$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json) Hash identifier: I+zr6qiDpPi8gCsyL+V4k8WeRrCTU7A7lJxf9DdgJIg= Subject key identifier: C9:AE:31:E2:5A:62:50:DF:89:70:C6:C8:70:00:0B:7D:D3:85:7D:90 Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 Certificate issuer: /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft Manifest number: 44 Signing time: Fri 25 Apr 2025 06:28:36 +0000 Manifest this update: Fri 25 Apr 2025 06:28:35 +0000 Manifest next update: Fri 02 May 2025 06:28:35 +0000 Files and hashes: 1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: lkxffBJWwVTQynrOU23h5U5ew1d6LLP/zvo3HX/8mrY=) 2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Validity Not Before: Apr 25 06:28:35 2025 GMT Not After : May 2 06:28:35 2025 GMT Subject: CN=680b2b94-f38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:da:fa:78:18:a7:2a:40:5f:12:b9:5a:25: 67:49:ab:75:bb:54:8e:01:2b:bc:62:63:c2:34:a5: a0:ce:c4:34:1a:e8:ec:ac:53:57:b7:69:28:1c:d5: bc:b6:59:eb:d2:cf:9b:7e:ab:e9:1c:9f:af:a7:cd: 5f:5b:55:13:b9:ad:31:db:62:89:64:d5:56:49:00: ad:dc:f9:b5:61:4d:59:b3:d5:43:13:d9:87:5d:51: f4:f4:af:6e:59:1a:1a:68:82:01:d4:09:12:4a:e4: f5:33:e7:29:e4:68:e4:3b:d6:41:9d:e2:a6:1d:14: 85:c6:21:ac:6e:13:ae:86:9e:31:df:1e:75:37:35: 75:65:43:a9:ac:62:5f:cb:d8:c8:dc:8a:c3:d6:e0: 3c:49:8d:59:45:87:6b:89:11:b4:ed:52:e3:ba:9c: ea:5f:df:d0:c6:41:95:f6:e8:f5:ee:40:c0:ef:91: 49:e4:45:d4:9c:74:e8:fd:10:88:18:fe:12:43:94: 49:03:77:b3:d6:a9:ac:6b:51:16:f4:fb:11:3d:f7: d8:f3:3d:c4:e2:e8:be:f4:4b:70:b1:1d:19:fd:92: 0d:ea:88:0d:cd:bc:da:79:44:47:a7:99:0c:e7:79: d6:19:d6:49:4e:d3:90:35:ac:9e:87:4d:4b:52:da: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:31:E2:5A:62:50:DF:89:70:C6:C8:70:00:0B:7D:D3:85:7D:90 X509v3 Authority Key Identifier: keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e0:66:cd:01:a4:65:da:7d:df:ce:84:e9:0a:2b:ef:d1:f8: 16:a3:7b:07:1c:d8:45:78:78:68:d6:1c:77:7b:c9:09:ce:ce: 42:81:a5:5b:53:24:e7:47:db:64:ff:be:da:1c:0c:cd:de:40: 29:03:78:d2:4d:2f:c6:1e:80:b2:81:e3:ef:08:2d:cb:2e:44: de:0a:89:74:21:f2:93:19:50:55:fd:6a:f2:d2:ea:33:09:78: 70:bf:cb:b6:3a:25:aa:4c:81:d6:e0:8b:e3:83:74:2f:20:ec: 75:41:81:d3:6f:4f:37:38:b3:11:7e:6a:4b:f9:11:13:94:7a: 7b:ea:6b:09:54:50:b1:62:48:65:bf:27:1f:a4:b8:b1:61:c5: ca:a8:3c:e5:1b:4f:01:11:86:b1:51:43:97:a3:5f:47:95:5e: 5d:dd:62:09:c0:b2:bb:bf:4f:56:2f:9d:47:55:5a:d8:6e:47: c1:b7:dc:f8:7a:1e:87:74:7b:3c:b4:2a:17:5d:31:18:83:9c: 75:78:6d:a2:29:51:e0:f3:8f:c4:e1:72:27:f6:9e:e8:5a:bd: 65:fb:f3:52:d2:08:2f:03:2e:24:78:67:71:dd:c4:24:03:eb: b2:22:d1:16:66:98:dc:e1:52:3e:b5:dc:17:86:15:05:2c:0e: 1a:ba:2c:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgxMDExMC8GA1UEBRMoMThFREFCQjI4MjBDRTI1RjkwRTg2MzVDMTNCN0YwRDQ1 RjA0NjM3NjAeFw0yNTA0MjUwNjI4MzVaFw0yNTA1MDIwNjI4MzVaMBgxFjAUBgNV BAMTDTY4MGIyYjk0LWYzOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClQdr6eBinKkBfErlaJWdJq3W7VI4BK7xiY8I0paDOxDQa6OysU1e3aSgc1by2 WevSz5t+q+kcn6+nzV9bVRO5rTHbYolk1VZJAK3c+bVhTVmz1UMT2YddUfT0r25Z GhpoggHUCRJK5PUz5ynkaOQ71kGd4qYdFIXGIaxuE66GnjHfHnU3NXVlQ6msYl/L 2MjcisPW4DxJjVlFh2uJEbTtUuO6nOpf39DGQZX26PXuQMDvkUnkRdScdOj9EIgY /hJDlEkDd7PWqaxrURb0+xE999jzPcTi6L70S3CxHRn9kg3qiA3NvNp5REenmQzn edYZ1klO05A1rJ6HTUtS2uStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUya4x4lpi UN+JcMbIcAALfdOFfZAwHwYDVR0jBBgwFoAUGO2rsoIM4l+Q6GNcE7fw1F8EY3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODEwLzdCQThEMzlDQzcw ODExRUZBODlCMEM1RkM0RjlBRTAyL0dPMnJzb0lNNGwtUTZHTmNFN2Z3MUY4RVkz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR08ycnNvSU00bC1RNkdOY0U3ZncxRjhFWTNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODEwLzdCQThEMzlDQzcwODExRUZBODlCMEM1RkM0RjlBRTAyL0dPMnJzb0lNNGwt UTZHTmNFN2Z3MUY4RVkzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfgZs0BpGXafd/OhOkKK+/R+Bajewcc2EV4eGjWHHd7yQnOzkKBpVtT JOdH22T/vtocDM3eQCkDeNJNL8YegLKB4+8ILcsuRN4KiXQh8pMZUFX9avLS6jMJ eHC/y7Y6JapMgdbgi+ODdC8g7HVBgdNvTzc4sxF+akv5EROUenvqawlUULFiSGW/ Jx+kuLFhxcqoPOUbTwERhrFRQ5ejX0eVXl3dYgnAsru/T1YvnUdVWthuR8G33Ph6 Hod0ezy0KhddMRiDnHV4baIpUeDzj8Thcif2nuhavWX781LSCC8DLiR4Z3HdxCQD 67Ii0RZmmNzhUj613BeGFQUsDhq6LNU= -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:43 2025 by rpki-client