$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: yu2/4uyMusm0bdwFWaCjqXeuh8ijpRks9lHjE4oencI= Subject key identifier: 7E:01:D9:54:4C:5E:9F:FF:C4:BE:FA:3D:92:58:F6:33:AC:6B:E8:F1 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 100E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1006 Signing time: Sun 20 Apr 2025 17:21:02 +0000 Manifest this update: Sun 20 Apr 2025 17:21:02 +0000 Manifest next update: Sun 27 Apr 2025 17:21:02 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: z4h4MV6z970ZHP6xbTMKUGpyZqXM9R8rVtNP4tDAmeA=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: C3t+NehZCmSbxSRABiEsj0jBSfoJdT1ufKsC9pvYusY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4110 (0x100e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Apr 20 17:21:02 2025 GMT Not After : Apr 27 17:21:02 2025 GMT Subject: CN=68052cfe-8983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:d1:a6:2e:0e:dc:7d:b7:01:d8:cb:4f:e8: d3:d9:29:06:68:42:21:46:bb:9e:67:8c:43:fa:db: 9e:16:39:0d:8f:97:29:85:e4:d9:af:f1:22:f6:89: d8:dc:b3:17:47:59:94:65:36:c2:51:72:e8:66:59: 07:16:38:df:82:7f:77:09:57:8a:ec:0f:33:c6:ba: 54:e4:d7:64:dc:1c:64:fd:0d:83:22:a2:ad:93:e6: 84:d6:89:3d:a5:7d:6a:44:97:c3:60:81:e9:38:13: e0:40:a2:e8:f4:62:06:e3:38:86:3b:88:12:49:5d: 39:02:58:c9:8a:bc:4d:4d:fb:ba:e4:46:ca:fd:50: 49:21:2d:16:c2:99:8e:7b:86:4e:4c:ab:a7:df:c0: c4:38:24:51:7d:2a:8e:b8:1a:ba:56:71:cd:c8:43: 43:5a:4d:2f:d7:29:53:75:9c:87:bf:47:9d:c7:11: 01:34:0c:ef:36:fa:1a:b0:38:86:7a:5c:da:5f:44: 43:0a:26:22:b0:64:47:fb:96:5e:d4:22:7c:cd:8b: 2a:81:fc:b5:c8:02:38:1c:78:1c:de:6b:69:02:ce: 4e:22:d4:1b:f2:4a:38:17:e4:81:b2:e6:84:a8:49: d9:c2:67:78:08:3c:28:6f:9c:15:76:0c:f6:fd:c2: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:D9:54:4C:5E:9F:FF:C4:BE:FA:3D:92:58:F6:33:AC:6B:E8:F1 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:95:a7:05:0d:e6:42:08:87:c2:2f:67:6c:26:6f:af:52:4d: 0d:43:20:f4:24:d8:ca:b6:79:9a:29:2a:2a:6a:80:7c:39:49: 4f:bc:3f:a4:d7:62:43:59:3b:28:ce:ee:93:b4:ef:b7:a7:b4: 6f:21:16:bf:ba:98:5a:af:30:5e:c4:97:ae:76:d1:11:1d:b9: d4:d1:35:68:41:dd:2c:d4:e7:07:bd:3f:60:49:fd:df:e7:7b: c6:8a:27:bb:ab:5b:ac:00:37:80:68:ce:a0:57:46:ab:95:32: fb:ad:f5:0d:1d:e8:60:7f:b7:5f:4f:22:47:a0:d1:3e:1f:ea: 96:00:21:2b:ae:e2:4a:a1:7c:9c:25:18:18:6a:48:d5:9c:9a: 35:e8:18:07:da:7b:b5:43:00:88:fe:97:44:ce:15:01:ab:40: 33:c9:96:23:c9:c0:21:02:17:7a:8a:d5:ca:48:0b:96:46:5a: 2d:ef:1f:20:0c:02:4e:cc:05:b3:36:2d:46:85:ae:8f:7d:52: 05:41:ae:3e:9a:71:11:5f:b6:78:1d:a2:d9:14:11:2d:4d:37: c6:4d:1c:53:f0:18:c1:ac:d7:78:50:a1:5e:ca:b7:bf:8d:f3: 1b:14:34:3e:e7:a0:ea:67:8e:6f:00:c8:d3:48:82:d8:a6:55: 19:91:5d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwNDIwMTcyMTAyWhcNMjUwNDI3MTcyMTAyWjAYMRYwFAYD VQQDEw02ODA1MmNmZS04OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0fRpi4O3H23AdjLT+jT2SkGaEIhRrueZ4xD+tueFjkNj5cpheTZr/Ei9onY 3LMXR1mUZTbCUXLoZlkHFjjfgn93CVeK7A8zxrpU5Ndk3Bxk/Q2DIqKtk+aE1ok9 pX1qRJfDYIHpOBPgQKLo9GIG4ziGO4gSSV05AljJirxNTfu65EbK/VBJIS0WwpmO e4ZOTKun38DEOCRRfSqOuBq6VnHNyENDWk0v1ylTdZyHv0edxxEBNAzvNvoasDiG elzaX0RDCiYisGRH+5Ze1CJ8zYsqgfy1yAI4HHgc3mtpAs5OItQb8ko4F+SBsuaE qEnZwmd4CDwob5wVdgz2/cKWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4B2VRM Xp//xL76PZJY9jOsa+jxMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzlacFDeZCCIfCL2dsJm+vUk0NQyD0JNjKtnmaKSoqaoB8OUlPvD+k 12JDWTsozu6TtO+3p7RvIRa/upharzBexJeudtERHbnU0TVoQd0s1OcHvT9gSf3f 53vGiie7q1usADeAaM6gV0arlTL7rfUNHehgf7dfTyJHoNE+H+qWACErruJKoXyc JRgYakjVnJo16BgH2nu1QwCI/pdEzhUBq0AzyZYjycAhAhd6itXKSAuWRlot7x8g DAJOzAWzNi1Gha6PfVIFQa4+mnERX7Z4HaLZFBEtTTfGTRxT8BjBrNd4UKFeyre/ jfMbFDQ+56DqZ45vAMjTSILYplUZkV0a -----END CERTIFICATE-----Generated at Mon Apr 21 07:26:13 2025 by rpki-client