$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: PJfSSV003bCVb7scXl/Cn6H9yHAqcPGIWTHpXhfdhws= Subject key identifier: E6:03:A5:83:E2:81:DC:D0:2D:6E:F7:4B:CD:4F:E2:5B:3D:C2:32:FF Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 182D Signing time: Thu 24 Apr 2025 16:32:30 +0000 Manifest this update: Thu 24 Apr 2025 16:32:29 +0000 Manifest next update: Thu 01 May 2025 16:32:29 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: YFNGgg0fQoKX7fLCeHEfJA9ACEjCiT96BAdwmHyU6yo=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6215 (0x1847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Apr 24 16:32:29 2025 GMT Not After : May 1 16:32:29 2025 GMT Subject: CN=680a679d-9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:15:0f:83:4c:d5:3d:73:6b:d7:99:db:e5: 51:75:7c:f8:47:cb:ec:3f:cc:76:0e:9e:55:10:29: 9c:77:1e:54:5e:a1:bc:df:1c:1a:d9:47:b8:9a:c0: e9:ce:30:d0:08:f0:ab:00:bb:d5:50:e5:41:ec:8a: 63:7a:53:6e:eb:26:3c:66:1b:15:72:79:52:a0:d4: 07:70:20:28:1a:bc:90:25:00:f1:c7:32:f5:ad:3b: 06:55:f6:71:a2:1c:1d:4e:8b:0a:46:d5:2b:e0:a1: fa:3d:2c:1f:e6:63:55:0d:b3:09:9b:fc:db:91:b1: f8:4a:57:5c:f3:e6:9b:45:71:60:10:30:7f:ab:e6: 06:1a:7d:03:d9:e9:ef:b4:06:98:be:f5:86:bc:82: 4c:ca:64:df:ac:51:72:6b:fe:50:ac:52:d1:07:63: 4e:a3:c7:24:08:ea:a9:c2:06:e3:4d:19:a0:d9:47: 2e:a1:cd:e1:af:97:e8:b5:c7:90:d2:22:ff:54:0b: da:e6:e4:06:5a:61:25:25:7e:40:bb:ca:61:d9:70: 34:e5:46:60:3b:17:d0:7f:77:0b:66:08:9d:e4:e8: 92:5c:9a:d7:bb:b6:f6:f9:b7:44:2a:3a:49:cb:bd: ef:51:17:31:c6:e2:ea:ff:41:09:93:61:53:f7:05: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:03:A5:83:E2:81:DC:D0:2D:6E:F7:4B:CD:4F:E2:5B:3D:C2:32:FF X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:ac:10:bc:fb:09:62:6e:46:c8:5a:3f:54:b5:db:04:ee: 75:e0:96:38:bc:7f:7a:71:8b:09:30:0c:fe:7b:dd:e1:9c:e0: 30:8b:bb:22:1c:a6:38:3e:32:57:d3:22:62:82:77:c8:02:2e: 48:52:eb:f5:46:29:6b:84:8e:d5:45:a3:fd:e0:67:93:38:91: a8:22:9f:7d:f6:57:8c:87:f8:b7:e3:c5:17:82:aa:8b:5c:19: 36:d2:21:41:c3:90:1e:ca:c7:f7:ff:59:fa:12:ac:b5:21:cf: 58:32:6e:1b:17:d3:bc:d4:67:7f:cc:63:11:82:87:f3:c7:ed: 15:3c:fe:21:4a:ea:21:f1:8a:d6:cb:00:db:98:77:a3:bb:b3: 9b:33:c2:ba:16:33:24:d0:3e:b2:70:2b:5a:41:07:4c:33:a6: 59:00:b4:4a:4e:bb:86:88:ba:e4:54:67:76:83:95:e3:bb:fa: bd:45:d4:b8:fd:08:23:5b:bd:69:eb:d5:76:7b:94:6d:10:7d: 9e:6c:4c:21:81:d9:b1:da:4f:ee:6f:5a:28:7a:e2:66:15:20: 11:fa:2f:09:04:5d:58:28:38:f2:73:1f:94:2c:b1:1a:7b:44: 64:fb:3c:78:7b:47:d7:1f:71:dd:30:13:53:23:5b:8d:78:bf: 36:fb:92:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNDI0MTYzMjI5WhcNMjUwNTAxMTYzMjI5WjAYMRYwFAYD VQQDEw02ODBhNjc5ZC05YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHgVD4NM1T1za9eZ2+VRdXz4R8vsP8x2Dp5VECmcdx5UXqG83xwa2Ue4msDp zjDQCPCrALvVUOVB7IpjelNu6yY8ZhsVcnlSoNQHcCAoGryQJQDxxzL1rTsGVfZx ohwdTosKRtUr4KH6PSwf5mNVDbMJm/zbkbH4Sldc8+abRXFgEDB/q+YGGn0D2env tAaYvvWGvIJMymTfrFFya/5QrFLRB2NOo8ckCOqpwgbjTRmg2Ucuoc3hr5fotceQ 0iL/VAva5uQGWmElJX5Au8ph2XA05UZgOxfQf3cLZgid5OiSXJrXu7b2+bdEKjpJ y73vURcxxuLq/0EJk2FT9wUxnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYDpYPi gdzQLW73S81P4ls9wjL/MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsZ6wQvPsJYm5GyFo/VLXbBO514JY4vH96cYsJMAz+e93hnOAwi7si HKY4PjJX0yJignfIAi5IUuv1RilrhI7VRaP94GeTOJGoIp999leMh/i348UXgqqL XBk20iFBw5Aeysf3/1n6Eqy1Ic9YMm4bF9O81Gd/zGMRgofzx+0VPP4hSuoh8YrW ywDbmHeju7ObM8K6FjMk0D6ycCtaQQdMM6ZZALRKTruGiLrkVGd2g5Xju/q9RdS4 /QgjW71p69V2e5RtEH2ebEwhgdmx2k/ub1ooeuJmFSAR+i8JBF1YKDjycx+ULLEa e0Rk+zx4e0fXH3HdMBNTI1uNeL82+5KA -----END CERTIFICATE-----Generated at Sat Apr 26 05:50:05 2025 by rpki-client