$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: mDpuf+dbSSyZz+X0gL04Yd2soSZTRaAvf1/k/dYHXRM= Subject key identifier: E3:E4:AC:83:E3:D1:3F:08:15:E2:25:07:FC:93:69:2C:94:28:55:07 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0135 Signing time: Sat 31 May 2025 04:10:42 +0000 Manifest this update: Sat 31 May 2025 04:10:42 +0000 Manifest next update: Sat 07 Jun 2025 04:10:41 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: 1MpQBoRW3offBkpCAUi+zaxteMVVPO1R6rsjxjjBDpE=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: May 31 04:10:42 2025 GMT Not After : Jun 7 04:10:41 2025 GMT Subject: CN=683a8142-2c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:cd:f1:95:ad:5e:4a:35:26:e2:d0:22:08: 10:7b:4a:e9:61:be:d7:36:40:06:64:79:af:88:f2: 05:72:b7:a7:0b:b9:a6:32:3c:2e:63:5d:03:0d:34: 77:6d:e5:f9:b6:23:e1:aa:55:74:ed:d0:25:28:cd: 6b:09:ce:6e:de:63:e8:70:38:e0:e0:85:e4:3b:34: 36:dd:f4:83:3b:6c:5b:fa:df:53:81:9e:3c:37:7f: 3b:bb:19:1b:b9:f2:04:69:4a:5b:ee:8b:f2:a0:59: f8:16:f3:c1:e3:89:05:2a:3a:a0:e7:a7:0f:de:fe: 52:fa:cb:ff:2a:d9:b4:17:78:81:f4:d2:5f:78:26: 01:3f:a4:ae:e2:48:78:8d:c4:70:0e:e4:f7:da:9d: f3:34:b7:a8:97:13:51:60:85:c6:19:af:fd:2a:7b: 5e:42:d4:97:4c:23:4d:c5:6d:ef:22:08:bd:d1:d4: a3:57:b8:e9:30:7b:5f:f6:f0:99:6d:6e:01:ea:f8: 47:1d:35:1d:36:6a:a2:01:61:b8:82:91:cb:f1:84: b5:7d:2f:64:52:24:ef:8d:91:e2:85:57:da:ca:f2: 6f:0d:6d:92:d1:a6:3d:aa:77:d7:a4:3e:8e:53:1c: 16:a8:fe:f9:c0:c9:58:0c:c1:84:9e:80:49:65:45: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:AC:83:E3:D1:3F:08:15:E2:25:07:FC:93:69:2C:94:28:55:07 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:17:ae:8f:15:f8:6c:e7:13:5b:68:15:de:29:be:0e:fe:63: e9:05:6f:81:19:29:86:a6:70:09:d0:cd:d0:0d:15:ab:f5:f7: b2:44:56:80:5e:1d:71:01:c3:af:eb:ce:5d:08:ac:a9:67:6f: 21:76:63:a6:16:d0:55:dd:74:46:f1:bc:29:1c:55:47:e4:d2: 92:d4:83:03:e3:c0:be:6e:e6:9f:e0:e2:00:a0:b4:f0:5f:4f: 51:02:f7:47:d2:eb:77:85:6c:47:05:da:52:77:ce:ac:72:68: 0f:b5:07:99:54:35:b6:b5:6b:3c:a6:c6:1d:ad:ad:bd:69:c4: c6:a2:04:0a:62:18:63:f4:95:bb:94:79:3f:c7:58:8f:29:0c: 34:bc:b6:19:4d:14:45:e8:2d:50:6e:e0:2d:cf:ab:8b:f6:6b: 41:c0:be:04:75:d1:b3:8e:92:33:d0:13:35:d5:93:6a:a1:b0: e9:f1:12:7d:0d:30:89:9f:ac:54:2e:b6:1f:ab:1e:22:8f:07: de:39:da:65:7e:fb:43:7f:75:6d:90:2a:a3:b4:b6:57:af:60: 7d:90:a5:c8:82:85:d3:f4:2c:d8:3f:65:d6:86:dc:27:43:38: cb:d4:ec:f9:05:c6:37:e2:ed:88:be:b2:ca:14:cf:45:cc:dc: 65:1d:03:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwNTMxMDQxMDQyWhcNMjUwNjA3MDQxMDQxWjAYMRYwFAYD VQQDEw02ODNhODE0Mi0yYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUfN8ZWtXko1JuLQIggQe0rpYb7XNkAGZHmviPIFcrenC7mmMjwuY10DDTR3 beX5tiPhqlV07dAlKM1rCc5u3mPocDjg4IXkOzQ23fSDO2xb+t9TgZ48N387uxkb ufIEaUpb7ovyoFn4FvPB44kFKjqg56cP3v5S+sv/Ktm0F3iB9NJfeCYBP6Su4kh4 jcRwDuT32p3zNLeolxNRYIXGGa/9KnteQtSXTCNNxW3vIgi90dSjV7jpMHtf9vCZ bW4B6vhHHTUdNmqiAWG4gpHL8YS1fS9kUiTvjZHihVfayvJvDW2S0aY9qnfXpD6O UxwWqP75wMlYDMGEnoBJZUULOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPkrIPj 0T8IFeIlB/yTaSyUKFUHMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQF66PFfhs5xNbaBXeKb4O/mPpBW+BGSmGpnAJ0M3QDRWr9feyRFaA Xh1xAcOv685dCKypZ28hdmOmFtBV3XRG8bwpHFVH5NKS1IMD48C+buaf4OIAoLTw X09RAvdH0ut3hWxHBdpSd86scmgPtQeZVDW2tWs8psYdra29acTGogQKYhhj9JW7 lHk/x1iPKQw0vLYZTRRF6C1QbuAtz6uL9mtBwL4EddGzjpIz0BM11ZNqobDp8RJ9 DTCJn6xULrYfqx4ijwfeOdplfvtDf3VtkCqjtLZXr2B9kKXIgoXT9CzYP2XWhtwn QzjL1Oz5BcY34u2IvrLKFM9FzNxlHQNS -----END CERTIFICATE-----Generated at Sat May 31 17:11:28 2025 by rpki-client