$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: +JTdbsnpX5FCzf8WBIpRk1zZM0S3kPC08ccFuGBFjMo= Subject key identifier: 27:8C:60:B4:49:03:AD:74:AB:41:62:73:7E:34:9D:F8:70:F9:BD:DD Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 01C2 Signing time: Fri 25 Apr 2025 02:10:35 +0000 Manifest this update: Fri 25 Apr 2025 02:10:34 +0000 Manifest next update: Fri 02 May 2025 02:10:34 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: 9jmvXAAOhuQ4JQsao/zmKFW6s4yRjY5uQjiPuhdQZa8=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: Apr 25 02:10:34 2025 GMT Not After : May 2 02:10:34 2025 GMT Subject: CN=680aef1a-9c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:2d:fd:cb:ed:5a:7f:31:aa:f5:46:b6:a7: 52:45:09:ce:6e:b8:a6:24:36:88:d1:7c:ea:7f:d7: ee:33:84:21:e3:99:32:01:80:32:bf:d4:29:af:30: ca:f9:01:20:96:6f:97:84:65:c4:49:df:c3:c2:a8: 32:ae:ff:4e:45:28:86:1f:15:d3:e8:23:f1:00:9f: da:cc:d5:77:86:43:8e:d8:89:1b:65:72:24:2b:e7: 52:68:30:c0:eb:87:3d:d3:49:cc:a3:78:6c:5c:37: b4:3a:0a:46:19:2c:67:f2:ef:76:95:5f:d0:6f:4c: e5:75:cd:5f:38:f8:19:4d:b0:58:68:6d:02:74:ae: 2c:59:c3:2c:69:36:a6:e0:de:b2:5d:e1:47:34:82: 44:3d:5c:d5:9b:be:fd:27:1a:79:5b:fa:bc:cc:56: 85:19:58:b5:8a:8b:23:98:f6:18:7f:d9:7c:55:71: ba:2a:48:f5:e9:8c:1c:93:1f:60:69:91:ce:00:02: 2a:c8:fc:d0:e3:04:c0:a8:5e:f9:55:45:9a:2d:99: 64:ab:b0:b4:7c:fe:23:46:53:94:07:dc:71:14:25: 4b:2c:53:48:c8:d2:48:ba:8e:c4:e2:59:f9:a7:6f: 7c:68:06:9e:50:bd:c8:e9:fd:dc:80:d5:40:84:02: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8C:60:B4:49:03:AD:74:AB:41:62:73:7E:34:9D:F8:70:F9:BD:DD X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:31:aa:b2:da:51:a1:88:cb:ff:d4:fd:e8:eb:d0:25:7c:fc: cc:45:23:16:bd:a2:6d:2d:a6:30:53:d9:d8:66:6d:e1:10:68: 55:78:cd:76:35:83:ad:b8:8c:65:f4:91:49:56:1f:89:36:21: 88:10:3c:a0:5f:a1:cc:23:13:63:98:c4:76:ed:7b:56:d8:46: d2:79:7b:45:fa:ca:51:a7:74:4a:77:a5:77:fd:3f:a0:0e:6c: 1a:98:95:13:ee:55:94:8a:de:37:7a:95:ed:f2:86:e2:be:64: 7f:98:03:13:b0:44:dd:8f:d7:32:b9:09:58:d2:a5:2e:12:1e: 22:01:72:4b:8e:5d:4d:54:78:40:5f:a3:49:52:df:a3:00:bf: e9:96:0c:2c:a6:54:07:48:0c:2a:f7:fe:06:c1:32:b7:8b:1b: 14:7b:1f:87:f5:e2:1a:63:6f:08:58:7f:56:e9:cf:ad:fb:c1: 17:10:b2:19:e8:df:e0:f3:ef:ac:38:76:d7:b9:e9:5c:20:d6: f0:83:50:a5:2e:12:57:0b:6e:92:64:a7:ab:16:08:46:b2:9a: 81:02:77:e6:0c:4d:6c:b1:be:e8:93:86:a4:9e:74:5d:33:85: d3:60:a0:bc:92:14:05:77:65:19:8f:ce:be:07:06:67:98:81: 07:3b:68:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUwNDI1MDIxMDM0WhcNMjUwNTAyMDIxMDM0WjAYMRYwFAYD VQQDEw02ODBhZWYxYS05YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKkt/cvtWn8xqvVGtqdSRQnObrimJDaI0Xzqf9fuM4Qh45kyAYAyv9QprzDK +QEglm+XhGXESd/Dwqgyrv9ORSiGHxXT6CPxAJ/azNV3hkOO2IkbZXIkK+dSaDDA 64c900nMo3hsXDe0OgpGGSxn8u92lV/Qb0zldc1fOPgZTbBYaG0CdK4sWcMsaTam 4N6yXeFHNIJEPVzVm779Jxp5W/q8zFaFGVi1iosjmPYYf9l8VXG6Kkj16Ywckx9g aZHOAAIqyPzQ4wTAqF75VUWaLZlkq7C0fP4jRlOUB9xxFCVLLFNIyNJIuo7E4ln5 p298aAaeUL3I6f3cgNVAhAL+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeMYLRJ A610q0Fic340nfhw+b3dMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjMaqy2lGhiMv/1P3o69AlfPzMRSMWvaJtLaYwU9nYZm3hEGhVeM12 NYOtuIxl9JFJVh+JNiGIEDygX6HMIxNjmMR27XtW2EbSeXtF+spRp3RKd6V3/T+g DmwamJUT7lWUit43epXt8obivmR/mAMTsETdj9cyuQlY0qUuEh4iAXJLjl1NVHhA X6NJUt+jAL/plgwsplQHSAwq9/4GwTK3ixsUex+H9eIaY28IWH9W6c+t+8EXELIZ 6N/g8++sOHbXuelcINbwg1ClLhJXC26SZKerFghGspqBAnfmDE1ssb7ok4aknnRd M4XTYKC8khQFd2UZj86+BwZnmIEHO2jn -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:40 2025 by rpki-client