$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json) Hash identifier: MoMm/TWVr/9/fbIgdyiFloEaP6VvRKBOVcDLY80J0fY= Subject key identifier: 2A:51:F4:4D:77:86:D4:50:82:5E:78:B6:A0:33:C3:33:0B:C2:22:50 Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft Manifest number: 2A Signing time: Fri 25 Apr 2025 06:46:47 +0000 Manifest this update: Fri 25 Apr 2025 06:46:47 +0000 Manifest next update: Fri 02 May 2025 06:46:47 +0000 Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: oN5Ris/yAEwYaerPxLENrw6LO+nYAAyMI/qQgq9pna8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Validity Not Before: Apr 25 06:46:47 2025 GMT Not After : May 2 06:46:47 2025 GMT Subject: CN=680b2fd7-2d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:77:f4:a9:7c:c5:cb:b0:a7:7f:b0:d2:ca:d5: 26:34:66:04:d8:42:9f:d8:d1:c8:b0:b1:40:80:bd: da:b4:37:e6:45:51:e9:38:59:c1:9f:48:2c:55:fd: 7b:2c:93:fe:77:e3:f7:e4:19:f8:28:71:9b:b9:7a: f4:47:db:5e:e3:b7:a1:8a:3e:31:f5:68:7d:cd:d9: ae:ae:29:c8:ac:6f:69:98:1c:9c:44:d6:b6:b5:95: 9f:fb:5e:53:6d:0e:68:dd:00:53:d0:e1:b2:3b:f0: 9d:0a:13:ea:27:df:7d:c6:46:f2:15:8c:81:de:63: be:98:cb:50:50:f5:15:3e:ca:36:1c:49:73:c9:2b: 4a:20:45:aa:85:27:8a:fe:bb:28:4d:11:1e:bf:16: e2:13:8b:e0:46:7e:c8:de:1c:f0:83:c0:a2:00:5f: 8e:34:18:d0:ef:3d:ae:98:b5:62:1c:79:03:86:cd: 02:df:fe:96:2c:88:e0:bc:6c:d1:dc:a4:36:11:06: 85:81:0c:59:04:30:64:4b:ee:a4:1f:5f:a6:d0:16: 86:e4:52:77:bb:3d:94:a1:5f:2b:e2:65:fc:bb:55: 74:ec:93:cb:d0:1c:1c:7d:83:87:4c:1e:1d:4b:64: e1:37:30:23:48:b7:10:06:0b:e8:bd:62:f9:fa:9d: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:F4:4D:77:86:D4:50:82:5E:78:B6:A0:33:C3:33:0B:C2:22:50 X509v3 Authority Key Identifier: keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:0f:5f:b4:18:39:bc:1a:1a:c0:72:44:e3:f5:98:23:ac: f6:a9:b0:f7:81:17:2d:d8:cb:d2:e0:77:a3:c8:ab:d7:e2:4e: 41:24:c2:8a:f7:0d:01:2d:b8:b1:70:3a:98:8c:6f:97:41:3c: e7:d5:15:bd:fc:e0:5f:91:4f:58:0f:f1:93:48:1a:44:9f:c1: 20:5e:0d:88:e6:cc:9e:9f:1b:dd:b2:4c:2e:87:34:3c:b1:cb: 4c:8a:dd:ab:1f:1c:01:00:bd:f0:9a:fa:21:e1:93:6a:9d:44: 3c:c8:58:79:99:18:62:50:7c:8b:0f:cb:6a:28:6f:54:b6:9d: 45:a5:f3:c2:67:6b:77:34:db:e2:cc:9f:f9:a5:58:61:c5:a9: f4:df:0a:1f:66:99:ec:fc:0e:68:21:38:ec:a3:6f:72:89:b2: 5f:62:5f:0d:3f:20:41:26:b6:99:ac:c6:c0:5b:af:73:a4:34: aa:89:6b:cc:38:4e:d6:ef:a7:54:a5:07:b7:d7:0c:d5:9e:4e: 4a:59:1d:58:33:05:16:0e:b7:13:28:b6:59:df:59:98:a5:26: 9d:ef:e4:6f:7e:3a:4a:8a:ac:cc:9d:9b:6c:7f:26:c3:eb:5e: 5c:a1:26:05:27:5a:74:71:3e:de:cb:dc:08:e0:ca:42:99:7c: e3:70:21:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEE0MjExMC8GA1UEBRMoODBCMThCODFENDdCNjE3NzEzMDRFMEY3NjEwRDExQTdD MzQwNjEyMzAeFw0yNTA0MjUwNjQ2NDdaFw0yNTA1MDIwNjQ2NDdaMBgxFjAUBgNV BAMTDTY4MGIyZmQ3LTJkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwd/SpfMXLsKd/sNLK1SY0ZgTYQp/Y0ciwsUCAvdq0N+ZFUek4WcGfSCxV/Xss k/534/fkGfgocZu5evRH217jt6GKPjH1aH3N2a6uKcisb2mYHJxE1ra1lZ/7XlNt DmjdAFPQ4bI78J0KE+on333GRvIVjIHeY76Yy1BQ9RU+yjYcSXPJK0ogRaqFJ4r+ uyhNER6/FuITi+BGfsjeHPCDwKIAX440GNDvPa6YtWIceQOGzQLf/pYsiOC8bNHc pDYRBoWBDFkEMGRL7qQfX6bQFobkUne7PZShXyviZfy7VXTsk8vQHBx9g4dMHh1L ZOE3MCNItxAGC+i9Yvn6nbX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKlH0TXeG 1FCCXni2oDPDMwvCIlAwHwYDVR0jBBgwFoAUgLGLgdR7YXcTBOD3YQ0Rp8NAYSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QTQyLzFGQjBGNjc2RUE4 QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0xHTGdkUjdZWGNUQk9EM1lRMFJwOE5BWVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QTQyLzFGQjBGNjc2RUE4QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhj VEJPRDNZUTBScDhOQVlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdJD1+0GDm8GhrAckTj9ZgjrPapsPeBFy3Yy9Lgd6PIq9fiTkEkwor3 DQEtuLFwOpiMb5dBPOfVFb384F+RT1gP8ZNIGkSfwSBeDYjmzJ6fG92yTC6HNDyx y0yK3asfHAEAvfCa+iHhk2qdRDzIWHmZGGJQfIsPy2oob1S2nUWl88Jna3c02+LM n/mlWGHFqfTfCh9mmez8DmghOOyjb3KJsl9iXw0/IEEmtpmsxsBbr3OkNKqJa8w4 Ttbvp1SlB7fXDNWeTkpZHVgzBRYOtxMotlnfWZilJp3v5G9+OkqKrMydm2x/JsPr XlyhJgUnWnRxPt7L3AjgykKZfONwIco= -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:50 2025 by rpki-client