$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: g72Ae6Rstz906Zmdh75gAxDXQqQoFOBXt9W2dKIDNmY= Subject key identifier: 6B:73:3C:CE:CA:1C:C0:70:A2:20:23:E9:B2:06:2B:86:02:B2:88:42 Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 0426 Signing time: Thu 03 Apr 2025 00:23:56 +0000 Manifest this update: Thu 03 Apr 2025 00:23:56 +0000 Manifest next update: Thu 10 Apr 2025 00:23:56 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: nDngEFcNTDmFUJCrl4qP9V9QRnZ/GqLoQJqrP4YBP58=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731 Validity Not Before: Apr 3 00:23:56 2025 GMT Not After : Apr 10 00:23:56 2025 GMT Subject: CN=67edd51c-5b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:7f:c7:39:8f:43:51:c2:f8:f9:6e:3e:ba: 23:f1:b1:e2:42:3b:ad:37:54:a0:eb:25:2a:b5:c9: 51:7c:f8:ad:00:bf:d5:c8:c6:cd:6d:8d:ad:26:81: 94:5c:72:db:a5:d8:19:52:da:26:27:59:e9:2c:df: df:66:8f:2e:4e:4a:75:af:44:9c:4f:20:03:81:3d: a6:15:18:2a:b0:c1:35:0e:ad:41:ff:e1:b2:53:29: d5:08:7a:2d:b8:56:9d:28:04:8b:12:47:de:f3:44: 95:c5:7b:f9:15:3b:72:8b:1b:f5:49:94:d8:4f:79: a6:8b:94:d7:af:c4:b0:aa:ec:07:cc:d4:f0:a6:9c: 45:07:62:68:44:de:17:b6:68:e7:a8:e1:dc:8e:b5: fd:32:9d:bd:f2:f8:20:8c:a1:70:72:c8:1d:ac:40: e6:48:3f:ec:94:f5:c2:ca:69:a2:9c:2b:2b:98:11: cd:d6:71:14:0f:12:b6:c3:4c:fa:5e:41:9a:56:fb: 88:c1:65:d2:7f:6f:50:f7:70:7b:3d:eb:7e:75:df: 65:c3:c2:40:da:65:a1:b9:22:16:d0:0f:e3:61:3b: 09:93:ab:b9:f1:08:a6:28:d1:d0:a8:ce:a1:fe:31: 35:e7:61:3d:d6:c0:c2:52:fd:3c:17:8d:f1:ff:2e: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:73:3C:CE:CA:1C:C0:70:A2:20:23:E9:B2:06:2B:86:02:B2:88:42 X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8f:42:44:42:36:d4:09:ed:58:f1:9e:74:61:26:4b:72:ba: 68:01:f4:2f:35:ef:6b:72:e7:0c:1c:41:59:41:7b:0c:bc:4d: ef:52:77:ec:f4:6c:3b:d3:68:3e:8c:40:0a:cf:4a:eb:1d:24: 3a:a8:e4:7b:59:6c:9a:f1:71:17:9b:4b:69:5c:da:e4:b5:6d: 45:c4:ba:aa:6e:83:93:b0:99:8c:d7:e2:a5:d7:10:f8:97:b7: a8:d5:b9:49:0b:ac:76:78:01:18:e9:b9:d9:d7:14:e8:60:d5: 37:8f:00:05:26:16:a6:44:8b:fc:bc:53:17:15:f7:ee:c9:d6: 9e:51:03:c8:13:f8:3f:14:0d:5b:fd:07:63:2c:2d:c9:62:2e: a5:c5:3a:78:b7:e5:45:f6:4a:9d:82:53:8d:21:82:f9:83:4f: 26:e1:8c:b0:29:e0:24:f2:a8:a7:ed:44:94:82:b7:8b:c6:40: 3b:d8:6a:62:18:c8:10:96:d3:d2:b9:d7:95:6d:8d:9a:da:62: e4:8e:ed:04:da:74:c2:90:36:91:bf:d9:68:81:67:37:50:0b: 88:91:06:2d:14:7c:98:fc:6f:2a:5a:91:3f:8a:5e:5c:ac:a7: 5e:92:7d:3d:40:99:36:3d:32:71:01:22:00:52:e8:72:de:81: d8:49:96:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUwNDAzMDAyMzU2WhcNMjUwNDEwMDAyMzU2WjAYMRYwFAYD VQQDEw02N2VkZDUxYy01Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23V/xzmPQ1HC+PluProj8bHiQjutN1Sg6yUqtclRfPitAL/VyMbNbY2tJoGU XHLbpdgZUtomJ1npLN/fZo8uTkp1r0ScTyADgT2mFRgqsME1Dq1B/+GyUynVCHot uFadKASLEkfe80SVxXv5FTtyixv1SZTYT3mmi5TXr8SwquwHzNTwppxFB2JoRN4X tmjnqOHcjrX9Mp298vggjKFwcsgdrEDmSD/slPXCymminCsrmBHN1nEUDxK2w0z6 XkGaVvuIwWXSf29Q93B7Pet+dd9lw8JA2mWhuSIW0A/jYTsJk6u58QimKNHQqM6h /jE152E91sDCUv08F43x/y6cWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtzPM7K HMBwoiAj6bIGK4YCsohCMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSj0JEQjbUCe1Y8Z50YSZLcrpoAfQvNe9rcucMHEFZQXsMvE3vUnfs 9Gw702g+jEAKz0rrHSQ6qOR7WWya8XEXm0tpXNrktW1FxLqqboOTsJmM1+Kl1xD4 l7eo1blJC6x2eAEY6bnZ1xToYNU3jwAFJhamRIv8vFMXFffuydaeUQPIE/g/FA1b /QdjLC3JYi6lxTp4t+VF9kqdglONIYL5g08m4YywKeAk8qin7USUgreLxkA72Gpi GMgQltPSudeVbY2a2mLkju0E2nTCkDaRv9logWc3UAuIkQYtFHyY/G8qWpE/il5c rKdekn09QJk2PTJxASIAUuhy3oHYSZa+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:30 2025 by rpki-client