$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: J9UqmHzErLV8dvsiO2G3PvKdvNWVQS3KsrrjPCw8OKU= Subject key identifier: 25:A8:3D:17:E5:2D:C0:FF:A1:34:72:7B:20:B2:B3:04:EA:3D:F0:40 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1A02 Signing time: Thu 24 Apr 2025 16:22:39 +0000 Manifest this update: Thu 24 Apr 2025 16:22:39 +0000 Manifest next update: Thu 01 May 2025 16:22:39 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: Liyf7JJOi9dTaL7GllVYiYDSJepB96Ci4FeTctYeVyo=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: iV+H7nZASeRKJAkmlrSEj4OlZh5r+8ZJVSgde+Ag920=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: NOg9hWlIl8JvvgfKPcNWmB3xJs1J2zSryYeuAsFiZYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6672 (0x1a10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Apr 24 16:22:39 2025 GMT Not After : May 1 16:22:39 2025 GMT Subject: CN=680a654f-feef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:2e:2f:48:bd:09:7b:e7:4b:25:dd:a3:ae: d7:2e:66:f0:43:db:26:23:e6:5b:4d:84:43:72:db: c9:33:25:ee:a9:e6:fd:6c:ad:ee:74:60:38:c6:14: e0:39:e5:7d:75:5a:4f:1a:ee:6d:f9:cc:56:89:af: 97:2c:78:1b:23:49:66:ea:ed:85:91:18:00:ec:16: b6:f1:0e:0c:7e:33:95:a7:43:12:5e:c2:df:0f:b7: de:34:8c:5f:8e:44:a4:49:93:5f:c6:1d:19:e5:ee: c2:67:d4:b4:b9:ae:1f:46:8f:14:87:6a:ff:0e:2f: 3a:7a:d8:b0:b9:c2:5b:95:1b:4c:6c:ee:c3:f7:47: 04:84:c4:87:de:a1:05:98:36:f8:2c:31:ad:49:9b: 7f:43:90:8f:41:94:59:3b:74:b9:85:87:ac:58:ca: c7:10:20:85:12:9c:4b:a7:85:28:1c:3b:9e:69:94: d6:b5:d0:92:25:2d:73:72:5e:91:bd:f6:ff:31:3a: 0d:80:12:19:e0:b3:c3:26:50:69:0b:e4:f8:6d:3e: fc:ee:e4:f7:14:ba:fe:fd:d7:15:3e:8e:da:b8:ce: ea:6f:80:8e:4b:bc:d0:77:ec:21:0a:b8:11:29:0b: 3b:cd:74:dd:41:20:30:34:41:77:0c:23:9e:de:8c: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:3D:17:E5:2D:C0:FF:A1:34:72:7B:20:B2:B3:04:EA:3D:F0:40 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:44:3a:3e:1a:3a:e1:e8:c6:c8:5c:69:27:55:73:c7:cb:ab: d7:eb:3f:b6:b4:bd:ea:cc:c2:c6:3d:40:41:cf:5f:43:36:f4: 6f:6c:f7:73:f8:83:ba:4b:b1:4d:4a:a2:a9:bb:32:0e:c6:07: 9f:01:60:1f:13:ce:c9:a9:11:72:d5:9c:c5:94:d4:60:6d:df: cf:c4:49:70:95:32:52:33:12:26:61:ad:86:4c:c5:57:45:48: 8d:4a:4c:09:7e:87:65:21:66:8d:e6:ae:22:77:f5:4b:a8:e8: 74:39:c0:fe:37:64:6a:1e:ad:99:c9:db:d2:40:0d:80:59:33: 60:3e:5a:5f:5f:00:da:43:df:f1:b0:4d:c8:0a:c0:cd:14:c0: 5e:e1:5e:0c:39:38:ac:c5:b1:27:82:23:1b:b4:40:29:8d:d0: c5:16:d7:37:c1:1d:60:06:b8:4f:6c:1b:42:00:6b:a3:c6:4d: 81:e8:28:9c:c5:d1:a4:1b:11:b5:85:38:67:54:1e:d1:14:b8: bd:45:f9:81:51:59:cb:68:0d:bd:b7:23:3f:d3:bb:f9:8d:5d: 2e:28:1b:c4:1f:eb:e5:d4:8a:e0:89:5b:23:54:f2:6a:3a:70: 94:d8:6f:74:5c:cd:da:c7:f1:72:c9:7c:d9:50:04:6e:93:7c: 4a:91:fd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNDI0MTYyMjM5WhcNMjUwNTAxMTYyMjM5WjAYMRYwFAYD VQQDEw02ODBhNjU0Zi1mZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1v4uL0i9CXvnSyXdo67XLmbwQ9smI+ZbTYRDctvJMyXuqeb9bK3udGA4xhTg OeV9dVpPGu5t+cxWia+XLHgbI0lm6u2FkRgA7Ba28Q4MfjOVp0MSXsLfD7feNIxf jkSkSZNfxh0Z5e7CZ9S0ua4fRo8Uh2r/Di86etiwucJblRtMbO7D90cEhMSH3qEF mDb4LDGtSZt/Q5CPQZRZO3S5hYesWMrHECCFEpxLp4UoHDueaZTWtdCSJS1zcl6R vfb/MToNgBIZ4LPDJlBpC+T4bT787uT3FLr+/dcVPo7auM7qb4COS7zQd+whCrgR KQs7zXTdQSAwNEF3DCOe3oyrhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWoPRfl LcD/oTRyeyCyswTqPfBAMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeRDo+Gjrh6MbIXGknVXPHy6vX6z+2tL3qzMLGPUBBz19DNvRvbPdz +IO6S7FNSqKpuzIOxgefAWAfE87JqRFy1ZzFlNRgbd/PxElwlTJSMxImYa2GTMVX RUiNSkwJfodlIWaN5q4id/VLqOh0OcD+N2RqHq2ZydvSQA2AWTNgPlpfXwDaQ9/x sE3ICsDNFMBe4V4MOTisxbEngiMbtEApjdDFFtc3wR1gBrhPbBtCAGujxk2B6Cic xdGkGxG1hThnVB7RFLi9RfmBUVnLaA29tyM/07v5jV0uKBvEH+vl1IrgiVsjVPJq OnCU2G90XM3ax/FyyXzZUARuk3xKkf32 -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:34 2025 by rpki-client