$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json) Hash identifier: t/mK6PMuhI0tauAYmAvPdJNaMJTrNeqCXQTtZMpShgI= Subject key identifier: 62:7B:BD:74:0E:3A:C2:23:F9:0F:22:CD:FA:29:66:12:98:A0:2D:09 Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft Manifest number: 62 Signing time: Fri 25 Apr 2025 06:02:33 +0000 Manifest this update: Fri 25 Apr 2025 06:02:33 +0000 Manifest next update: Fri 02 May 2025 06:02:33 +0000 Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: WSF7napC2xAb0XkPAFY/tZFiX9gp0iJ2sa0PSmHcgCg=) 2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Validity Not Before: Apr 25 06:02:33 2025 GMT Not After : May 2 06:02:33 2025 GMT Subject: CN=680b2579-f94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:08:e5:27:01:65:58:8e:26:6c:15:28:32: 1b:85:34:7a:50:bd:b5:9b:fa:1f:3b:5d:6a:f3:ec: da:0e:63:a8:14:20:1e:ae:84:7b:c1:45:8c:d9:c8: df:4a:02:49:b7:04:b1:80:aa:ae:8e:df:7c:e3:09: c4:8f:05:01:3f:b2:ca:4d:2d:85:ee:04:f8:44:29: 6a:13:62:5d:5f:e0:d0:c3:dd:f7:e5:d2:1e:56:eb: a6:75:fa:3d:ec:5b:e1:36:94:11:a7:8e:2e:6e:3f: 7e:df:db:5c:6d:ed:0e:76:72:12:7d:d9:37:b1:16: 96:d1:7a:90:d4:8a:2e:91:06:5c:02:cd:46:12:ee: f2:2a:7a:a0:63:a8:2f:db:bf:50:58:08:ab:ca:47: e8:f5:8c:73:bb:80:9a:7f:9b:b2:d3:05:9b:c1:47: a8:b5:dc:b5:0f:1d:21:41:54:d2:9e:97:ab:70:53: 28:d7:7d:21:1f:da:bd:50:1d:e6:e0:7b:8b:63:f8: a6:d6:b2:48:17:fc:30:23:cd:35:53:29:63:37:d8: c9:f7:85:a1:4c:cd:ff:e7:9e:79:99:41:06:fe:ac: 3a:6e:59:b6:fa:34:52:3e:4d:1a:0e:5e:db:88:e7: 00:5a:c4:d3:b7:9b:4d:a4:0e:d4:40:34:e2:db:01: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:BD:74:0E:3A:C2:23:F9:0F:22:CD:FA:29:66:12:98:A0:2D:09 X509v3 Authority Key Identifier: keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:26:9c:c5:df:8b:71:aa:0b:01:46:ec:e9:8d:82:94:96:84: 91:94:09:6d:4d:65:01:a8:26:de:da:21:af:e1:fb:8b:24:88: 78:4d:64:7a:5c:01:4d:67:12:4d:8b:a6:e4:81:18:1e:35:eb: 20:fe:f0:90:0b:4e:5c:5c:8c:eb:29:ad:a4:9d:d9:63:f7:e1: 77:dd:04:bf:4b:a6:f8:30:64:dd:75:92:ae:dd:6a:f3:fc:2d: 74:74:78:f9:76:74:a2:74:09:62:3d:30:b6:ac:f6:99:ec:11: 14:52:1d:30:f0:7b:1c:19:32:f6:6c:fa:b9:45:b0:2e:27:c4: 7c:1f:58:87:2a:80:20:f7:ae:f7:97:5a:c6:ba:f0:80:63:e8: f3:ce:fe:6d:e9:07:55:c0:5d:24:a6:ec:87:ee:07:96:2a:67: 66:6a:13:c7:ce:4a:54:a0:08:0e:73:c4:00:c8:08:c8:c3:89: 73:a5:1c:1b:ee:b0:18:25:12:9a:c4:6d:4d:c9:ce:42:23:16: 5c:ff:a3:c6:07:c4:72:52:ea:93:34:21:99:c2:92:0f:85:5b: 6c:73:f3:25:29:1e:c6:01:f5:8a:d4:1e:da:2d:5d:9a:f3:79: 4d:23:35:0d:b5:66:3d:ca:38:3a:3d:56:9c:51:59:6e:77:5d: 03:c5:00:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzcyNDExMC8GA1UEBRMoMTk2ODI4QTgyMUY0MTZBQkE5Q0VDQzMxQUE3MUEzMDNG NDIxNDc3ODAeFw0yNTA0MjUwNjAyMzNaFw0yNTA1MDIwNjAyMzNaMBgxFjAUBgNV BAMTDTY4MGIyNTc5LWY5NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAvwjlJwFlWI4mbBUoMhuFNHpQvbWb+h87XWrz7NoOY6gUIB6uhHvBRYzZyN9K Akm3BLGAqq6O33zjCcSPBQE/sspNLYXuBPhEKWoTYl1f4NDD3ffl0h5W66Z1+j3s W+E2lBGnji5uP37f21xt7Q52chJ92TexFpbRepDUii6RBlwCzUYS7vIqeqBjqC/b v1BYCKvKR+j1jHO7gJp/m7LTBZvBR6i13LUPHSFBVNKel6twUyjXfSEf2r1QHebg e4tj+KbWskgX/DAjzTVTKWM32Mn3haFMzf/nnnmZQQb+rDpuWbb6NFI+TRoOXtuI 5wBaxNO3m02kDtRANOLbAXiZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYnu9dA46 wiP5DyLN+ilmEpigLQkwHwYDVR0jBBgwFoAUGWgoqCH0FqupzswxqnGjA/QhR3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NzI0LzVGOUM2QjkyOTA0 RDExRUZBMTEwMzg2NEM0RjlBRTAyL0dXZ29xQ0gwRnF1cHpzd3hxbkdqQV9RaFIz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1dnb3FDSDBGcXVwenN3eHFuR2pBX1FoUjNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NzI0LzVGOUM2QjkyOTA0RDExRUZBMTEwMzg2NEM0RjlBRTAyL0dXZ29xQ0gwRnF1 cHpzd3hxbkdqQV9RaFIzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4mnMXfi3GqCwFG7OmNgpSWhJGUCW1NZQGoJt7aIa/h+4skiHhNZHpc AU1nEk2LpuSBGB416yD+8JALTlxcjOspraSd2WP34XfdBL9LpvgwZN11kq7davP8 LXR0ePl2dKJ0CWI9MLas9pnsERRSHTDwexwZMvZs+rlFsC4nxHwfWIcqgCD3rveX Wsa68IBj6PPO/m3pB1XAXSSm7IfuB5YqZ2ZqE8fOSlSgCA5zxADICMjDiXOlHBvu sBglEprEbU3JzkIjFlz/o8YHxHJS6pM0IZnCkg+FW2xz8yUpHsYB9YrUHtotXZrz eU0jNQ21Zj3KODo9VpxRWW53XQPFADM= -----END CERTIFICATE-----Generated at Sat Apr 26 17:21:49 2025 by rpki-client