$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: flvHSLufgDu8q9X2hadIX1DdaNMeiLAlU+npFX0rO5Y= Subject key identifier: FC:5F:5E:BE:36:31:32:E8:A0:78:C2:4C:A5:8E:42:7F:D9:5C:16:18 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 05F2 Signing time: Thu 24 Apr 2025 22:46:52 +0000 Manifest this update: Thu 24 Apr 2025 22:46:51 +0000 Manifest next update: Thu 01 May 2025 22:46:51 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: 7t3aubofFnqlFr6m/5AaQRIReMsPgt5gYpn8QLCmaKw=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: NA32Il3ooyRG5ZJzSaQY0C1tJ0UNwEBD0xl7vGAZUYs=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: CVu1eE6uo1a4oR5jqcfO88CtMHewZGUSBjKAtdVPCIw=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: x1ayzpnW5YFxaRN24Av9ElsmrFSke9qosmrhE25drSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Apr 24 22:46:51 2025 GMT Not After : May 1 22:46:51 2025 GMT Subject: CN=680abf5c-d916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:df:93:aa:4f:0e:65:6b:8c:5e:4d:19:28: 47:d2:eb:9a:d1:a3:ca:5a:90:a5:8d:d1:82:5f:a3: d0:64:99:8c:1c:54:b7:b8:2f:46:9d:20:cc:54:6b: 6f:6d:4c:28:1c:6f:03:5f:79:f1:c6:a2:8e:ab:84: 5d:cd:8d:c1:94:44:90:ae:2c:f6:37:4b:8d:87:c8: 19:7e:da:4a:eb:7f:85:cf:76:06:6e:f1:03:65:f3: 00:57:21:d4:5f:45:2a:65:97:5a:20:05:f8:6c:54: 98:72:cd:f7:aa:04:82:a3:fa:2a:cb:23:73:86:83: 49:d8:be:5a:2b:bd:87:f4:35:88:12:60:0e:dc:6a: d0:c4:5f:93:27:9f:23:5d:18:dc:6d:0f:99:48:e6: 6b:01:ec:5c:65:2a:2c:d7:06:21:7a:be:fb:3c:aa: 14:7d:c7:ca:f0:48:fc:01:57:30:d0:c6:02:23:71: 59:64:c6:a7:c7:d4:0d:ff:ba:9d:ac:78:76:2d:ba: ea:62:bd:43:b1:5f:25:e8:41:4f:9b:97:2c:1d:a5: 11:a7:78:05:ad:3d:6f:55:a4:91:9f:34:fa:0c:af: 9a:5a:c7:34:87:b8:d6:f7:d8:9b:a1:5a:ed:08:77: b5:c7:62:0e:56:72:3b:e2:ab:1c:6b:67:01:65:1a: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5F:5E:BE:36:31:32:E8:A0:78:C2:4C:A5:8E:42:7F:D9:5C:16:18 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:72:15:a5:67:02:52:44:d3:99:83:9f:b4:fb:77:f0:4c:f4: ff:7a:f3:77:3a:e6:94:79:8c:9f:b0:b5:9d:af:57:71:76:5a: 12:6e:cd:b8:88:11:83:fa:bf:64:dc:65:72:6d:dc:c8:6e:6e: 58:05:06:cf:28:ef:4a:05:72:81:5c:7b:e8:00:b7:23:a9:ea: ce:b9:6e:56:34:f1:94:f3:f3:b9:f0:05:53:19:21:08:85:2e: 60:9b:df:00:09:cb:84:75:98:9c:27:08:7f:c9:b5:4f:77:32: 46:79:31:5b:b9:76:9e:88:ab:3b:80:62:60:8c:c7:0f:fa:71: 70:c2:fb:94:a4:93:20:0b:9a:ca:cf:1a:68:8f:82:f7:de:c9: f7:c0:99:ed:c9:49:0b:c9:e7:be:ab:9e:51:4d:ea:9d:48:99: 81:1b:49:f3:ce:db:a9:87:fc:80:18:b7:d4:40:66:03:ec:7f: 6c:27:8a:2f:f6:4c:7a:98:c2:20:cf:99:cb:79:94:ef:fd:1a: 2b:4c:87:19:af:ca:14:ac:c7:56:a7:2c:11:d0:25:85:c8:3f: e2:31:10:fc:ff:c9:d9:45:00:75:8a:1f:4d:29:39:dd:68:44: 7d:4c:7d:ff:a2:80:3d:61:0c:46:12:cd:a0:ef:bb:a4:e3:41: fa:93:1e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUwNDI0MjI0NjUxWhcNMjUwNTAxMjI0NjUxWjAYMRYwFAYD VQQDEw02ODBhYmY1Yy1kOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0S/fk6pPDmVrjF5NGShH0uua0aPKWpCljdGCX6PQZJmMHFS3uC9GnSDMVGtv bUwoHG8DX3nxxqKOq4RdzY3BlESQriz2N0uNh8gZftpK63+Fz3YGbvEDZfMAVyHU X0UqZZdaIAX4bFSYcs33qgSCo/oqyyNzhoNJ2L5aK72H9DWIEmAO3GrQxF+TJ58j XRjcbQ+ZSOZrAexcZSos1wYher77PKoUfcfK8Ej8AVcw0MYCI3FZZManx9QN/7qd rHh2LbrqYr1DsV8l6EFPm5csHaURp3gFrT1vVaSRnzT6DK+aWsc0h7jW99iboVrt CHe1x2IOVnI74qsca2cBZRoUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxfXr42 MTLooHjCTKWOQn/ZXBYYMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwchWlZwJSRNOZg5+0+3fwTPT/evN3OuaUeYyfsLWdr1dxdloSbs24 iBGD+r9k3GVybdzIbm5YBQbPKO9KBXKBXHvoALcjqerOuW5WNPGU8/O58AVTGSEI hS5gm98ACcuEdZicJwh/ybVPdzJGeTFbuXaeiKs7gGJgjMcP+nFwwvuUpJMgC5rK zxpoj4L33sn3wJntyUkLyee+q55RTeqdSJmBG0nzztuph/yAGLfUQGYD7H9sJ4ov 9kx6mMIgz5nLeZTv/RorTIcZr8oUrMdWpywR0CWFyD/iMRD8/8nZRQB1ih9NKTnd aER9TH3/ooA9YQxGEs2g77uk40H6kx5y -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:53 2025 by rpki-client