$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json) Hash identifier: ielVscFfM+aiSKmchmIpl6mj+8uNT1cQPRXIUstStv8= Subject key identifier: 8C:66:96:93:F0:BB:89:D5:46:67:D2:91:0F:D0:D0:B9:56:BA:BD:9B Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:00:23 +0000 Manifest this update: Sat 31 May 2025 07:00:22 +0000 Manifest next update: Sat 07 Jun 2025 07:00:22 +0000 Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: JwJzwxAeWXe4Cgx6JFTCfS44q3gPb9VL1neIQqdKJJY=) 2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=) 3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Validity Not Before: May 31 07:00:22 2025 GMT Not After : Jun 7 07:00:22 2025 GMT Subject: CN=683aa907-8f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:e3:f1:f9:3e:26:0a:0d:ae:43:1c:47:f5: d9:2d:86:4c:fb:56:64:4d:a0:44:c0:bb:ae:f1:e5: f7:09:15:40:47:c5:78:71:d8:69:dd:ef:9f:7e:5b: 70:e7:68:fb:78:f8:d8:e7:c9:12:37:12:91:28:a6: 08:42:9b:68:85:a3:94:54:e6:84:87:2a:9e:f4:29: 43:6d:34:51:46:ed:a8:10:d4:cd:b9:ce:b1:27:ad: 7b:ab:21:19:da:ad:c7:91:8c:15:b7:81:a2:a7:8f: 75:56:d8:7f:de:06:c7:5f:26:fb:3d:38:fa:8b:e5: 84:36:be:1e:83:9b:6e:6d:9a:3a:a8:4e:e0:ee:2e: 42:4e:f9:c3:49:26:97:17:30:2e:17:b6:40:27:b3: 73:ea:46:e7:92:1d:24:04:e3:e7:a9:a9:39:4b:46: 5c:d3:f3:21:7f:52:c8:10:43:27:45:74:37:42:b1: db:87:6d:58:62:f1:f7:0c:00:67:5b:3c:38:39:57: 79:ed:78:20:6e:f1:10:26:ea:c4:a4:f5:58:78:2c: 53:36:ad:55:52:4a:55:fd:2e:fe:ea:7c:51:e9:8c: 54:c0:21:81:9e:ff:c0:6f:df:47:ec:9d:5d:d7:60: 8e:bf:a7:2f:2c:f3:dc:fa:27:7a:29:db:13:10:c4: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:96:93:F0:BB:89:D5:46:67:D2:91:0F:D0:D0:B9:56:BA:BD:9B X509v3 Authority Key Identifier: keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:37:4d:ce:c7:52:ce:ea:2a:99:da:9d:aa:99:43:69:13:e8: 8c:e3:5b:d6:ba:26:3a:c9:34:31:be:a0:8b:62:cb:26:2f:b6: df:8c:3f:06:3c:00:1b:ee:8b:93:04:68:4d:9c:71:36:b3:11: 60:52:5f:5d:da:2a:be:60:78:31:f7:3d:4b:ea:08:5a:d3:da: e1:3c:44:ab:44:59:a0:41:81:65:41:1c:53:3a:12:b0:b5:52: d7:1b:56:6f:77:6d:c3:08:b2:cb:ba:9a:41:72:eb:db:8a:0e: ce:37:e4:45:d3:19:9f:60:30:dc:b5:be:ad:86:cc:46:40:97: 76:55:e1:21:dc:cc:09:77:63:9b:b3:b6:f0:8f:72:72:38:c0: 2e:29:3a:85:63:e8:ca:e7:62:da:78:b2:4b:8a:4b:4e:7d:7f: 74:55:9a:0b:e0:49:8e:ab:e4:51:f9:69:6b:1c:51:2b:91:f3: ec:31:35:98:18:96:5c:0c:75:9d:3a:6b:75:b7:5c:52:7c:09: c0:54:68:cd:2b:71:8b:f5:55:bd:69:d5:74:50:02:f6:9b:5c: a0:63:c7:36:5f:a9:86:91:6e:dc:8f:ae:a8:dd:bb:09:4a:85: eb:30:c4:90:26:7a:6e:8d:e9:69:4c:2a:77:53:1e:3f:d6:a6: d9:74:77:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODU3NjExMC8GA1UEBRMoMTg5MUQ1NENFRjZBOTBDMjMyRkNBODkxRTM5OUY5Nzgz ODY3MTFFRTAeFw0yNTA1MzEwNzAwMjJaFw0yNTA2MDcwNzAwMjJaMBgxFjAUBgNV BAMTDTY4M2FhOTA3LThmMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHAuPx+T4mCg2uQxxH9dkthkz7VmRNoETAu67x5fcJFUBHxXhx2Gnd759+W3Dn aPt4+NjnyRI3EpEopghCm2iFo5RU5oSHKp70KUNtNFFG7agQ1M25zrEnrXurIRna rceRjBW3gaKnj3VW2H/eBsdfJvs9OPqL5YQ2vh6Dm25tmjqoTuDuLkJO+cNJJpcX MC4XtkAns3PqRueSHSQE4+epqTlLRlzT8yF/UsgQQydFdDdCsduHbVhi8fcMAGdb PDg5V3nteCBu8RAm6sSk9Vh4LFM2rVVSSlX9Lv7qfFHpjFTAIYGe/8Bv30fsnV3X YI6/py8s89z6J3op2xMQxBWdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjGaWk/C7 idVGZ9KRD9DQuVa6vZswHwYDVR0jBBgwFoAUGJHVTO9qkMIy/KiR45n5eDhnEe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NTc2LzJERTk0QTlBRDdB NDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01JeV9LaVI0NW41ZURobkVl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0pIVlRPOXFrTUl5X0tpUjQ1bjVlRGhuRWU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NTc2LzJERTk0QTlBRDdBNDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01J eV9LaVI0NW41ZURobkVlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG03Tc7HUs7qKpnanaqZQ2kT6IzjW9a6JjrJNDG+oItiyyYvtt+MPwY8 ABvui5MEaE2ccTazEWBSX13aKr5geDH3PUvqCFrT2uE8RKtEWaBBgWVBHFM6ErC1 UtcbVm93bcMIssu6mkFy69uKDs435EXTGZ9gMNy1vq2GzEZAl3ZV4SHczAl3Y5uz tvCPcnI4wC4pOoVj6MrnYtp4skuKS059f3RVmgvgSY6r5FH5aWscUSuR8+wxNZgY llwMdZ06a3W3XFJ8CcBUaM0rcYv1Vb1p1XRQAvabXKBjxzZfqYaRbtyPrqjduwlK heswxJAmem6N6WlMKndTHj/Wptl0d7A= -----END CERTIFICATE-----Generated at Sat May 31 17:54:57 2025 by rpki-client