$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: bSK3r0DjNWiQPHk1Ck4vkkEsvbijZBXHCn5pJqMdNMM= Subject key identifier: 15:4A:99:78:DE:3F:54:1D:74:CC:B1:27:30:DC:85:A4:BE:48:42:31 Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 04A5 Signing time: Thu 24 Apr 2025 23:43:24 +0000 Manifest this update: Thu 24 Apr 2025 23:43:24 +0000 Manifest next update: Thu 01 May 2025 23:43:24 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: 7pBuyohnETnK7xeuROaCcfM6gG2of347h3q2m8qM060=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: mu1mKwNxbL7+Qz6oyXzuFah+meolf6goLYumQsj+R3w=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: piiG9QvMfLvduFL/aWOQ0VapC6DoQwecA1GtDw7CHzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Apr 24 23:43:24 2025 GMT Not After : May 1 23:43:24 2025 GMT Subject: CN=680acc9c-f3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:42:cb:17:3e:4c:16:f3:ae:d7:b2:2a:47: 9f:a2:99:5d:37:a9:a5:22:9e:b1:1b:09:60:d2:16: 4e:88:9f:80:67:36:27:eb:f7:4e:7e:58:ef:ca:94: a6:5f:98:8d:68:5c:b7:d1:bb:14:b4:c7:4a:8b:cc: 44:5e:6c:6e:a6:df:52:1d:16:ea:13:df:4a:ac:0a: 5b:1b:13:e0:d8:a9:c5:28:50:a5:68:cb:32:48:0e: 66:6f:95:e6:b6:3a:fe:4e:ff:80:6b:3d:6f:67:85: c8:ef:b3:98:0d:ed:ab:89:54:57:0d:bb:be:4e:d0: da:28:8a:b9:a1:b2:72:62:9f:86:4c:93:9f:ed:4b: c8:c8:b6:25:cf:07:cf:df:b2:41:bc:d9:3f:97:4f: c6:06:56:c2:df:7a:cf:df:e1:96:6b:fe:65:17:ab: 7b:29:ae:1f:f1:58:e0:c9:1e:16:35:f9:47:3f:8a: d9:ae:58:3c:fb:b6:bf:9a:78:11:e2:ad:a5:09:63: c8:91:d8:d0:c5:34:ae:25:83:88:40:e0:bd:d8:53: 2e:98:01:50:98:81:8f:3f:ba:7b:40:cf:a6:b3:39: 43:c9:a5:46:7f:a7:48:75:1f:be:5c:42:92:ed:04: f9:92:cf:37:50:3b:21:2b:40:26:9e:40:f1:f6:38: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:99:78:DE:3F:54:1D:74:CC:B1:27:30:DC:85:A4:BE:48:42:31 X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:6e:51:50:4a:aa:d9:b8:36:68:ff:10:3b:3d:99:a3:7e: 4a:17:dd:a3:5f:50:fe:74:33:9a:01:5d:12:6c:c1:3b:2d:27: 64:95:9d:a8:00:3e:70:53:b4:9a:44:d0:ed:3f:ad:ab:31:18: 39:7a:d2:89:fc:23:08:dd:3d:19:f8:7d:63:35:ae:7b:08:07: c5:e3:77:ea:c7:1e:60:6f:04:2b:c5:72:96:32:ad:6d:b1:1c: 99:6d:34:e0:17:27:78:75:37:4b:c9:40:5d:2c:10:c2:4b:55: 6a:61:88:f9:d0:6f:01:b2:5f:d3:09:d5:a7:19:32:aa:ee:68: d9:58:fd:c1:0a:90:68:07:84:55:40:fa:d4:bc:1f:1d:cb:93: 44:bf:bd:bc:a3:81:1f:b8:36:0e:9b:dc:38:5d:b8:0c:b0:9e: 6d:cb:5e:40:df:bd:46:a1:03:9c:d5:35:bb:3e:ca:71:22:95: 7b:30:75:66:62:15:9b:7f:14:2d:f8:e5:97:b5:ad:e0:f1:dc: c1:28:73:0e:df:5e:c5:a5:a9:12:d1:bd:3e:a9:53:09:4c:dc: 10:37:2e:ec:6a:57:b5:32:d1:00:96:3e:8c:cf:0c:5e:1e:96: ff:15:dc:2f:57:b8:ec:38:40:50:a5:25:e8:45:89:60:fc:40: ed:f5:b0:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjUwNDI0MjM0MzI0WhcNMjUwNTAxMjM0MzI0WjAYMRYwFAYD VQQDEw02ODBhY2M5Yy1mM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA099Cyxc+TBbzrteyKkefopldN6mlIp6xGwlg0hZOiJ+AZzYn6/dOfljvypSm X5iNaFy30bsUtMdKi8xEXmxupt9SHRbqE99KrApbGxPg2KnFKFClaMsySA5mb5Xm tjr+Tv+Aaz1vZ4XI77OYDe2riVRXDbu+TtDaKIq5obJyYp+GTJOf7UvIyLYlzwfP 37JBvNk/l0/GBlbC33rP3+GWa/5lF6t7Ka4f8VjgyR4WNflHP4rZrlg8+7a/mngR 4q2lCWPIkdjQxTSuJYOIQOC92FMumAFQmIGPP7p7QM+mszlDyaVGf6dIdR++XEKS 7QT5ks83UDshK0AmnkDx9jjz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVKmXje P1QddMyxJzDchaS+SEIxMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJyG5RUEqq2bg2aP8QOz2Zo35KF92jX1D+dDOaAV0SbME7LSdklZ2o AD5wU7SaRNDtP62rMRg5etKJ/CMI3T0Z+H1jNa57CAfF43fqxx5gbwQrxXKWMq1t sRyZbTTgFyd4dTdLyUBdLBDCS1VqYYj50G8Bsl/TCdWnGTKq7mjZWP3BCpBoB4RV QPrUvB8dy5NEv728o4EfuDYOm9w4XbgMsJ5ty15A371GoQOc1TW7PspxIpV7MHVm YhWbfxQt+OWXta3g8dzBKHMO317FpakS0b0+qVMJTNwQNy7sale1MtEAlj6Mzwxe Hpb/FdwvV7jsOEBQpSXoRYlg/EDt9bCZ -----END CERTIFICATE-----Generated at Sat Apr 26 05:11:35 2025 by rpki-client