$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: OIHMhjw01GmLlTcLkqL+zdIwIqWwvutFBiFPm2zwo6Q= Subject key identifier: A9:BE:E8:89:03:CC:8D:E5:16:AF:69:E2:F1:A0:3B:9B:76:01:FD:6B Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 057D Signing time: Fri 30 May 2025 23:30:29 +0000 Manifest this update: Fri 30 May 2025 23:30:28 +0000 Manifest next update: Fri 06 Jun 2025 23:30:28 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: 8c1rOdNP+a3Fcafxgk5EbHQgIU0azwPoPrO7gGP3AVc=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: eALzuGTBIdO32t7InjPCWdnlihceQ6Ej+q9aOFO73+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: May 30 23:30:28 2025 GMT Not After : Jun 6 23:30:28 2025 GMT Subject: CN=683a3f94-e70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:7a:28:53:df:fc:08:35:65:f0:86:97:4a: de:c6:76:b4:2a:61:0e:e7:d4:4a:84:0a:e2:7c:67: 59:90:1a:72:e0:49:7b:45:1b:80:c8:b4:17:bd:88: bb:88:93:67:98:b3:f8:07:92:2f:1c:68:6a:d1:d8: 0b:fc:10:c5:d1:a3:6f:57:22:12:81:50:54:55:4f: ca:3e:d2:96:7f:0b:a8:90:0e:33:cb:2d:24:ab:e9: a9:46:b3:e3:b0:06:98:d4:d4:66:05:be:a2:aa:82: 9a:32:92:c1:4e:6b:c1:8f:53:e9:cf:b4:1e:92:2a: 7a:2f:2f:70:09:bc:c3:b4:df:eb:7d:49:02:ed:d8: 65:f4:ff:92:f7:21:da:d3:6f:b3:e6:f3:9a:29:f2: d0:09:33:af:f4:13:de:1a:8d:00:69:80:b0:a4:02: 2d:14:51:b9:01:49:87:d8:11:9f:32:46:fa:4e:44: 8d:3a:5d:73:e0:a9:19:d7:06:2e:b0:4c:cf:96:32: d0:8a:6a:d3:6c:9c:7e:75:cb:aa:56:8a:2c:81:6b: 00:ef:6a:f0:e2:c2:e5:e9:71:9a:09:64:07:84:6f: 9d:b8:9b:90:a9:26:bd:e8:bc:33:02:ca:de:d6:ce: f4:b2:ac:ae:7b:bf:21:4e:29:31:d8:93:8f:46:27: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BE:E8:89:03:CC:8D:E5:16:AF:69:E2:F1:A0:3B:9B:76:01:FD:6B X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2e:31:db:3a:e0:18:60:d6:d0:81:9f:1b:8e:4f:96:5d:1e: 20:72:70:c9:f5:05:87:6a:5c:29:7d:a1:e4:3d:76:6d:6a:04: 75:98:8c:77:4e:26:a1:9b:01:22:1a:d9:98:96:8c:86:8e:04: 1c:a5:5b:3e:5f:54:00:e8:de:e9:4b:c1:d2:ae:a4:82:e7:72: b7:77:57:89:ce:b5:1a:53:ed:12:f7:75:5e:c1:4c:fb:84:a4: 2e:7c:b3:47:32:05:4a:d7:66:58:19:95:91:36:a3:8f:50:f5: e0:5f:a5:25:2b:d6:d0:69:5c:ca:0e:6f:f1:9f:1c:f3:3a:8b: 60:ab:d1:7f:92:5e:b5:eb:8e:59:16:9a:13:64:37:eb:f7:85: 51:ed:66:fe:88:c3:c7:32:9c:33:63:df:94:95:6c:79:cf:d3: 56:f3:62:7c:1f:72:7d:23:6b:a3:f4:de:73:59:82:d4:20:3b: 9d:3d:f8:48:44:47:64:11:d2:11:99:b6:b1:ce:84:cb:c7:d8: 45:b5:80:65:97:13:b7:02:eb:24:e3:dd:dd:23:6e:90:e6:b8: 31:30:2d:2e:18:5a:7a:cf:c3:7c:45:7a:00:94:8a:4c:a3:31: 09:a9:41:45:bf:6a:be:74:37:9e:82:fb:b0:d9:d0:35:a6:b7: 39:54:e5:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwNTMwMjMzMDI4WhcNMjUwNjA2MjMzMDI4WjAYMRYwFAYD VQQDEw02ODNhM2Y5NC1lNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzF6KFPf/Ag1ZfCGl0rexna0KmEO59RKhArifGdZkBpy4El7RRuAyLQXvYi7 iJNnmLP4B5IvHGhq0dgL/BDF0aNvVyISgVBUVU/KPtKWfwuokA4zyy0kq+mpRrPj sAaY1NRmBb6iqoKaMpLBTmvBj1Ppz7Qekip6Ly9wCbzDtN/rfUkC7dhl9P+S9yHa 02+z5vOaKfLQCTOv9BPeGo0AaYCwpAItFFG5AUmH2BGfMkb6TkSNOl1z4KkZ1wYu sEzPljLQimrTbJx+dcuqVoosgWsA72rw4sLl6XGaCWQHhG+duJuQqSa96LwzAsre 1s70sqyue78hTikx2JOPRicWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm+6IkD zI3lFq9p4vGgO5t2Af1rMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVLjHbOuAYYNbQgZ8bjk+WXR4gcnDJ9QWHalwpfaHkPXZtagR1mIx3 TiahmwEiGtmYloyGjgQcpVs+X1QA6N7pS8HSrqSC53K3d1eJzrUaU+0S93VewUz7 hKQufLNHMgVK12ZYGZWRNqOPUPXgX6UlK9bQaVzKDm/xnxzzOotgq9F/kl61645Z FpoTZDfr94VR7Wb+iMPHMpwzY9+UlWx5z9NW82J8H3J9I2uj9N5zWYLUIDudPfhI REdkEdIRmbaxzoTLx9hFtYBllxO3Ausk493dI26Q5rgxMC0uGFp6z8N8RXoAlIpM ozEJqUFFv2q+dDeegvuw2dA1prc5VOV3 -----END CERTIFICATE-----Generated at Sat May 31 14:58:05 2025 by rpki-client