$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: w8GJCh5B5u+8j+a1gl7gkNLQhGm1yem+Y1e5IYpV4IE= Subject key identifier: AC:3A:57:69:FE:AF:C9:09:BB:B8:29:17:C3:A7:4A:80:CF:8F:2F:CC Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 1010 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1008 Signing time: Thu 24 Apr 2025 17:26:33 +0000 Manifest this update: Thu 24 Apr 2025 17:26:32 +0000 Manifest next update: Thu 01 May 2025 17:26:32 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: zTa4om3J6aMiBBdfFhMfsakbIRs5PEdUL9EJ1qHbFTw=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: C3t+NehZCmSbxSRABiEsj0jBSfoJdT1ufKsC9pvYusY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4112 (0x1010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Apr 24 17:26:32 2025 GMT Not After : May 1 17:26:32 2025 GMT Subject: CN=680a7449-4cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:27:5f:de:f9:29:d3:09:0d:d3:6d:ba:c6: b2:cc:8e:08:e4:2a:7e:d1:f5:ab:a4:47:36:ea:a9: 39:7e:02:d5:9a:21:2e:98:5a:bf:d1:9e:16:c9:72: f8:d7:fe:5e:fa:86:25:c4:13:25:47:70:dc:3b:05: fe:fc:ea:19:5d:ff:a9:8f:39:c8:41:4b:6b:04:d4: 64:23:91:35:a1:4f:89:f3:88:22:f2:30:bc:16:9e: aa:da:4c:d4:83:6e:74:b7:02:d4:cc:b3:f0:cd:06: 5c:19:b1:78:eb:4f:53:c5:84:a6:28:e3:56:c4:33: 08:e5:b4:f0:03:22:6f:bb:d1:10:5e:bd:3c:b7:bf: 0c:3d:4c:b0:0f:bc:93:a1:38:e2:c2:23:29:ab:aa: 64:f9:cb:3c:d7:22:1a:82:8b:d5:ed:49:69:77:db: e2:d5:b4:3c:57:a2:ef:59:92:5d:ed:92:69:80:a4: 2a:1a:90:d2:07:05:b6:4f:27:e4:8a:ae:1d:27:ec: da:17:47:b2:71:68:c1:e5:f0:34:3e:4d:0e:71:e1: f7:f6:c4:78:3b:f5:e3:0b:ef:15:8a:9b:d1:bc:2a: 60:71:e9:73:cc:fa:d3:c8:a7:db:52:52:e2:b7:51: a8:4e:f2:43:c3:83:e1:2f:11:23:7d:be:a5:18:27: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:57:69:FE:AF:C9:09:BB:B8:29:17:C3:A7:4A:80:CF:8F:2F:CC X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:03:21:a3:01:bd:a2:35:42:dd:37:0f:db:1d:8e:a5:2e:0a: 64:95:ec:9c:8d:47:58:3f:f9:d3:ac:83:8d:5d:d0:99:81:20: 9a:c0:91:1c:77:75:2b:d0:e7:94:a6:f1:e2:a4:43:da:49:02: 80:b9:08:9f:ab:38:ff:0f:80:47:49:1c:7d:e6:56:82:1a:f2: be:53:0b:af:5f:08:b3:7e:c3:7b:d2:d3:76:8a:ba:88:b9:be: 95:95:bb:68:ee:48:ce:65:d8:c1:33:92:1d:d7:78:8c:f0:bd: 1b:b6:d7:65:92:3c:86:20:da:9b:09:77:c5:dd:66:ba:e0:70: 16:1e:4d:36:24:73:0e:ab:44:be:12:5b:da:15:e9:e1:db:7c: d8:b2:fb:a2:e6:47:3b:3d:4f:4e:a0:65:30:9e:33:b6:66:08: 20:bb:36:02:66:4a:c9:27:04:4d:5b:a6:0f:5c:e5:35:33:72: 7d:4e:92:8c:df:43:3a:fb:b1:85:d6:1a:7a:c7:8b:0c:a3:29: 64:c8:5b:ee:c3:06:75:31:0c:02:eb:8f:c7:c9:eb:54:57:0a: 1d:07:56:bb:43:7e:10:99:4e:1c:d3:57:37:76:45:80:eb:76: 3f:74:00:55:28:c6:82:98:cd:e2:85:5d:06:09:e3:17:11:05: d8:f7:f0:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwNDI0MTcyNjMyWhcNMjUwNTAxMTcyNjMyWjAYMRYwFAYD VQQDEw02ODBhNzQ0OS00Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEgnX975KdMJDdNtusayzI4I5Cp+0fWrpEc26qk5fgLVmiEumFq/0Z4WyXL4 1/5e+oYlxBMlR3DcOwX+/OoZXf+pjznIQUtrBNRkI5E1oU+J84gi8jC8Fp6q2kzU g250twLUzLPwzQZcGbF4609TxYSmKONWxDMI5bTwAyJvu9EQXr08t78MPUywD7yT oTjiwiMpq6pk+cs81yIagovV7Ulpd9vi1bQ8V6LvWZJd7ZJpgKQqGpDSBwW2Tyfk iq4dJ+zaF0eycWjB5fA0Pk0OceH39sR4O/XjC+8VipvRvCpgcelzzPrTyKfbUlLi t1GoTvJDw4PhLxEjfb6lGCeYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw6V2n+ r8kJu7gpF8OnSoDPjy/MMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/AyGjAb2iNULdNw/bHY6lLgpkleycjUdYP/nTrIONXdCZgSCawJEc d3Ur0OeUpvHipEPaSQKAuQifqzj/D4BHSRx95laCGvK+UwuvXwizfsN70tN2irqI ub6Vlbto7kjOZdjBM5Id13iM8L0bttdlkjyGINqbCXfF3Wa64HAWHk02JHMOq0S+ ElvaFenh23zYsvui5kc7PU9OoGUwnjO2ZggguzYCZkrJJwRNW6YPXOU1M3J9TpKM 30M6+7GF1hp6x4sMoylkyFvuwwZ1MQwC64/HyetUVwodB1a7Q34QmU4c01c3dkWA 63Y/dABVKMaCmM3ihV0GCeMXEQXY9/DB -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:30 2025 by rpki-client