$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json) Hash identifier: LH6pk+cqKfk/hNugMssfu7cygVha1pFhw67zWZpOtpI= Subject key identifier: 65:58:C2:74:F5:78:5E:57:EA:12:5E:23:AB:B2:12:08:5B:26:F8:CE Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft Manifest number: 07B2 Signing time: Thu 10 Apr 2025 21:06:48 +0000 Manifest this update: Thu 10 Apr 2025 21:06:47 +0000 Manifest next update: Thu 17 Apr 2025 21:06:47 +0000 Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: o0VTc+DZT6+TmUWs+H9ZIzECprxTxXO9qJ3JO3VKOgs=) 2: 816A256CF57311EA86849119C4F9AE02.roa (hash: jh/uFXEIZPMO8B1QG/kheiWEegpd+33S7ffLLKrSdB0=) 3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: d2TZXE18Xt38fADyNBS1PVNUEthCJSPtYY97KfIT80k=) 4: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: 5TA62bj3DT+mJ8Nio1yv4R6VCuB4DLublpXb87Ez56Y=) 5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: yYe2S/r+iFZmGGM++jOhHqDjwT0Z+vvfLaaWlIwsXLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Validity Not Before: Apr 10 21:06:47 2025 GMT Not After : Apr 17 21:06:47 2025 GMT Subject: CN=67f832e7-a671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:ba:c8:ee:31:bd:e9:dd:76:c7:45:b3:e7: ee:8a:a8:4e:a8:08:72:14:3e:bc:d8:fe:00:e4:9b: 50:17:95:ce:14:3b:90:c4:8c:4b:1e:48:2d:a1:27: 02:fb:5a:67:bc:c0:36:a3:c4:62:6b:ef:7b:a1:d7: ee:fd:40:e6:3a:45:8b:cb:cd:2a:b2:94:16:42:6a: 93:af:32:3c:06:c9:e3:9c:3a:ad:97:37:8c:45:88: 27:51:1a:ef:9e:1e:dc:15:7d:50:50:45:7c:3e:3c: 68:17:59:ea:c4:55:e6:b4:7d:41:3a:cd:f5:30:14: 2c:43:fc:d4:28:15:91:7d:4f:89:4f:74:55:a2:b2: 99:51:ab:8d:e1:20:71:3a:b9:aa:81:48:1c:22:f6: 2f:b9:41:10:84:e6:51:b6:32:d7:40:6f:e6:12:f5: ad:72:88:74:79:c2:5f:b2:8f:53:7c:33:cc:c1:63: 25:e5:bf:6e:38:64:35:3b:72:06:e7:b6:42:7c:75: c8:e7:31:51:8c:91:73:bf:1e:2c:18:d9:f8:17:3c: 18:ea:00:ac:aa:d7:f0:cb:b7:bd:95:e2:d1:f1:8c: 1a:d7:90:00:14:ad:48:72:5e:3d:c1:e2:1d:03:39: 0e:6a:53:4a:db:57:b0:cf:e3:04:82:78:b9:89:b0: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:C2:74:F5:78:5E:57:EA:12:5E:23:AB:B2:12:08:5B:26:F8:CE X509v3 Authority Key Identifier: keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:31:76:aa:3a:71:e0:64:04:31:1c:0a:b1:51:c1:50:46:b2: 56:59:e7:0c:80:fa:ef:a6:1f:56:e5:77:b4:39:7c:a3:ca:03: e7:e6:fd:a7:28:2e:1a:a7:0d:db:6a:7b:e3:6f:a5:b8:13:75: 88:b0:ac:b1:ce:cd:b3:01:cf:d7:23:97:74:2a:61:65:2f:0e: 59:07:1a:2f:2a:ac:d7:3d:06:6c:88:29:e0:18:5e:92:0b:b5: ea:5c:9b:c9:bd:96:e3:9c:c6:90:c3:12:1c:11:c2:5d:d8:6a: 55:a2:d7:66:ce:94:ea:b5:dd:a4:1d:bd:14:b0:5e:dc:a5:72: 21:f2:69:16:f9:ee:6d:e5:80:14:3a:7c:6d:6d:3c:cc:ab:cc: 4a:3c:fc:ce:39:09:82:59:1a:b5:44:4d:b5:bc:60:8a:c4:a4: 76:82:45:32:05:82:43:98:ee:26:0b:d4:85:e8:8c:a1:31:76: 58:ed:d8:b0:7f:94:4b:7e:67:31:5f:45:49:75:ff:4a:8c:8e: c3:32:15:a7:76:3e:40:e1:72:92:2f:7c:46:49:ae:14:bb:95: ce:a9:aa:42:1f:25:b2:93:14:7a:49:ab:58:aa:21:57:be:48: b0:83:76:1a:5d:cd:13:6f:80:de:74:ee:29:42:51:c2:42:5c: 3c:b2:ce:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF RTRGQ0E2RkQwHhcNMjUwNDEwMjEwNjQ3WhcNMjUwNDE3MjEwNjQ3WjAYMRYwFAYD VQQDEw02N2Y4MzJlNy1hNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoze6yO4xvenddsdFs+fuiqhOqAhyFD682P4A5JtQF5XOFDuQxIxLHkgtoScC +1pnvMA2o8Ria+97odfu/UDmOkWLy80qspQWQmqTrzI8BsnjnDqtlzeMRYgnURrv nh7cFX1QUEV8PjxoF1nqxFXmtH1BOs31MBQsQ/zUKBWRfU+JT3RVorKZUauN4SBx OrmqgUgcIvYvuUEQhOZRtjLXQG/mEvWtcoh0ecJfso9TfDPMwWMl5b9uOGQ1O3IG 57ZCfHXI5zFRjJFzvx4sGNn4FzwY6gCsqtfwy7e9leLR8Ywa15AAFK1Icl49weId AzkOalNK21ewz+MEgni5ibAaHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVYwnT1 eF5X6hJeI6uyEghbJvjOMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1 NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZ d05tM09VQXhrNWZ1VDhwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApMXaqOnHgZAQxHAqxUcFQRrJWWecMgPrvph9W5Xe0OXyjygPn5v2n KC4apw3banvjb6W4E3WIsKyxzs2zAc/XI5d0KmFlLw5ZBxovKqzXPQZsiCngGF6S C7XqXJvJvZbjnMaQwxIcEcJd2GpVotdmzpTqtd2kHb0UsF7cpXIh8mkW+e5t5YAU OnxtbTzMq8xKPPzOOQmCWRq1RE21vGCKxKR2gkUyBYJDmO4mC9SF6IyhMXZY7diw f5RLfmcxX0VJdf9KjI7DMhWndj5A4XKSL3xGSa4Uu5XOqapCHyWykxR6SatYqiFX vkiwg3YaXc0Tb4DedO4pQlHCQlw8ss5L -----END CERTIFICATE-----Generated at Sat Apr 12 15:20:06 2025 by rpki-client