:ae:a6:ad:42:59:1c:14:39:3b:dd:6b:b5: 84:3a:47:0e:14:d6:ee:aa:f3:02:20:fc:dc:15:23:45:e0:9f: dd:2f:7e:78:2b:a8:2f:93:95:21:cf:ed:25:76:03:cf:95:97: ff:cc:83:82:83:37:e5:74:94:6b:3d:89:f3:86:ec:8e:2d:4f: bb:79:ac:67:21:ca:be:fd:1b:be:ba:02:08:18:e8:c1:9f:28: c4:38:56:9f:91:0f:4e:17:43:75:5b:97:2b:3c:bc:ac:1d:c3: c4:a2:64:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNTA0MTcyMDIzWhcNMjUwNTExMTcyMDIzWjAYMRYwFAYD VQQDEw02ODE3YTFkOC0wNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vskFTFp8J5voPAWrq9kPrtcdze5mmeO+2JRg2YMBe5FUik8muRIN4924d4J A0g+4xrs2P3UNWSI3d/64vkz+P7BsSZy2iOpSTucFHfqO89Sq4/CK2JUjA8NhyEE 6DUVuPkEfn4AoUUOWVl5SNglRXA/V/NdAQT2Yqkp8Q9HoSJ5GE7uAL4g4eLucXWd 0J9qTbSB4gIoKkZSTm0ofHC5a5ZPx1o5edObxxV3dW5f/vH6vVcoHKn23XPZztSP 3GZPahifCU5tFzdEkacdWRkbln7oKBfw81VwzZZTmLmqJ2ixej3vcTivZ05uugrH 4BvIRaM2cuIEfNDMt3BCsE2GMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2tuIBS YunZAZvMP6Drj9AcSh3MMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ZEd2r0jF9RcXrdf17RiJ7fHkagewhaew7dvWiD2sQBybTIwRIpVK 5tIL6qJKjl0ESQx2h58KqlKLy5dT4a3MyTYPBdBO2l0KEzkcnJpj5O5v4+BQFTex ZwDKO7GIJ2Sgs44QDDiWXwGg32e1UfUC3pkNcbQuM3O7TvzOcLpaPDw7NNKl9kv4 TQgDK8IB4EzCKzAIH7mupq1CWRwUOTvda7WEOkcOFNbuqvMCIPzcFSNF4J/dL354 K6gvk5Uhz+0ldgPPlZf/zIOCgzfldJRrPYnzhuyOLU+7eaxnIcq+/Ru+ugIIGOjB nyjEOFafkQ9OF0N1W5crPLysHcPEomQK -----END CERTIFICATE-----Generated at Mon May 5 03:32:25 2025 by rpki-client