$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: ErNRSXSZeDL8DmxcMMDUFZingiLaAJjsRsRb6SvKXsY= Subject key identifier: F9:66:08:F0:81:E0:89:FF:15:9F:55:30:F1:05:47:3D:1A:B1:0F:2C Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 0131 Signing time: Thu 15 May 2025 03:54:49 +0000 Manifest this update: Thu 15 May 2025 03:54:49 +0000 Manifest next update: Thu 22 May 2025 03:54:49 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: XpauvL0mSYbaTYiY/CMPf//p8I9ohtTkz2r3J0N521Q=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: wGDmOTIVSrDQKDKCEK7gF/ecDvEsfL3U/Gc/OshH53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: May 15 03:54:49 2025 GMT Not After : May 22 03:54:49 2025 GMT Subject: CN=68256589-ffb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:ba:4b:48:6a:5b:92:86:15:e6:5d:f8:ac: a5:9f:97:87:d2:64:d3:73:13:04:b7:1c:38:45:7c: f0:6e:21:00:8b:60:f0:dc:81:42:78:89:13:8a:00: ea:bd:d3:84:0d:99:e7:1c:0a:5b:ad:3c:6e:0d:14: 55:d3:62:f7:f4:35:b1:53:55:f1:3f:a2:0e:68:65: a3:5d:71:9c:ba:88:ce:75:4b:b9:a1:49:2b:67:4e: 70:e1:bf:54:ce:20:e0:fe:34:a6:a9:68:33:b8:7d: 17:fa:5b:70:26:68:cd:c3:b9:68:3b:c6:85:9d:5a: ec:21:2d:ff:c2:71:33:23:66:68:eb:b9:84:33:f1: 77:d6:b7:a1:ed:c1:c1:16:ad:73:b3:6e:09:52:f7: a2:e2:8e:99:b1:00:b9:d2:ba:3f:91:b9:5e:67:fa: 0e:8c:1b:22:b9:a4:c7:7a:f5:f2:7e:63:14:f1:0d: ac:ac:a6:1a:c5:34:0d:75:27:1a:be:83:c9:a6:fe: b4:d4:ab:c1:f3:97:e2:88:d6:0a:9f:1e:a4:b1:0e: f6:3d:1c:40:a7:b4:c4:0d:23:97:93:ae:27:62:5e: a3:8a:ad:04:62:b2:46:f3:06:9d:ac:b3:63:34:17: a2:c1:90:2e:7a:3a:95:89:c9:14:d7:d0:a5:db:81: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:08:F0:81:E0:89:FF:15:9F:55:30:F1:05:47:3D:1A:B1:0F:2C X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f3:d2:d4:f4:de:15:26:3e:98:99:be:98:d8:55:bf:18:e9: 3e:15:01:a3:8f:c7:cf:73:a3:c3:a8:3f:85:60:74:00:e0:ca: 93:22:bf:a0:f2:63:4c:7d:15:da:12:af:b0:3c:7e:97:e7:6a: 25:16:66:5c:8e:a3:5e:fd:b7:48:06:00:fc:ce:60:b7:e4:8e: ac:eb:5c:62:14:ad:41:2c:32:56:57:66:99:8d:0e:c0:e7:d7: 74:09:54:ad:20:61:1f:f6:bf:7f:0e:20:9e:3b:11:c8:e5:77: 83:2f:6b:a8:b8:a9:91:0c:ca:91:bb:3d:34:c0:0d:10:f0:a6: 42:7e:9a:c4:8f:83:b6:63:89:42:3a:9f:7d:47:c2:a0:94:e9: 84:c0:6a:40:b4:8d:4e:22:f2:7e:60:7a:81:30:2e:ab:d1:6e: 7e:12:d7:72:50:84:89:6d:14:7b:e2:6a:20:9c:aa:a7:07:27: bd:a7:c4:52:56:46:b6:34:2f:b9:e6:76:7f:b0:f2:74:c4:ad: 85:8d:66:8b:10:6e:9c:64:18:b9:10:a2:46:21:0f:19:88:05: 1b:02:6f:54:68:8e:73:94:3b:31:d5:02:8c:a2:78:02:4d:45: b2:61:fc:cd:e0:e8:1b:9d:3f:b8:51:59:f6:f1:3b:f3:fc:59: e7:ba:5c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjUwNTE1MDM1NDQ5WhcNMjUwNTIyMDM1NDQ5WjAYMRYwFAYD VQQDEw02ODI1NjU4OS1mZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGi6S0hqW5KGFeZd+Kyln5eH0mTTcxMEtxw4RXzwbiEAi2Dw3IFCeIkTigDq vdOEDZnnHApbrTxuDRRV02L39DWxU1XxP6IOaGWjXXGcuojOdUu5oUkrZ05w4b9U ziDg/jSmqWgzuH0X+ltwJmjNw7loO8aFnVrsIS3/wnEzI2Zo67mEM/F31reh7cHB Fq1zs24JUvei4o6ZsQC50ro/kbleZ/oOjBsiuaTHevXyfmMU8Q2srKYaxTQNdSca voPJpv601KvB85fiiNYKnx6ksQ72PRxAp7TEDSOXk64nYl6jiq0EYrJG8wadrLNj NBeiwZAuejqVickU19Cl24GetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlmCPCB 4In/FZ9VMPEFRz0asQ8sMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA889LU9N4VJj6Ymb6Y2FW/GOk+FQGjj8fPc6PDqD+FYHQA4MqTIr+g 8mNMfRXaEq+wPH6X52olFmZcjqNe/bdIBgD8zmC35I6s61xiFK1BLDJWV2aZjQ7A 59d0CVStIGEf9r9/DiCeOxHI5XeDL2uouKmRDMqRuz00wA0Q8KZCfprEj4O2Y4lC Op99R8KglOmEwGpAtI1OIvJ+YHqBMC6r0W5+EtdyUISJbRR74mognKqnBye9p8RS Vka2NC+55nZ/sPJ0xK2FjWaLEG6cZBi5EKJGIQ8ZiAUbAm9UaI5zlDsx1QKMongC TUWyYfzN4OgbnT+4UVn28Tvz/FnnulzO -----END CERTIFICATE-----Generated at Thu May 15 09:09:11 2025 by rpki-client