$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: vmXJiILFh6bxh8KlbYyRWFDFavA2CPEdmOj0sCx/guU= Subject key identifier: 67:56:EE:F7:E5:21:28:91:05:B8:BE:0D:76:77:E0:43:7C:A7:37:9A Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 0145 Signing time: Fri 25 Apr 2025 03:28:51 +0000 Manifest this update: Fri 25 Apr 2025 03:28:50 +0000 Manifest next update: Fri 02 May 2025 03:28:50 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: aFhtNOy5cxIn58ZJyhn1NQoYl3n90qPmY9KL8qZ4Pi0=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: Apr 25 03:28:50 2025 GMT Not After : May 2 03:28:50 2025 GMT Subject: CN=680b0173-2bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:cc:31:17:81:20:5d:49:31:9e:9d:b1:ce: 3f:0e:ff:40:4c:f5:07:85:63:59:d2:bb:45:b0:e9: 95:49:60:3e:ce:73:a7:7f:72:f0:b8:bc:00:ff:bc: 4f:17:60:c2:00:69:b4:24:c6:7b:09:dd:f0:67:55: 5f:19:ff:36:d9:90:6e:93:f0:ca:e3:63:53:9b:cd: 97:40:6c:e4:35:55:89:6a:6b:23:73:d8:12:b3:ac: 37:5d:1f:f9:9d:7b:b7:b4:06:e9:e9:a2:2f:dc:82: c4:fa:f5:81:4a:f1:1f:fa:bc:1f:01:ec:15:d0:8a: b2:5d:43:8a:aa:30:6c:b7:0c:bc:c9:fb:ed:2d:f8: 54:19:4c:79:0c:ed:d2:ef:7b:62:2e:23:23:fb:f2: b9:f1:d9:84:50:e0:59:28:60:df:10:72:21:b5:04: cd:9a:fa:90:7f:cc:c6:cf:a3:b9:49:a2:05:e6:09: 84:12:ab:79:16:a2:66:1b:f3:5f:5e:c4:20:3e:64: 83:95:de:6e:55:b6:d1:3b:f9:23:f8:42:84:f5:47: 37:b3:d0:31:0a:ed:41:ee:06:0d:99:92:37:69:ff: 48:85:e6:ee:5e:d8:ec:62:28:4c:c5:f7:3f:7f:0b: 49:49:89:3b:48:90:50:b1:12:38:eb:7d:99:78:99: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:EE:F7:E5:21:28:91:05:B8:BE:0D:76:77:E0:43:7C:A7:37:9A X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c9:42:ea:d0:db:bd:07:09:d1:e9:fa:0a:93:cc:0f:21:5e: 6e:51:51:31:0e:02:c6:44:64:31:85:e0:82:05:28:3e:5a:01: 7e:f9:36:5d:88:d3:a5:c2:87:20:61:51:d1:6a:dd:05:fd:cc: af:5d:46:b3:cd:d6:63:ff:38:5f:b6:e5:0b:1d:bb:71:71:98: 82:a2:97:ac:d8:0c:05:6d:d0:5d:31:31:61:8f:89:e4:ab:45: fe:fa:d5:48:46:5f:77:c9:1b:6f:a7:bc:e8:e7:bd:f5:dd:3d: 44:ad:24:93:8e:3b:39:29:15:ef:9d:7e:27:69:21:db:31:53: 59:a9:ed:e0:c6:31:f5:fe:f5:86:fc:c4:ba:0d:f3:26:45:9a: e7:b2:20:13:e5:bd:94:86:17:cd:fa:ce:c9:04:41:bb:55:5b: e3:c2:2b:a9:50:d5:eb:45:57:82:80:3b:5b:be:98:26:a8:eb: 9c:9b:2f:8f:b7:86:98:16:a9:43:e4:d6:ed:57:b1:0b:84:9c: 93:1f:92:02:1e:ff:80:a5:c7:ae:ac:db:43:64:2b:1c:08:94: 92:73:68:80:69:f7:e3:26:18:78:0e:82:59:27:4b:38:33:5a: b1:5f:35:4b:61:47:82:7d:5f:2f:08:bf:d2:cb:96:71:03:b9: ec:56:8d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUwNDI1MDMyODUwWhcNMjUwNTAyMDMyODUwWjAYMRYwFAYD VQQDEw02ODBiMDE3My0yYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi/MMReBIF1JMZ6dsc4/Dv9ATPUHhWNZ0rtFsOmVSWA+znOnf3LwuLwA/7xP F2DCAGm0JMZ7Cd3wZ1VfGf822ZBuk/DK42NTm82XQGzkNVWJamsjc9gSs6w3XR/5 nXu3tAbp6aIv3ILE+vWBSvEf+rwfAewV0IqyXUOKqjBstwy8yfvtLfhUGUx5DO3S 73tiLiMj+/K58dmEUOBZKGDfEHIhtQTNmvqQf8zGz6O5SaIF5gmEEqt5FqJmG/Nf XsQgPmSDld5uVbbRO/kj+EKE9Uc3s9AxCu1B7gYNmZI3af9IhebuXtjsYihMxfc/ fwtJSYk7SJBQsRI4632ZeJmmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdW7vfl ISiRBbi+DXZ34EN8pzeaMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQyULq0Nu9BwnR6foKk8wPIV5uUVExDgLGRGQxheCCBSg+WgF++TZd iNOlwocgYVHRat0F/cyvXUazzdZj/zhftuULHbtxcZiCopes2AwFbdBdMTFhj4nk q0X++tVIRl93yRtvp7zo57313T1ErSSTjjs5KRXvnX4naSHbMVNZqe3gxjH1/vWG /MS6DfMmRZrnsiAT5b2UhhfN+s7JBEG7VVvjwiupUNXrRVeCgDtbvpgmqOucmy+P t4aYFqlD5NbtV7ELhJyTH5ICHv+ApceurNtDZCscCJSSc2iAaffjJhh4DoJZJ0s4 M1qxXzVLYUeCfV8vCL/Sy5ZxA7nsVo25 -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:46 2025 by rpki-client