$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: bWf8tBCrbjJbqiig+F3CAX2mHIDVVcob/5iejzUnR9M= Subject key identifier: D3:F6:B3:41:55:F8:4A:1D:14:87:6E:79:5C:93:37:62:A1:75:E7:C2 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 116B Signing time: Fri 04 Apr 2025 17:19:42 +0000 Manifest this update: Fri 04 Apr 2025 17:19:42 +0000 Manifest next update: Fri 11 Apr 2025 17:19:42 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: zoiaCMQvbXDlFXQNm4yEddgEA2GJu+xO0avQPxOON00=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4470 (0x1176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85 Validity Not Before: Apr 4 17:19:42 2025 GMT Not After : Apr 11 17:19:42 2025 GMT Subject: CN=67f014ae-098a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:9f:12:ed:c9:85:ed:8e:78:38:53:93:1c: 29:90:66:56:77:ac:3d:52:ad:7e:ba:20:de:ac:d3: ea:05:55:41:26:fe:58:45:ed:db:4b:fc:d9:d5:0d: 10:29:0c:89:05:01:47:d0:7b:2d:4f:4c:fa:8a:59: e5:64:0c:e0:56:06:0a:22:5f:52:2e:a8:ee:a8:4c: 34:0d:0d:dc:69:0e:18:d1:b8:49:83:f1:98:5b:30: c8:14:02:43:95:0b:4f:b6:8d:8a:96:93:fb:5f:38: 0e:d3:ae:44:40:22:de:e1:ce:29:8a:12:0f:48:a3: d9:26:c4:b0:e0:75:7c:57:68:26:78:8a:9e:c8:92: 55:40:42:6a:26:68:85:cb:6b:ef:be:61:2a:0c:03: 24:81:94:b7:c8:15:13:f5:4f:35:fe:dd:a1:83:f4: 37:5d:c3:74:f4:c9:23:c1:04:c0:fb:1b:1e:87:b4: 7d:c8:fd:bf:70:20:67:b1:34:51:80:fe:56:eb:7f: c9:fd:50:81:a5:d0:be:3f:82:d8:15:d8:16:a4:12: cf:01:4c:5c:a6:10:4e:40:48:2f:1b:b8:4d:c6:ba: 20:40:99:78:33:86:e0:e6:fb:0a:85:39:9f:54:09: 67:99:f6:f9:bc:7c:5b:10:99:49:13:9d:d7:63:33: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F6:B3:41:55:F8:4A:1D:14:87:6E:79:5C:93:37:62:A1:75:E7:C2 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:07:05:48:87:e6:9f:c1:57:0e:13:ce:1a:93:a9:90:b6:0c: 84:d6:f9:c3:25:49:9e:b8:ca:ad:de:98:e7:f8:da:51:5d:0d: b5:dd:18:be:c3:e7:b8:e7:56:1d:04:1e:62:4e:67:83:7d:c5: 56:e0:2a:cd:b3:63:6d:0e:1a:56:51:d8:2c:65:54:b9:ac:1a: 58:5d:33:7e:3d:03:45:a3:45:0f:6e:cb:3d:86:96:33:e6:d3: 04:cb:a2:32:c7:f5:84:db:b0:31:11:03:ec:c0:86:f1:71:41: 77:fd:21:19:18:08:ad:9f:08:8e:c1:d7:5c:b4:ad:2a:f4:0f: 51:ce:3c:ac:56:7e:89:87:78:f4:e7:c3:19:43:82:db:21:d7: 83:e0:bc:39:8c:20:60:6b:36:57:a7:d5:8f:c5:9b:2c:02:52: c8:75:c3:7e:9d:48:93:21:e6:04:e8:2e:45:46:13:46:23:ae: 1d:9c:9f:9b:30:61:12:c9:d1:ef:55:18:2e:07:a4:c8:bd:4b: a6:93:b6:5c:57:7e:ad:65:7e:1d:2e:11:52:6a:c3:ef:8b:1a: 3c:a1:8f:bb:cf:7b:39:b6:64:b2:36:4e:82:eb:f5:74:1a:52: 38:92:a9:5f:23:27:19:64:20:22:32:0f:f1:c1:b3:85:e0:8f: 16:38:6d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNDA0MTcxOTQyWhcNMjUwNDExMTcxOTQyWjAYMRYwFAYD VQQDEw02N2YwMTRhZS0wOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHCfEu3Jhe2OeDhTkxwpkGZWd6w9Uq1+uiDerNPqBVVBJv5YRe3bS/zZ1Q0Q KQyJBQFH0HstT0z6ilnlZAzgVgYKIl9SLqjuqEw0DQ3caQ4Y0bhJg/GYWzDIFAJD lQtPto2KlpP7XzgO065EQCLe4c4pihIPSKPZJsSw4HV8V2gmeIqeyJJVQEJqJmiF y2vvvmEqDAMkgZS3yBUT9U81/t2hg/Q3XcN09MkjwQTA+xseh7R9yP2/cCBnsTRR gP5W63/J/VCBpdC+P4LYFdgWpBLPAUxcphBOQEgvG7hNxrogQJl4M4bg5vsKhTmf VAlnmfb5vHxbEJlJE53XYzM3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP2s0FV +EodFIdueVyTN2KhdefCMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgBwVIh+afwVcOE84ak6mQtgyE1vnDJUmeuMqt3pjn+NpRXQ213Ri+ w+e451YdBB5iTmeDfcVW4CrNs2NtDhpWUdgsZVS5rBpYXTN+PQNFo0UPbss9hpYz 5tMEy6Iyx/WE27AxEQPswIbxcUF3/SEZGAitnwiOwddctK0q9A9RzjysVn6Jh3j0 58MZQ4LbIdeD4Lw5jCBgazZXp9WPxZssAlLIdcN+nUiTIeYE6C5FRhNGI64dnJ+b MGESydHvVRguB6TIvUumk7ZcV36tZX4dLhFSasPvixo8oY+7z3s5tmSyNk6C6/V0 GlI4kqlfIycZZCAiMg/xwbOF4I8WOG3V -----END CERTIFICATE-----Generated at Sun Apr 6 06:42:22 2025 by rpki-client