$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: 2WaKfHq5tu5lYI+Z1reStNqYYIPLyLF3WBbiDnCltaE= Subject key identifier: 4F:45:F4:48:0F:74:A0:D0:76:CE:78:A3:5C:4F:93:03:1C:24:AA:C2 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 011D Signing time: Fri 11 Apr 2025 04:04:21 +0000 Manifest this update: Fri 11 Apr 2025 04:04:21 +0000 Manifest next update: Fri 18 Apr 2025 04:04:21 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: dowzg8jigsQGC9GH83eoqEDExtiwpVs6+uVLGU+SpjE=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Apr 11 04:04:21 2025 GMT Not After : Apr 18 04:04:21 2025 GMT Subject: CN=67f894c5-9bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:b5:f2:c0:92:c5:54:d6:c6:06:85:c1:02: 86:16:a7:58:79:9c:30:f1:a4:b9:71:18:e5:0b:37: 05:3c:f6:3e:c5:07:6c:3c:85:d7:44:9b:db:72:f3: 42:43:1d:61:49:c0:1d:fc:a3:aa:01:05:73:3d:f4: c0:1c:ea:4e:ae:a7:a9:5c:3b:28:52:c0:8a:14:35: 15:47:cb:e7:38:08:f0:bf:e0:6e:7c:14:b6:74:80: 69:9a:2c:90:86:76:1f:bc:93:32:2e:14:27:6c:1a: 89:6c:26:3c:4e:eb:96:67:47:8a:ed:3c:0d:1c:ba: 5b:f6:62:7e:26:d0:e2:07:7d:d4:c4:11:63:fb:80: cd:3c:19:17:3a:da:bb:dc:4b:92:eb:99:c2:c3:82: 18:8e:6d:23:46:fb:15:dd:2e:2b:29:3f:ee:3d:13: 97:f6:c3:1c:59:1a:71:46:4e:90:f0:c9:84:40:d5: 46:1f:78:b6:59:27:65:d8:60:e9:90:d5:c4:cf:dc: 53:63:c4:b2:33:c1:f4:65:27:3b:a3:94:e3:4f:13: ae:4a:5b:cb:f7:24:bb:67:28:58:2f:6c:1b:2f:37: 61:c5:55:97:68:05:2a:01:2e:95:4b:d1:1f:b5:90: 38:14:a7:e5:ff:a8:dc:2b:e9:18:c4:f6:af:4c:41: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:F4:48:0F:74:A0:D0:76:CE:78:A3:5C:4F:93:03:1C:24:AA:C2 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:17:79:a1:6e:83:9e:9f:81:2d:f2:de:8f:6e:3d:1d:39:d3: 37:3f:40:10:28:4f:e1:22:94:47:20:10:be:e0:01:bf:c8:20: 4e:bf:f3:88:9b:15:33:59:70:35:d8:d0:b0:3a:16:ab:87:a7: 51:b2:ca:64:33:73:2d:83:fb:46:dc:3d:30:89:6d:85:de:6c: 74:a7:77:76:85:fe:75:9a:1a:1e:da:64:c8:d8:a3:d2:ab:a5: c0:b1:3d:a8:f8:2d:cd:82:a5:5c:2b:72:b1:d3:ca:2d:57:db: 74:16:de:4f:ff:6a:5b:5a:26:2c:47:76:4d:91:bb:28:8a:b5: 64:da:99:c7:89:0f:e1:e4:84:35:ba:66:3c:36:50:36:bb:c8: 95:c6:ac:cc:b6:cb:ca:1c:12:b3:5e:de:2d:80:24:5f:b3:07: c6:02:6d:3b:f1:26:7f:bb:2e:fa:a9:16:ee:cd:27:e9:7b:7f: 1f:22:6e:d2:86:9e:1b:62:8a:40:fc:af:fc:f9:0c:51:c1:c0: e6:74:f0:da:58:fd:bb:62:57:f1:6d:98:42:00:53:0b:f9:06: 6a:33:25:bb:88:ab:d9:6b:19:d1:bc:7c:6d:53:b3:06:ac:66: 6c:e7:3c:ae:23:81:fc:18:32:d5:79:18:bf:5b:75:9c:66:7e: 89:30:5c:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwNDExMDQwNDIxWhcNMjUwNDE4MDQwNDIxWjAYMRYwFAYD VQQDEw02N2Y4OTRjNS05YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK618sCSxVTWxgaFwQKGFqdYeZww8aS5cRjlCzcFPPY+xQdsPIXXRJvbcvNC Qx1hScAd/KOqAQVzPfTAHOpOrqepXDsoUsCKFDUVR8vnOAjwv+BufBS2dIBpmiyQ hnYfvJMyLhQnbBqJbCY8TuuWZ0eK7TwNHLpb9mJ+JtDiB33UxBFj+4DNPBkXOtq7 3EuS65nCw4IYjm0jRvsV3S4rKT/uPROX9sMcWRpxRk6Q8MmEQNVGH3i2WSdl2GDp kNXEz9xTY8SyM8H0ZSc7o5TjTxOuSlvL9yS7ZyhYL2wbLzdhxVWXaAUqAS6VS9Ef tZA4FKfl/6jcK+kYxPavTEES+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9F9EgP dKDQds54o1xPkwMcJKrCMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDF3mhboOen4Et8t6Pbj0dOdM3P0AQKE/hIpRHIBC+4AG/yCBOv/OI mxUzWXA12NCwOharh6dRsspkM3Mtg/tG3D0wiW2F3mx0p3d2hf51mhoe2mTI2KPS q6XAsT2o+C3NgqVcK3Kx08otV9t0Ft5P/2pbWiYsR3ZNkbsoirVk2pnHiQ/h5IQ1 umY8NlA2u8iVxqzMtsvKHBKzXt4tgCRfswfGAm078SZ/uy76qRbuzSfpe38fIm7S hp4bYopA/K/8+QxRwcDmdPDaWP27YlfxbZhCAFML+QZqMyW7iKvZaxnRvHxtU7MG rGZs5zyuI4H8GDLVeRi/W3WcZn6JMFwo -----END CERTIFICATE-----Generated at Sat Apr 12 22:42:39 2025 by rpki-client