$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: CqRox/qZSjclz+h3pUpZ/0sytUzHxhiavFPhB5SaXKM= Subject key identifier: E0:E0:E7:98:47:68:23:9E:26:33:51:74:02:1E:8B:DF:DC:9D:9B:E4 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 56 Signing time: Thu 03 Apr 2025 06:28:41 +0000 Manifest this update: Thu 03 Apr 2025 06:28:40 +0000 Manifest next update: Thu 10 Apr 2025 06:28:40 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: zCGDwIZ3FnEdrgTFojdIpWXluvuNrw4Q6sOc1aqOvHs=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: hHmJZ4kZTc3eByWyfovBTyBy7zoc4MRBKG9FMUzpQOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0 Validity Not Before: Apr 3 06:28:40 2025 GMT Not After : Apr 10 06:28:40 2025 GMT Subject: CN=67ee2a98-a409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:e0:de:1d:c1:ae:6c:91:0b:ca:bc:82:47: 28:94:a8:29:4e:b9:ca:86:36:2c:f0:04:ba:30:7f: 6c:81:a9:ca:74:bf:1c:f4:59:f3:b6:9d:32:86:3d: 7e:e4:ac:18:75:72:a5:f7:3c:4d:56:50:d4:5b:43: 4c:2e:cf:81:be:80:51:a9:3f:db:d2:e4:2a:01:dd: d5:72:d5:19:89:17:d1:c6:40:55:cf:f0:37:02:1c: 74:c6:33:e2:8f:51:7e:c4:a8:50:f2:aa:f4:a7:8e: 1d:b9:70:be:c4:96:36:78:50:cb:10:84:aa:bf:d0: 42:62:97:86:93:52:9a:3b:77:43:ae:ca:d2:37:c2: d1:c4:0f:c5:6d:24:8d:77:b5:99:c6:85:e9:30:1f: 94:50:d5:2d:db:ec:9c:53:43:4e:f9:c3:b5:43:ed: 7f:3c:e7:6b:62:36:dc:93:fb:9f:8f:3b:b4:2d:99: 17:87:81:1c:8b:d3:cb:9c:32:33:99:a2:6b:4d:77: a6:84:ef:69:66:bf:c9:f1:53:f6:81:55:6a:58:a9: d4:73:66:ad:90:9e:85:e5:e1:77:a1:ee:ff:ad:c7: 31:10:4a:14:3d:e0:ff:a0:5b:38:38:ac:22:34:8e: 15:5f:b6:86:50:f1:67:95:87:64:80:0c:44:4c:8e: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E0:E7:98:47:68:23:9E:26:33:51:74:02:1E:8B:DF:DC:9D:9B:E4 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2f:1f:09:0c:0e:10:70:cb:55:93:34:f4:e2:c0:86:d5:17: be:3f:bd:f9:ea:4a:ae:7b:80:7b:be:0d:59:12:78:b6:fe:1a: 04:b8:1a:6b:aa:3f:dc:e3:0e:10:14:0e:19:8c:be:85:12:25: 48:f5:0a:b1:b1:74:62:b6:8c:47:d5:ab:3a:a0:bc:4c:1d:d5: 05:8e:5a:6a:13:b2:ab:fa:3e:4d:78:fd:fa:18:bc:00:60:2e: bb:c4:bb:e7:9a:6e:93:50:ca:88:c9:07:73:34:7b:de:3a:a4: 0f:bc:33:66:96:15:29:57:b6:1c:97:35:f8:31:a1:d7:c7:95: 66:9d:03:0e:1c:18:44:cf:94:fc:32:11:66:b7:59:b6:a8:21: f7:77:bb:d2:b5:cb:52:ec:cd:c8:9e:39:76:d6:df:a4:8f:8c: 42:1a:b2:9d:4b:4b:d2:40:3d:a1:b6:4c:8f:fa:0c:2d:55:5c: f6:a6:73:f6:2d:02:b6:9b:59:86:b8:e4:95:47:a2:b7:53:75: 0e:a1:ab:d1:f7:2e:15:d6:ec:63:5f:ce:2d:57:a1:dd:bf:72: 2f:fe:96:33:24:1b:dd:43:35:b2:a7:8e:86:68:db:84:bd:a6: b5:57:79:ed:e9:7b:79:24:7c:f8:43:a9:84:ac:20:42:80:87: b2:5e:d0:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzhGMDExMC8GA1UEBRMoODMxN0ZDN0E4MkIwRUU4NjUyMERGMThGRkQ1NzI5NTEx NkRBNURGMjAeFw0yNTA0MDMwNjI4NDBaFw0yNTA0MTAwNjI4NDBaMBgxFjAUBgNV BAMTDTY3ZWUyYTk4LWE0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzUuDeHcGubJELyryCRyiUqClOucqGNizwBLowf2yBqcp0vxz0WfO2nTKGPX7k rBh1cqX3PE1WUNRbQ0wuz4G+gFGpP9vS5CoB3dVy1RmJF9HGQFXP8DcCHHTGM+KP UX7EqFDyqvSnjh25cL7EljZ4UMsQhKq/0EJil4aTUpo7d0OuytI3wtHED8VtJI13 tZnGhekwH5RQ1S3b7JxTQ075w7VD7X8852tiNtyT+5+PO7QtmReHgRyL08ucMjOZ omtNd6aE72lmv8nxU/aBVWpYqdRzZq2QnoXl4Xeh7v+txzEQShQ94P+gWzg4rCI0 jhVftoZQ8WeVh2SADERMjgsDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ODnmEdo I54mM1F0Ah6L39ydm+QwHwYDVR0jBBgwFoAUgxf8eoKw7oZSDfGP/VcpURbaXfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzOEYwLzBBNzcxQTM2OTNB RTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hmOGVvS3c3b1pTRGZHUF9WY3BVUmJhWGZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz OEYwLzBBNzcxQTM2OTNBRTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29a U0RmR1BfVmNwVVJiYVhmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYvHwkMDhBwy1WTNPTiwIbVF74/vfnqSq57gHu+DVkSeLb+GgS4Gmuq P9zjDhAUDhmMvoUSJUj1CrGxdGK2jEfVqzqgvEwd1QWOWmoTsqv6Pk14/foYvABg LrvEu+eabpNQyojJB3M0e946pA+8M2aWFSlXthyXNfgxodfHlWadAw4cGETPlPwy EWa3WbaoIfd3u9K1y1LszcieOXbW36SPjEIasp1LS9JAPaG2TI/6DC1VXPamc/Yt ArabWYa45JVHordTdQ6hq9H3LhXW7GNfzi1Xod2/ci/+ljMkG91DNbKnjoZo24S9 prVXee3pe3kkfPhDqYSsIEKAh7Je0NI= -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:47 2025 by rpki-client