$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: kQVXxvls1hVucyHn7MWHjDZBPBxajdSSZFuq8NXb36s= Subject key identifier: 24:46:D5:B5:FE:AF:07:9C:F0:CE:8A:CD:03:D9:90:53:3C:F6:EC:DB Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 19F8 Signing time: Fri 04 Apr 2025 16:26:34 +0000 Manifest this update: Fri 04 Apr 2025 16:26:33 +0000 Manifest next update: Fri 11 Apr 2025 16:26:33 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: u4pUoOgbciwt3xsXSJoYHuMjw7L6mQEETDyez7LLtns=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: iV+H7nZASeRKJAkmlrSEj4OlZh5r+8ZJVSgde+Ag920=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: NOg9hWlIl8JvvgfKPcNWmB3xJs1J2zSryYeuAsFiZYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6662 (0x1a06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032 Validity Not Before: Apr 4 16:26:33 2025 GMT Not After : Apr 11 16:26:33 2025 GMT Subject: CN=67f00839-b09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:22:9a:7e:a9:7b:82:0a:e6:92:c8:ed:42: 6c:c2:78:e5:b9:a3:b1:ef:46:5d:9f:4f:f5:21:7f: 3e:07:6f:7c:36:66:27:ff:64:9d:b5:c8:80:1e:45: c7:f8:0a:90:ad:40:c4:53:d6:3e:38:0e:e9:97:cd: fa:b9:f0:c2:b3:4c:3f:fa:5c:09:85:99:a3:6c:08: da:82:a6:a6:0f:01:28:8c:af:75:03:c7:86:15:b5: 15:b3:97:5b:de:0b:78:6d:72:17:9a:39:14:fa:97: 08:1e:9a:d9:c5:4c:c3:85:bd:ee:63:2d:b0:6f:13: 2c:58:25:9b:8f:de:ed:31:17:b4:d4:a1:0f:6a:ff: ef:d1:e7:f8:40:41:20:96:b6:77:47:1c:b0:9f:dc: 0e:09:f0:ca:4c:63:dc:b3:7a:df:38:54:fd:03:db: ea:46:cc:6f:db:7e:b2:bc:19:b8:6a:e5:95:2b:ba: 73:95:6f:ee:58:ae:c7:8b:92:e7:54:7b:f6:59:40: a4:e3:db:53:c3:b8:6f:ec:53:c3:e1:1e:f3:3b:40: b7:43:f0:d4:31:80:98:8e:8c:95:6b:09:65:fe:6b: 81:a8:cd:cd:13:a6:6b:60:a0:70:91:e0:de:c7:a9: 81:6d:f1:4c:ba:68:07:d6:e3:1e:a0:d9:d6:14:7d: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:46:D5:B5:FE:AF:07:9C:F0:CE:8A:CD:03:D9:90:53:3C:F6:EC:DB X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fc:6d:4c:19:df:36:6a:05:69:cb:60:f0:7c:3c:73:f5:d4: e6:b9:48:4d:8b:b0:09:d6:be:e2:91:b3:ba:c0:ce:9f:04:37: fd:c8:8c:4e:63:ef:c2:15:1d:c0:71:97:38:c2:42:b5:97:0c: 63:21:60:3d:7f:21:26:56:2b:a8:3f:27:60:81:7d:d4:4e:4d: d3:0f:d8:4e:1f:df:f4:26:38:9f:13:dd:d1:28:c1:8f:37:98: fe:79:be:fa:c4:e0:81:55:f7:e8:59:f1:38:5f:23:be:c8:a4: 2f:69:e3:fc:39:bf:87:d2:b2:a2:31:18:7d:b7:8d:04:49:af: b9:ae:5e:9c:2a:bc:8b:4a:28:73:49:e3:6d:64:dd:a5:f2:b2: 80:79:b5:92:46:8f:0b:4a:1d:3b:f2:2d:17:01:7f:ee:ff:0e: 6c:db:47:1c:3b:6b:a4:cc:60:54:61:20:c0:b6:f3:85:68:6a: ce:7a:a5:c9:15:94:43:af:fd:11:b9:6f:0c:6d:77:42:d1:47: f5:46:f0:64:3d:db:a6:e9:d7:c1:2c:95:fe:a1:02:e5:32:df: a0:9a:26:fd:a7:53:4e:42:a8:85:8c:7b:8d:04:0f:f4:3e:fc: 79:88:4c:d5:55:da:98:0d:11:bb:66:0a:a0:c5:f4:42:08:0a: a9:a8:d6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNDA0MTYyNjMzWhcNMjUwNDExMTYyNjMzWjAYMRYwFAYD VQQDEw02N2YwMDgzOS1iMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoEimn6pe4IK5pLI7UJswnjluaOx70Zdn0/1IX8+B298NmYn/2SdtciAHkXH +AqQrUDEU9Y+OA7pl836ufDCs0w/+lwJhZmjbAjagqamDwEojK91A8eGFbUVs5db 3gt4bXIXmjkU+pcIHprZxUzDhb3uYy2wbxMsWCWbj97tMRe01KEPav/v0ef4QEEg lrZ3Rxywn9wOCfDKTGPcs3rfOFT9A9vqRsxv236yvBm4auWVK7pzlW/uWK7Hi5Ln VHv2WUCk49tTw7hv7FPD4R7zO0C3Q/DUMYCYjoyVawll/muBqM3NE6ZrYKBwkeDe x6mBbfFMumgH1uMeoNnWFH2vOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRG1bX+ rwec8M6KzQPZkFM89uzbMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ/G1MGd82agVpy2DwfDxz9dTmuUhNi7AJ1r7ikbO6wM6fBDf9yIxO Y+/CFR3AcZc4wkK1lwxjIWA9fyEmViuoPydggX3UTk3TD9hOH9/0JjifE93RKMGP N5j+eb76xOCBVffoWfE4XyO+yKQvaeP8Ob+H0rKiMRh9t40ESa+5rl6cKryLSihz SeNtZN2l8rKAebWSRo8LSh078i0XAX/u/w5s20ccO2ukzGBUYSDAtvOFaGrOeqXJ FZRDr/0RuW8MbXdC0Uf1RvBkPdum6dfBLJX+oQLlMt+gmib9p1NOQqiFjHuNBA/0 Pvx5iEzVVdqYDRG7ZgqgxfRCCAqpqNYJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:57 2025 by rpki-client