$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: aEu6CZRMtpeJEnx+sckBZ83iz6tgkC51Nf2XTiv4HcE= Subject key identifier: EF:A9:85:5F:AB:34:25:71:1B:1B:C5:06:F0:8B:01:53:32:D4:7C:73 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 1175 Signing time: Thu 24 Apr 2025 17:14:40 +0000 Manifest this update: Thu 24 Apr 2025 17:14:39 +0000 Manifest next update: Thu 01 May 2025 17:14:39 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: 2ygJwc0/TzJOYtUMosdeKLtzcZCFMFUf8Wvjg0dSLRA=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4480 (0x1180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Apr 24 17:14:39 2025 GMT Not After : May 1 17:14:39 2025 GMT Subject: CN=680a7180-3cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:9b:95:29:5f:3b:8c:5c:56:c6:8d:37:10: 7b:10:4f:2e:dc:9f:7d:d4:b4:ce:77:48:68:1e:6a: 97:51:77:48:96:52:ab:7d:bc:d9:21:f9:26:7d:98: f4:d9:a0:fa:60:62:1f:b0:20:f2:92:55:04:0e:20: 1d:39:15:0f:16:dd:98:b4:c5:e2:5a:b5:1b:28:8f: 5b:1e:1a:cf:a2:38:aa:0e:3b:40:76:4c:d1:96:94: 77:e0:71:31:fd:ab:18:61:f9:a9:8e:5a:be:2e:0c: 03:aa:69:69:f3:86:7d:86:e4:58:10:98:08:1b:b0: 73:6a:0c:76:be:ea:fd:39:c3:7a:7f:15:3d:f1:09: 38:ce:bb:8b:d2:7c:8a:70:88:49:d2:a4:91:77:c6: 10:0b:de:4e:d1:9d:3b:99:5d:47:68:26:46:43:cd: 3a:dc:78:f2:1f:d5:8f:98:05:04:cf:04:b8:73:73: 3e:29:e4:f1:9b:42:34:00:e0:69:22:a3:45:bf:68: bc:ca:ea:69:b0:51:59:4e:d2:f9:a1:05:78:76:d9: 6b:93:3b:52:7a:d3:62:ff:22:00:d6:23:b6:1e:62: 9e:70:ea:04:83:17:03:39:14:21:1d:ac:f8:4d:f1: 51:6c:f6:f7:74:78:02:ef:ca:13:68:1d:d5:19:84: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A9:85:5F:AB:34:25:71:1B:1B:C5:06:F0:8B:01:53:32:D4:7C:73 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:1e:10:41:94:bc:b1:4b:99:03:41:d8:d1:e9:55:ba:c3: 38:ec:2d:2f:0a:08:22:df:04:4a:e5:4e:96:30:f2:b7:64:0d: 3a:40:b2:32:d6:62:42:4b:71:01:f9:7c:6a:19:f7:16:42:46: ae:bd:56:36:19:c7:ce:ad:41:fe:cc:9d:e5:5f:0d:c0:27:0c: 12:cc:ed:e4:41:d1:e3:09:ec:82:ae:a4:ea:2e:45:7a:3b:a5: db:e6:b6:fa:7b:c4:1f:bc:08:f3:77:a3:fb:c2:9c:df:35:ba: a0:35:cf:ce:1c:19:80:8a:48:f2:70:95:89:90:61:2f:d2:b0: 31:b7:54:23:6d:49:2d:5c:9e:95:f7:e0:82:b6:c8:65:7a:a6: 2b:40:f7:10:a9:27:f7:5d:79:da:ab:34:c6:35:01:34:39:01: a4:6b:24:a0:a1:03:10:f7:0f:27:fc:c7:4c:22:9b:1b:bd:73: 1a:3d:bf:b0:d8:11:09:50:46:56:4b:8a:e2:54:7a:8e:33:a5: 3c:2b:b6:d2:0a:ff:42:11:b2:60:c5:cc:69:10:86:92:1f:48: 6a:10:c9:f2:14:3f:1f:00:0b:12:cf:32:4b:86:c0:4c:f9:5d: 99:6c:3c:d7:cf:69:06:6b:b6:9c:67:d3:cb:81:a9:0d:ac:f4: c4:ab:08:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNDI0MTcxNDM5WhcNMjUwNTAxMTcxNDM5WjAYMRYwFAYD VQQDEw02ODBhNzE4MC0zY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT+blSlfO4xcVsaNNxB7EE8u3J991LTOd0hoHmqXUXdIllKrfbzZIfkmfZj0 2aD6YGIfsCDyklUEDiAdORUPFt2YtMXiWrUbKI9bHhrPojiqDjtAdkzRlpR34HEx /asYYfmpjlq+LgwDqmlp84Z9huRYEJgIG7Bzagx2vur9OcN6fxU98Qk4zruL0nyK cIhJ0qSRd8YQC95O0Z07mV1HaCZGQ8063HjyH9WPmAUEzwS4c3M+KeTxm0I0AOBp IqNFv2i8yuppsFFZTtL5oQV4dtlrkztSetNi/yIA1iO2HmKecOoEgxcDORQhHaz4 TfFRbPb3dHgC78oTaB3VGYQjuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+phV+r NCVxGxvFBvCLAVMy1HxzMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAysB4QQZS8sUuZA0HY0elVusM47C0vCggi3wRK5U6WMPK3ZA06QLIy 1mJCS3EB+XxqGfcWQkauvVY2GcfOrUH+zJ3lXw3AJwwSzO3kQdHjCeyCrqTqLkV6 O6Xb5rb6e8QfvAjzd6P7wpzfNbqgNc/OHBmAikjycJWJkGEv0rAxt1QjbUktXJ6V 9+CCtshleqYrQPcQqSf3XXnaqzTGNQE0OQGkaySgoQMQ9w8n/MdMIpsbvXMaPb+w 2BEJUEZWS4riVHqOM6U8K7bSCv9CEbJgxcxpEIaSH0hqEMnyFD8fAAsSzzJLhsBM +V2ZbDzXz2kGa7acZ9PLgakNrPTEqwh2 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:54 2025 by rpki-client