$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: qk+Z3cBHJWsFeLCxN8KVKZs0quN8NqpJ/IaKJzdoKtw= Subject key identifier: C4:C8:9A:5D:32:63:3E:56:2D:ED:37:7D:0C:E7:37:9F:00:C2:76:AD Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0C45 Signing time: Thu 24 Apr 2025 18:26:51 +0000 Manifest this update: Thu 24 Apr 2025 18:26:51 +0000 Manifest next update: Thu 01 May 2025 18:26:51 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: DiwRJhFjD47/elKUVuum8oQRsBZViajMhSkXE4D2fe4=) 2: 702BA35A1D4311F09AE68E7FC4F9AE02.roa (hash: 6Wms1LVBEeVGK9PkBmUevbXKIAzZzizcfxFDC5+BJ7U=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: MoTDqIen8yVbDTTL7Vu855UIt3dnaCbMiK4gvMYWMk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Apr 24 18:26:51 2025 GMT Not After : May 1 18:26:51 2025 GMT Subject: CN=680a826b-6eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:80:c8:6e:b5:a7:55:83:a2:39:d5:df:03: f7:02:64:0b:15:53:44:e0:d1:23:0a:e8:45:79:1a: 1a:9e:17:0b:13:5d:41:72:7f:bd:57:ad:1e:eb:43: 7d:e6:36:2c:61:39:b1:26:fb:e8:51:3d:32:33:87: c4:45:e8:ac:b7:be:02:92:ad:61:af:6e:4e:9f:73: ac:7d:d7:74:ad:fd:b3:ba:2b:c4:8a:bb:24:ff:da: 00:e4:52:6c:08:ba:b4:8b:ad:96:ad:79:b7:2f:46: 09:53:0d:28:5e:d3:4e:77:47:ba:df:c8:63:83:86: 95:71:34:b2:7a:20:90:61:5a:f4:6c:83:fa:2a:59: 1a:fc:58:c5:a3:11:0f:19:2a:2f:47:48:52:3c:82: b0:29:06:56:af:9e:dc:62:64:3d:f5:dc:97:84:69: f7:e9:06:28:58:01:7b:23:94:8e:47:6a:4e:79:8a: b6:f4:57:65:bd:bc:c1:fc:66:63:b3:68:64:ed:60: 80:0b:7a:a7:78:25:96:82:a8:3f:8d:20:85:5a:b6: 00:9f:9e:ec:8b:1f:af:52:4b:a7:c5:58:2a:78:36: fa:b1:c3:51:a6:2e:18:70:f3:f5:5e:72:30:16:38: db:93:de:27:62:0b:40:e7:9b:69:e2:37:e8:bc:18: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:9A:5D:32:63:3E:56:2D:ED:37:7D:0C:E7:37:9F:00:C2:76:AD X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:ae:88:0e:f0:11:2e:28:b9:6b:f4:39:2e:72:e6:b0:9c: 06:a6:4d:45:dd:ed:25:8e:d5:56:ed:ba:b2:23:9f:2a:86:d1: 71:db:ff:c8:b7:bc:9f:82:91:b8:f7:b0:31:4f:52:66:7c:a5: cb:7e:7a:d7:1c:6a:26:fe:25:f5:2a:92:32:39:c2:e6:96:e1: c0:37:c3:af:dc:da:c3:b4:7a:60:30:45:07:00:f6:92:c7:f0: a7:9e:14:b6:e8:99:20:5f:d5:20:62:44:51:d3:c9:c8:56:41: 72:ce:83:e5:bd:fc:18:d9:fb:59:dd:7c:4d:df:06:44:c8:cc: de:11:3a:00:07:96:0d:86:d0:f1:8a:36:f8:de:12:84:66:8c: e9:49:de:11:e5:0a:57:77:12:4e:95:9a:04:0e:1e:c6:c1:78: e1:14:cb:76:ee:f7:00:87:6d:c1:4d:a0:14:28:6d:86:ec:bb: 63:49:07:c5:90:1a:25:70:39:be:0f:47:fd:7d:90:55:fd:9a: 78:71:2e:2c:df:af:06:da:d2:d2:1e:17:06:71:7a:ca:2a:c6: 76:ec:28:13:db:15:3e:d2:70:92:e3:89:c6:5a:58:d9:f5:a5: 6f:0e:37:c3:db:67:23:18:28:28:d4:ed:d7:06:1a:f8:80:5f: 3e:cc:b1:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUwNDI0MTgyNjUxWhcNMjUwNTAxMTgyNjUxWjAYMRYwFAYD VQQDEw02ODBhODI2Yi02ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzeAyG61p1WDojnV3wP3AmQLFVNE4NEjCuhFeRoanhcLE11Bcn+9V60e60N9 5jYsYTmxJvvoUT0yM4fEReist74Ckq1hr25On3Osfdd0rf2zuivEirsk/9oA5FJs CLq0i62WrXm3L0YJUw0oXtNOd0e638hjg4aVcTSyeiCQYVr0bIP6Klka/FjFoxEP GSovR0hSPIKwKQZWr57cYmQ99dyXhGn36QYoWAF7I5SOR2pOeYq29FdlvbzB/GZj s2hk7WCAC3qneCWWgqg/jSCFWrYAn57six+vUkunxVgqeDb6scNRpi4YcPP1XnIw Fjjbk94nYgtA55tp4jfovBjAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTIml0y Yz5WLe03fQznN58AwnatMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSla6IDvARLii5a/Q5LnLmsJwGpk1F3e0ljtVW7bqyI58qhtFx2//I t7yfgpG497AxT1JmfKXLfnrXHGom/iX1KpIyOcLmluHAN8Ov3NrDtHpgMEUHAPaS x/CnnhS26JkgX9UgYkRR08nIVkFyzoPlvfwY2ftZ3XxN3wZEyMzeEToAB5YNhtDx ijb43hKEZozpSd4R5QpXdxJOlZoEDh7GwXjhFMt27vcAh23BTaAUKG2G7LtjSQfF kBolcDm+D0f9fZBV/Zp4cS4s368G2tLSHhcGcXrKKsZ27CgT2xU+0nCS44nGWljZ 9aVvDjfD22cjGCgo1O3XBhr4gF8+zLHV -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:52 2025 by rpki-client