$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft File: _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json) Hash identifier: UGYveJaRUnqkyAVYmkKjTnI4sswNV2fIwgEJXzeOxgs= Subject key identifier: 54:08:CE:DD:F5:8C:EC:E1:FB:77:95:DE:B5:42:29:D5:8B:06:C1:EE Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 Certificate issuer: /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Certificate serial: 26D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft Manifest number: 26C9 Signing time: Thu 24 Apr 2025 15:41:35 +0000 Manifest this update: Thu 24 Apr 2025 15:41:35 +0000 Manifest next update: Thu 01 May 2025 15:41:35 +0000 Files and hashes: 1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: 8G8NFqzgVzEvnOSG5ceHoHYkFIQiobKBHgOSorUeviQ=) 2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: AGdYmprG1+spdhAmRDse9H6yLxE5LG56xPYvpdtuuFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9944 (0x26d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5 Validity Not Before: Apr 24 15:41:35 2025 GMT Not After : May 1 15:41:35 2025 GMT Subject: CN=680a5baf-fe99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:f8:89:be:b3:39:a5:e4:46:e9:5a:2d:06: ef:0c:b3:e7:c4:26:ef:02:2b:8f:8c:3d:40:23:93: 7d:48:60:1f:22:82:7e:fe:50:d9:d8:39:a7:40:34: e6:ea:84:60:c3:6e:02:b0:fc:44:f4:e3:23:0c:2a: d2:fe:84:54:fe:42:b6:84:f1:ab:00:71:9e:d5:22: 02:a4:21:86:4f:f0:90:89:44:6b:48:9b:cd:ef:0e: 26:d1:c8:8c:85:66:01:90:27:8f:b3:2d:9b:5e:1b: 9d:52:3a:93:36:da:64:e4:ad:59:a3:6d:2c:01:f8: 38:37:8c:ac:7a:9a:12:c5:72:a3:39:6e:d9:d6:7c: e4:5f:0d:2b:a3:bf:77:22:27:7a:50:df:21:25:5d: 58:3e:49:77:d4:9b:9b:aa:05:0f:64:a4:21:ca:1d: 7b:98:87:7e:19:96:9e:ed:ff:97:b5:e1:8b:26:f4: 89:93:73:db:46:88:7f:ec:78:41:13:8e:27:23:a6: 42:e4:8e:5b:38:48:39:5b:59:f0:00:c0:40:dc:3a: 6a:7d:4b:dc:b3:f2:fc:30:00:be:fa:6b:86:35:3c: 33:c4:3a:dd:45:2c:ab:27:4b:61:32:da:23:23:20: a4:23:6d:82:b8:fe:dc:20:4a:22:b3:91:a1:24:6e: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:08:CE:DD:F5:8C:EC:E1:FB:77:95:DE:B5:42:29:D5:8B:06:C1:EE X509v3 Authority Key Identifier: keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a7:c9:85:f7:e3:fa:37:e6:84:2d:39:a5:f2:4c:b1:ea:9b: d4:20:d5:4a:1f:8f:a7:e1:e0:58:eb:0a:d4:0b:8c:bb:57:ef: 61:20:8d:a6:13:63:b7:ad:2c:dd:69:ae:c8:37:d8:d7:db:28: 7f:fb:52:60:a2:0c:0a:eb:05:d0:58:57:36:e1:2d:e8:7d:c4: 92:7d:49:af:1c:ff:4a:48:e7:2b:e3:1b:ce:25:a2:2b:66:50: cb:c8:2a:b6:a5:be:6c:2a:9f:a9:5c:89:50:f6:5d:a0:37:4e: 33:94:3d:38:de:83:a7:11:69:e6:f5:a3:6b:4c:69:0b:e9:90: ba:cc:7f:a7:b2:d5:cc:37:f9:e9:07:52:df:27:30:36:24:9f: 1f:66:84:9b:14:3d:13:6a:df:c4:d5:6c:b0:46:8e:86:69:f5: fb:5f:3a:d9:0a:e8:26:61:de:82:83:c5:38:3c:98:6d:aa:df: 22:ab:bd:cb:50:04:c8:eb:c8:f9:fa:5f:3a:41:89:a4:a4:0f: 21:8b:04:d3:73:25:ee:51:8e:59:0d:e5:78:16:dc:ef:bd:40: f0:d0:ca:3b:94:2f:5e:42:f9:91:21:9a:df:37:8e:61:fe:70: 6c:a8:0d:74:e8:b8:e8:61:ea:97:e1:6b:70:bb:e0:d4:f6:bb: c2:e9:05:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1 NjFFQzUyRjUwHhcNMjUwNDI0MTU0MTM1WhcNMjUwNTAxMTU0MTM1WjAYMRYwFAYD VQQDEw02ODBhNWJhZi1mZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwz4ib6zOaXkRulaLQbvDLPnxCbvAiuPjD1AI5N9SGAfIoJ+/lDZ2DmnQDTm 6oRgw24CsPxE9OMjDCrS/oRU/kK2hPGrAHGe1SICpCGGT/CQiURrSJvN7w4m0ciM hWYBkCePsy2bXhudUjqTNtpk5K1Zo20sAfg4N4ysepoSxXKjOW7Z1nzkXw0ro793 Iid6UN8hJV1YPkl31JubqgUPZKQhyh17mId+GZae7f+XteGLJvSJk3PbRoh/7HhB E44nI6ZC5I5bOEg5W1nwAMBA3DpqfUvcs/L8MAC++muGNTwzxDrdRSyrJ0thMtoj IyCkI22CuP7cIEois5GhJG6C3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQIzt31 jOzh+3eV3rVCKdWLBsHuMB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXp8mF9+P6N+aELTml8kyx6pvUINVKH4+n4eBY6wrUC4y7V+9hII2m E2O3rSzdaa7IN9jX2yh/+1JgogwK6wXQWFc24S3ofcSSfUmvHP9KSOcr4xvOJaIr ZlDLyCq2pb5sKp+pXIlQ9l2gN04zlD043oOnEWnm9aNrTGkL6ZC6zH+nstXMN/np B1LfJzA2JJ8fZoSbFD0Tat/E1WywRo6GafX7XzrZCugmYd6Cg8U4PJhtqt8iq73L UATI68j5+l86QYmkpA8hiwTTcyXuUY5ZDeV4FtzvvUDw0Mo7lC9eQvmRIZrfN45h /nBsqA106LjoYeqX4Wtwu+DU9rvC6QVW -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:23 2025 by rpki-client