$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: cHSuWxk77FrBHZRO4zUrDlm5awHRcdLy9ckD5IvYnDs= Subject key identifier: 50:16:85:D5:89:3B:53:5E:FE:21:40:5C:B9:A2:6A:82:82:29:7C:A4 Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 056C Signing time: Thu 24 Apr 2025 23:08:27 +0000 Manifest this update: Thu 24 Apr 2025 23:08:27 +0000 Manifest next update: Thu 01 May 2025 23:08:27 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: ErRTmIjRwYnQNZfRzbXYofu/t+FZiyhmwos+QiurhUw=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: eALzuGTBIdO32t7InjPCWdnlihceQ6Ej+q9aOFO73+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: Apr 24 23:08:27 2025 GMT Not After : May 1 23:08:27 2025 GMT Subject: CN=680ac46b-aded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2f:56:07:82:d3:4e:7a:de:fd:bb:12:f3:26: ed:fb:af:41:51:ff:cd:45:51:07:33:38:23:64:fe: 4b:05:d9:1e:53:91:89:c4:ba:cc:20:14:c1:32:f2: 43:e5:04:e7:b3:9a:71:e8:a0:33:b6:d4:90:c3:ea: 49:70:54:9a:e2:2d:d9:52:bf:8d:38:31:53:23:f5: 3d:c5:e8:f0:e8:f4:f7:ea:c5:4d:2c:50:81:c5:7e: f4:87:e2:23:65:01:55:1f:74:eb:85:09:3a:3f:92: 3b:74:b0:b6:8a:27:8d:01:81:97:fd:ad:32:e9:d8: 5c:14:b8:bc:54:cf:9e:f5:c5:ed:10:92:10:27:83: a2:59:63:23:1c:4e:07:26:c1:a6:7a:42:50:4c:c9: a0:55:f3:85:59:63:c8:7e:ec:ab:02:a8:8d:9e:dd: 6b:63:f0:52:5c:f6:97:5c:a7:18:c0:17:93:f0:1c: 7c:d2:af:af:96:95:33:57:a6:ce:44:fb:b0:83:18: 55:4e:26:38:78:1c:d9:2a:21:02:1e:24:b1:aa:37: 60:d2:63:56:e6:50:0d:73:36:03:8b:91:c4:a7:95: 22:b7:02:5f:07:6a:32:67:ea:89:ec:c3:a2:4f:80: ea:76:35:67:26:51:4d:f2:95:e9:9a:62:4d:25:7f: 15:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:16:85:D5:89:3B:53:5E:FE:21:40:5C:B9:A2:6A:82:82:29:7C:A4 X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:32:79:07:59:0d:72:16:ad:90:75:55:ae:3b:56:ec:38:14: 76:53:4b:f0:99:19:1e:f0:28:5c:bc:7b:8e:97:28:50:c8:a7: a3:eb:88:9a:8b:cd:7f:f6:be:01:36:f8:a0:99:95:f2:a7:90: 0b:ee:f6:0f:9c:58:21:2e:dd:51:da:af:42:3b:ee:68:31:22: 41:08:9d:21:ea:c3:ae:51:eb:e1:ba:bd:14:41:a5:43:a2:7f: dc:00:17:80:6a:09:15:73:73:02:b0:c6:42:09:69:ee:7c:56: 7d:2c:05:c0:98:70:0e:a5:64:41:b3:20:e1:0f:aa:59:92:b5: d3:99:7f:a8:ea:87:eb:e2:a8:cb:1b:cd:cb:8e:1f:f7:2e:1a: e7:ca:63:6c:f3:f9:c3:13:98:0f:aa:b6:8a:da:b5:c7:b8:a9: 00:38:14:5d:1d:37:ec:46:d9:0f:f5:16:9e:dd:9c:e4:57:51: 04:ae:52:30:7f:5f:c5:6d:54:74:e8:fd:04:2b:c3:6b:0c:84: 86:7e:96:08:be:5e:2c:b3:71:1b:65:ac:22:8d:4e:61:47:b0: cd:b5:5d:fb:af:51:c1:9e:8c:1e:be:75:52:6f:b3:87:0d:33: 30:62:e8:be:5d:43:e3:00:4b:66:f5:43:c5:b9:77:26:40:28: 5e:57:08:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwNDI0MjMwODI3WhcNMjUwNTAxMjMwODI3WjAYMRYwFAYD VQQDEw02ODBhYzQ2Yi1hZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9S9WB4LTTnre/bsS8ybt+69BUf/NRVEHMzgjZP5LBdkeU5GJxLrMIBTBMvJD 5QTns5px6KAzttSQw+pJcFSa4i3ZUr+NODFTI/U9xejw6PT36sVNLFCBxX70h+Ij ZQFVH3TrhQk6P5I7dLC2iieNAYGX/a0y6dhcFLi8VM+e9cXtEJIQJ4OiWWMjHE4H JsGmekJQTMmgVfOFWWPIfuyrAqiNnt1rY/BSXPaXXKcYwBeT8Bx80q+vlpUzV6bO RPuwgxhVTiY4eBzZKiECHiSxqjdg0mNW5lANczYDi5HEp5UitwJfB2oyZ+qJ7MOi T4DqdjVnJlFN8pXpmmJNJX8VMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAWhdWJ O1Ne/iFAXLmiaoKCKXykMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbMnkHWQ1yFq2QdVWuO1bsOBR2U0vwmRke8ChcvHuOlyhQyKej64ia i81/9r4BNvigmZXyp5AL7vYPnFghLt1R2q9CO+5oMSJBCJ0h6sOuUevhur0UQaVD on/cABeAagkVc3MCsMZCCWnufFZ9LAXAmHAOpWRBsyDhD6pZkrXTmX+o6ofr4qjL G83Ljh/3LhrnymNs8/nDE5gPqraK2rXHuKkAOBRdHTfsRtkP9Rae3ZzkV1EErlIw f1/FbVR06P0EK8NrDISGfpYIvl4ss3EbZawijU5hR7DNtV37r1HBnowevnVSb7OH DTMwYui+XUPjAEtm9UPFuXcmQCheVwjt -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:36 2025 by rpki-client