$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft File: GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json) Hash identifier: XhsfVzU1tzJ112mw95lteAc813hqyGTq/dFs/0ZHuIQ= Subject key identifier: 7C:B0:77:28:04:A2:28:57:7C:09:9B:1E:8B:96:FA:51:03:27:A1:9A Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 Certificate issuer: /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft Manifest number: 0125 Signing time: Sat 29 Mar 2025 04:04:31 +0000 Manifest this update: Sat 29 Mar 2025 04:04:30 +0000 Manifest next update: Sat 05 Apr 2025 04:04:30 +0000 Files and hashes: 1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: Oy7xOrk9uf5cOfCxeyLZso5EOj0bMAeSlWdNrrAw1vs=) 2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136385 Validity Not Before: Mar 29 04:04:30 2025 GMT Not After : Apr 5 04:04:30 2025 GMT Subject: CN=67e7714f-59a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:ed:cb:2b:c1:98:1d:9c:21:18:14:22:f2: 9f:44:7c:41:80:ea:3b:4a:b5:c5:d2:71:45:93:49: 0a:df:e7:19:53:03:ea:49:1d:b2:4d:17:b9:f9:8d: 73:51:2b:76:a5:b6:f8:54:e6:8b:60:8d:65:19:97: 48:df:bc:43:6b:ff:bb:3d:9c:0e:ca:a7:6e:e1:31: 2a:26:26:ea:eb:0a:45:b2:c2:8a:7c:93:e1:dc:46: d6:6a:7b:f2:52:f9:8a:45:83:b2:5b:e9:46:11:15: c1:af:68:fd:96:39:d0:41:b0:df:9a:7c:46:7f:fd: 61:4b:bb:35:43:0e:35:04:b7:d9:da:8f:75:4c:98: 2b:2c:41:3b:c8:0d:79:8b:92:a3:d6:e4:6c:12:d5: 8f:cf:1d:ef:ff:d8:22:b2:f2:30:69:43:78:59:3f: 5f:f0:97:ce:b1:8b:05:1b:9a:dc:48:07:87:e4:78: c1:63:1f:69:33:c2:20:4c:9d:9b:ee:9a:4a:48:5b: 6e:39:5c:3a:8f:35:65:8c:65:a6:b6:83:df:25:ea: 90:7b:2c:44:c6:27:2f:aa:38:3c:d6:c8:c2:80:8b: 59:e7:14:94:42:7e:4a:d5:c9:c4:df:82:e1:7c:f3: 62:bb:74:cd:c7:6a:0e:40:33:c2:80:93:30:8a:3b: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B0:77:28:04:A2:28:57:7C:09:9B:1E:8B:96:FA:51:03:27:A1:9A X509v3 Authority Key Identifier: keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:19:f8:7d:16:97:94:9a:55:f4:c8:48:44:db:61:b9:67: 98:9f:5d:00:36:cd:8a:0f:45:6a:f1:5e:36:7a:a4:35:96:87: 8b:7a:38:0d:1a:0d:8f:fb:a4:f6:52:87:37:7e:09:94:e7:af: e5:99:39:24:6f:ea:92:43:f1:97:27:67:56:0a:57:8f:fa:35: 2f:eb:56:63:fa:c5:d2:30:d4:33:79:06:e5:e2:33:48:f3:89: 39:bf:0b:e4:5c:33:3c:a2:7d:ab:21:45:0f:bf:90:17:89:c3: 95:d4:74:5f:8f:88:61:65:a0:42:68:ff:b0:a7:7e:ea:cb:a4: 57:5b:7a:bf:d5:b3:9f:ed:94:ac:3c:d4:12:16:a5:b5:8c:44: 50:12:1b:36:93:d7:b4:34:50:58:98:0c:2a:6e:39:fe:30:9a: fd:6d:25:ed:7a:d1:27:79:e1:55:f5:b9:9c:86:36:3d:5f:42: b8:1f:77:ab:eb:cf:c3:0a:38:8a:e2:61:0d:a7:34:52:25:1c: b3:2c:9b:8f:88:4d:7f:54:5c:cb:18:47:fb:44:62:e8:0e:f0: 91:da:eb:0f:3e:8d:5b:39:16:02:21:c7:92:8e:79:72:67:ed: cd:ee:b2:32:c5:56:aa:8a:79:61:49:54:0f:c9:96:d3:80:bc: a1:bb:8a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4 RTJBNjI2NjEwHhcNMjUwMzI5MDQwNDMwWhcNMjUwNDA1MDQwNDMwWjAYMRYwFAYD VQQDEw02N2U3NzE0Zi01OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EntyyvBmB2cIRgUIvKfRHxBgOo7SrXF0nFFk0kK3+cZUwPqSR2yTRe5+Y1z USt2pbb4VOaLYI1lGZdI37xDa/+7PZwOyqdu4TEqJibq6wpFssKKfJPh3EbWanvy UvmKRYOyW+lGERXBr2j9ljnQQbDfmnxGf/1hS7s1Qw41BLfZ2o91TJgrLEE7yA15 i5Kj1uRsEtWPzx3v/9gisvIwaUN4WT9f8JfOsYsFG5rcSAeH5HjBYx9pM8IgTJ2b 7ppKSFtuOVw6jzVljGWmtoPfJeqQeyxExicvqjg81sjCgItZ5xSUQn5K1cnE34Lh fPNiu3TNx2oOQDPCgJMwijviZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHywdygE oihXfAmbHouW+lEDJ6GaMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT MGFnanN2S2RyY0NPS21KbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANehn4fRaXlJpV9MhIRNthuWeYn10ANs2KD0Vq8V42eqQ1loeLejgN Gg2P+6T2Uoc3fgmU56/lmTkkb+qSQ/GXJ2dWCleP+jUv61Zj+sXSMNQzeQbl4jNI 84k5vwvkXDM8on2rIUUPv5AXicOV1HRfj4hhZaBCaP+wp37qy6RXW3q/1bOf7ZSs PNQSFqW1jERQEhs2k9e0NFBYmAwqbjn+MJr9bSXtetEneeFV9bmchjY9X0K4H3er 68/DCjiK4mENpzRSJRyzLJuPiE1/VFzLGEf7RGLoDvCR2usPPo1bORYCIceSjnly Z+3N7rIyxVaqinlhSVQPyZbTgLyhu4oV -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:08 2025 by rpki-client