$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: b1xF9PjNJ+oQcaZBnnds/L/saswsq1QtMhPCGBgpNXQ= Subject key identifier: 2E:99:9B:5A:05:C6:A3:94:01:62:46:EC:F1:66:07:E9:C4:18:C8:C8 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 0127 Signing time: Fri 25 Apr 2025 03:44:29 +0000 Manifest this update: Fri 25 Apr 2025 03:44:29 +0000 Manifest next update: Fri 02 May 2025 03:44:29 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: 1HnJ6cj2/8nRlqk3/KuPQPpMqMPjp2n4jP9REoj0+RA=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: wGDmOTIVSrDQKDKCEK7gF/ecDvEsfL3U/Gc/OshH53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Apr 25 03:44:29 2025 GMT Not After : May 2 03:44:29 2025 GMT Subject: CN=680b051d-e4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:e5:ef:31:46:cf:de:5f:05:a1:9e:35:a4: 4c:cd:d2:c4:ef:5f:59:9f:b2:92:3a:ac:ec:0b:62: 6a:e0:f0:8a:c1:9c:ca:80:0e:80:cc:38:04:83:f6: b1:e3:3b:f6:5a:32:9d:ad:82:5c:a1:d6:c3:46:5b: 89:8b:6c:aa:7e:21:9f:8b:a9:0d:c4:f0:ff:4e:73: d4:47:3f:dd:09:c0:f9:62:0b:45:26:4f:f1:11:e2: 34:f9:25:b1:4e:c3:81:61:e8:81:0e:6a:08:20:b0: 28:32:b5:16:55:f5:9f:49:44:57:5b:fb:d7:64:66: 3d:33:9a:9a:40:1e:46:3d:18:10:e4:f8:d2:64:c3: f1:58:6a:c4:41:88:08:da:39:71:41:3e:42:74:43: e4:80:ed:ea:dc:fa:13:5d:e9:0b:b6:2d:8b:70:e5: 62:16:f4:4d:60:c9:60:c2:65:91:91:6d:9d:47:b4: 8d:63:3e:bb:0e:af:35:d1:3b:cf:78:ba:b4:67:8a: a9:a7:44:cc:fa:a5:6f:08:5e:f4:7d:fa:86:e8:20: eb:6c:70:ea:f9:b3:d2:5d:c7:07:b9:76:ce:0b:3d: db:d3:bf:a7:69:b3:d6:64:70:75:d3:de:89:21:bb: e3:c5:f9:e8:7c:fe:95:d1:64:ad:40:ab:4e:07:00: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:9B:5A:05:C6:A3:94:01:62:46:EC:F1:66:07:E9:C4:18:C8:C8 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ba:5e:1e:83:38:c0:31:92:eb:5a:97:bc:fc:7c:3f:61:04: b1:3f:d3:fa:00:e2:c1:7c:d3:95:d5:69:fc:d0:f8:08:64:32: 71:b6:97:58:6e:4c:40:c4:8b:51:3f:66:cc:0f:6e:e7:42:98: 34:f8:12:a6:68:8b:1e:5c:ab:e5:8a:ae:34:04:89:9a:eb:5e: 91:14:eb:73:83:8b:10:3b:00:4a:cb:33:dc:52:5b:f5:c7:1a: fb:2a:6e:30:4b:41:45:9f:a6:ea:3e:e7:a6:ca:68:dc:89:c6: 2c:bd:7b:c3:03:b0:94:45:d9:24:96:bd:25:e9:fe:38:ca:02: 9b:42:01:6d:59:5d:9a:c5:80:09:69:3b:4c:1e:7c:7c:39:4e: b1:a6:c2:6f:2b:27:c4:bc:66:ab:35:5b:f7:04:b7:63:fd:b6: 37:0c:27:1b:2d:84:42:a7:ac:a7:4b:4c:e6:70:5e:06:26:73: 4f:f5:01:3a:f6:63:31:b3:71:16:22:c4:f6:16:b2:89:e3:00: 25:4f:0a:6b:4f:2a:3c:89:e8:f4:20:fb:ca:4f:f5:41:09:1e: 81:95:72:92:28:64:b1:1c:ce:87:d3:00:fd:ba:76:07:48:4d: 5b:ec:5a:a9:6a:ef:87:39:98:b2:08:15:80:f4:16:4a:6a:5d: 8c:76:48:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjUwNDI1MDM0NDI5WhcNMjUwNTAyMDM0NDI5WjAYMRYwFAYD VQQDEw02ODBiMDUxZC1lNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46fl7zFGz95fBaGeNaRMzdLE719Zn7KSOqzsC2Jq4PCKwZzKgA6AzDgEg/ax 4zv2WjKdrYJcodbDRluJi2yqfiGfi6kNxPD/TnPURz/dCcD5YgtFJk/xEeI0+SWx TsOBYeiBDmoIILAoMrUWVfWfSURXW/vXZGY9M5qaQB5GPRgQ5PjSZMPxWGrEQYgI 2jlxQT5CdEPkgO3q3PoTXekLti2LcOViFvRNYMlgwmWRkW2dR7SNYz67Dq810TvP eLq0Z4qpp0TM+qVvCF70ffqG6CDrbHDq+bPSXccHuXbOCz3b07+nabPWZHB1096J IbvjxfnofP6V0WStQKtOBwAaWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6Zm1oF xqOUAWJG7PFmB+nEGMjIMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALul4egzjAMZLrWpe8/Hw/YQSxP9P6AOLBfNOV1Wn80PgIZDJxtpdY bkxAxItRP2bMD27nQpg0+BKmaIseXKvliq40BIma616RFOtzg4sQOwBKyzPcUlv1 xxr7Km4wS0FFn6bqPuemymjcicYsvXvDA7CURdkklr0l6f44ygKbQgFtWV2axYAJ aTtMHnx8OU6xpsJvKyfEvGarNVv3BLdj/bY3DCcbLYRCp6ynS0zmcF4GJnNP9QE6 9mMxs3EWIsT2FrKJ4wAlTwprTyo8iej0IPvKT/VBCR6BlXKSKGSxHM6H0wD9unYH SE1b7Fqpau+HOZiyCBWA9BZKal2Mdkib -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:20 2025 by rpki-client