$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json) Hash identifier: xeKcKWfRFuqnoUB8vbxd9ZkiqjewoCNvSjKP86446E8= Subject key identifier: 55:A2:C6:3D:A5:9B:91:59:ED:6E:69:4C:D3:CD:21:C0:B8:F8:E5:9A Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft Manifest number: 27 Signing time: Thu 03 Apr 2025 07:01:44 +0000 Manifest this update: Thu 03 Apr 2025 07:01:44 +0000 Manifest next update: Thu 10 Apr 2025 07:01:44 +0000 Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: b2SVgI1oBDvIoPAXiebJQy7x0XTBqdK0Ch43IcsCpnI=) 2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=) 3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128576 Validity Not Before: Apr 3 07:01:44 2025 GMT Not After : Apr 10 07:01:44 2025 GMT Subject: CN=67ee3258-0d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:44:51:3a:f1:61:17:cf:8e:40:ba:fd:6e: 4a:aa:0f:81:18:97:db:41:a1:20:e4:c4:7c:0a:6f: 8c:cf:cd:2a:ba:d5:2f:ba:80:41:c9:aa:eb:3f:7e: 8d:e2:88:7d:b0:f4:bc:6c:cf:25:21:3f:2c:0f:08: 04:28:53:ae:ab:c4:6f:5c:97:54:cf:b2:52:80:ea: 98:96:8f:2c:a8:c0:ce:48:a2:47:8a:db:a5:8e:91: 46:36:d2:b8:d4:1d:73:86:46:4a:69:50:66:31:34: b3:c5:c7:e1:b3:98:65:9b:af:5d:54:31:83:68:ff: fd:28:43:55:c7:d2:c8:65:12:89:b1:a4:cf:a5:f8: a8:47:e2:28:cc:b8:21:6e:a9:f8:4a:46:7a:de:54: 18:08:03:95:fd:d9:96:e4:f2:e3:d4:07:ff:89:b1: 82:45:f3:0a:55:38:0b:fa:ea:b3:2c:8f:25:eb:4e: 48:8b:8c:3d:20:d6:99:75:33:72:6b:b5:41:88:54: d1:e0:5e:02:5f:6d:52:4b:3f:de:73:a2:1d:8a:b7: 95:51:0d:bd:22:e8:9d:ca:b8:01:0e:e2:02:f0:18: df:20:5c:92:9a:e1:a6:df:c1:31:25:e2:ed:9d:bd: 0a:36:33:d9:76:11:d1:6b:fa:91:ba:5b:39:a7:b3: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:C6:3D:A5:9B:91:59:ED:6E:69:4C:D3:CD:21:C0:B8:F8:E5:9A X509v3 Authority Key Identifier: keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4d:d4:06:14:ff:0a:49:91:28:34:5c:15:39:f0:58:42:0a: bf:24:dd:c4:61:b3:4b:c2:a1:05:2a:63:a7:df:eb:89:8d:2e: 72:b4:a6:b5:47:ea:66:ed:73:41:2e:e4:e2:38:1f:53:ff:14: f1:67:d5:d0:2c:34:69:cb:03:60:cb:eb:1b:43:b8:c6:b8:dc: 80:6e:c2:39:9c:15:07:a4:60:e1:3f:00:f6:82:f6:8b:09:ae: 64:64:a8:5d:30:2c:ef:03:fb:d6:ca:ce:38:f3:a1:89:63:77: 41:6f:2a:ca:7b:0b:4e:06:0b:94:3f:86:23:83:e7:00:ff:14: 05:51:8b:66:bd:c2:d4:03:37:68:46:32:7e:1a:6b:7e:8c:aa: da:4d:d0:af:09:4b:d0:e9:c8:1a:cd:5c:e4:63:e9:34:3b:5f: fd:67:c8:07:15:c1:4f:a6:d3:3b:63:c7:21:98:7a:93:86:f5: 67:c6:1a:c8:50:9d:bd:68:1e:45:98:49:9c:54:13:74:b3:38: b0:5c:5e:8c:5d:df:49:96:a0:f4:98:8b:b1:b1:ef:74:21:14: 35:12:6f:46:9c:a2:6f:02:bb:de:bc:79:99:e5:cc:3f:f3:7b: 85:2f:c1:00:74:32:21:1d:44:a0:29:97:77:79:d9:02:00:b5: 36:f5:b7:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODU3NjExMC8GA1UEBRMoMTg5MUQ1NENFRjZBOTBDMjMyRkNBODkxRTM5OUY5Nzgz ODY3MTFFRTAeFw0yNTA0MDMwNzAxNDRaFw0yNTA0MTAwNzAxNDRaMBgxFjAUBgNV BAMTDTY3ZWUzMjU4LTBkM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+00RROvFhF8+OQLr9bkqqD4EYl9tBoSDkxHwKb4zPzSq61S+6gEHJqus/fo3i iH2w9LxszyUhPywPCAQoU66rxG9cl1TPslKA6piWjyyowM5IokeK26WOkUY20rjU HXOGRkppUGYxNLPFx+GzmGWbr11UMYNo//0oQ1XH0shlEomxpM+l+KhH4ijMuCFu qfhKRnreVBgIA5X92Zbk8uPUB/+JsYJF8wpVOAv66rMsjyXrTkiLjD0g1pl1M3Jr tUGIVNHgXgJfbVJLP95zoh2Kt5VRDb0i6J3KuAEO4gLwGN8gXJKa4abfwTEl4u2d vQo2M9l2EdFr+pG6Wzmnsy3NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVaLGPaWb kVntbmlM080hwLj45ZowHwYDVR0jBBgwFoAUGJHVTO9qkMIy/KiR45n5eDhnEe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NTc2LzJERTk0QTlBRDdB NDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01JeV9LaVI0NW41ZURobkVl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0pIVlRPOXFrTUl5X0tpUjQ1bjVlRGhuRWU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NTc2LzJERTk0QTlBRDdBNDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01J eV9LaVI0NW41ZURobkVlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5N1AYU/wpJkSg0XBU58FhCCr8k3cRhs0vCoQUqY6ff64mNLnK0prVH 6mbtc0Eu5OI4H1P/FPFn1dAsNGnLA2DL6xtDuMa43IBuwjmcFQekYOE/APaC9osJ rmRkqF0wLO8D+9bKzjjzoYljd0FvKsp7C04GC5Q/hiOD5wD/FAVRi2a9wtQDN2hG Mn4aa36MqtpN0K8JS9DpyBrNXORj6TQ7X/1nyAcVwU+m0ztjxyGYepOG9WfGGshQ nb1oHkWYSZxUE3SzOLBcXoxd30mWoPSYi7Gx73QhFDUSb0acom8Cu968eZnlzD/z e4UvwQB0MiEdRKApl3d52QIAtTb1t5o= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client