$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: BUar772aaoyGVRegNAnrOqJhnkCD6AIpo76nAn6lxKo= Subject key identifier: 48:DF:E8:6B:69:72:9D:55:8E:40:1E:EA:D5:D0:DB:D8:78:3F:5D:3D Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 02F9 Signing time: Wed 09 Apr 2025 00:58:25 +0000 Manifest this update: Wed 09 Apr 2025 00:58:25 +0000 Manifest next update: Wed 16 Apr 2025 00:58:25 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: m4S1ejQjhIp54d+sWS2GPDujU+HZJZ8rt3TnJauG2B8=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C Validity Not Before: Apr 9 00:58:25 2025 GMT Not After : Apr 16 00:58:25 2025 GMT Subject: CN=67f5c631-f87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:cc:3a:4c:b7:10:e4:c8:72:00:65:70:06: 6e:22:45:75:48:56:2d:13:06:67:9c:72:bd:d9:03: f8:e1:db:d1:9e:6f:6f:52:c5:f9:5b:34:22:e5:3a: 02:73:0c:91:2e:8a:ab:ee:ee:2c:90:7f:12:c6:a6: 89:5c:41:e9:af:63:13:fa:44:d7:2f:2a:32:e0:98: d0:1d:ac:36:bb:f6:50:70:f8:54:de:4f:15:0f:1b: db:14:b8:a4:57:ea:69:66:fa:d9:2e:4a:00:ba:1a: 4f:90:64:6b:f5:43:df:d8:8d:55:ed:a0:6a:c6:6c: 0c:41:18:51:26:83:5e:39:b0:7a:0a:74:b3:9a:ed: aa:57:d7:cb:76:ac:14:0d:ec:54:6a:84:b7:a4:55: de:79:95:e8:9f:81:9d:4b:37:64:af:1b:e6:be:83: ec:c9:f7:14:0f:f4:3f:53:09:51:f8:47:a5:87:2a: f8:25:f4:81:13:0d:d3:a8:9e:5a:b8:ae:2c:24:f3: db:0b:d7:a2:d9:7e:43:ed:21:b6:3e:f5:91:ef:af: f1:c9:e0:4d:52:9b:52:6e:41:6d:6f:b9:0f:d3:78: ce:10:6d:c8:00:b9:7e:8b:57:e0:c3:e7:af:d1:3c: b0:cb:65:bf:27:61:8c:3d:99:6e:82:1b:18:fe:63: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DF:E8:6B:69:72:9D:55:8E:40:1E:EA:D5:D0:DB:D8:78:3F:5D:3D X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:81:14:f2:a7:e9:1d:ee:53:a3:1c:58:c8:18:6d:c9:49: 29:12:8d:7d:bd:90:81:50:50:bc:1d:0b:4f:a6:a0:9b:e3:55: 76:df:1f:52:c5:f4:d1:19:6a:26:10:a1:c6:92:dd:a8:80:69: 7c:54:75:9b:a0:b3:7a:d9:ab:5d:b2:e4:a9:94:51:83:a1:1f: 4d:c4:e0:d5:0d:ca:a0:09:d8:08:29:02:6e:cb:9c:8b:02:75: 24:39:60:65:44:20:88:27:81:f8:bf:5f:f8:c7:d9:4a:2d:80: 9c:59:09:6a:41:4d:39:ef:11:89:c2:e5:be:d1:b8:d9:24:c0: d4:81:ce:1b:a2:21:e0:4e:cf:a6:b5:48:a4:c0:e0:2f:63:02: a4:21:61:ea:84:a6:a9:7e:9e:89:86:4c:3d:40:7e:a4:8e:99: 9a:5f:8c:90:16:0f:bd:47:df:16:7e:ee:d3:ae:e6:4c:27:93: 0f:18:86:7d:28:1d:1e:60:bc:56:62:4e:a6:4d:35:f8:4f:08: c2:e2:e1:4e:8b:95:a2:a0:05:7d:58:7f:68:71:34:29:b4:64: 3c:c5:1b:9c:7a:12:f1:07:cc:8b:5e:34:cd:5b:f3:31:63:1e: b3:f7:8c:59:c4:aa:b4:ba:ed:69:0a:d7:c9:7f:76:41:e9:a7: 3d:f8:f7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNDA5MDA1ODI1WhcNMjUwNDE2MDA1ODI1WjAYMRYwFAYD VQQDEw02N2Y1YzYzMS1mODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xPMOky3EOTIcgBlcAZuIkV1SFYtEwZnnHK92QP44dvRnm9vUsX5WzQi5ToC cwyRLoqr7u4skH8SxqaJXEHpr2MT+kTXLyoy4JjQHaw2u/ZQcPhU3k8VDxvbFLik V+ppZvrZLkoAuhpPkGRr9UPf2I1V7aBqxmwMQRhRJoNeObB6CnSzmu2qV9fLdqwU DexUaoS3pFXeeZXon4GdSzdkrxvmvoPsyfcUD/Q/UwlR+Eelhyr4JfSBEw3TqJ5a uK4sJPPbC9ei2X5D7SG2PvWR76/xyeBNUptSbkFtb7kP03jOEG3IALl+i1fgw+ev 0Tywy2W/J2GMPZlughsY/mOzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjf6Gtp cp1VjkAe6tXQ29h4P109MB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPcYEU8qfpHe5ToxxYyBhtyUkpEo19vZCBUFC8HQtPpqCb41V23x9S xfTRGWomEKHGkt2ogGl8VHWboLN62atdsuSplFGDoR9NxODVDcqgCdgIKQJuy5yL AnUkOWBlRCCIJ4H4v1/4x9lKLYCcWQlqQU057xGJwuW+0bjZJMDUgc4boiHgTs+m tUikwOAvYwKkIWHqhKapfp6Jhkw9QH6kjpmaX4yQFg+9R98Wfu7TruZMJ5MPGIZ9 KB0eYLxWYk6mTTX4TwjC4uFOi5WioAV9WH9ocTQptGQ8xRucehLxB8yLXjTNW/Mx Yx6z94xZxKq0uu1pCtfJf3ZB6ac9+Pfe -----END CERTIFICATE-----Generated at Thu Apr 10 18:40:23 2025 by rpki-client