$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: TvhhIQ+BFUM1Et1njMHdLBqN1CDqP0ciT9NUiBJ9lLs= Subject key identifier: 03:9E:FC:3E:48:19:9B:25:7F:2E:8B:3A:F9:D5:55:BB:0E:5B:FE:02 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: AF Signing time: Sun 11 May 2025 04:50:36 +0000 Manifest this update: Sun 11 May 2025 04:50:35 +0000 Manifest next update: Sun 18 May 2025 04:50:35 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: bo0sFXnJVYfQxz4HxKMCNLtkm0v5xD4F6xBbJhdm8dw=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: May 11 04:50:35 2025 GMT Not After : May 18 04:50:35 2025 GMT Subject: CN=68202c9c-f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:c5:fb:f8:d4:c1:57:bd:24:8a:05:2b:b7: a9:6e:df:41:56:18:86:81:0b:8c:d6:af:59:cb:99: 57:9c:b9:10:93:26:32:15:3c:5d:53:a6:fb:be:d0: ed:bb:53:3f:64:e4:eb:fb:35:b6:f9:bf:2e:d7:7a: a1:ed:6f:fd:56:91:5e:da:32:d0:9d:69:a1:1a:96: c9:06:a6:a6:3a:a9:94:db:13:c3:e7:b2:5a:31:d6: 01:61:70:ca:50:cd:af:c2:5b:54:99:36:4e:69:08: 22:df:aa:3b:94:29:f5:b7:2f:66:ae:60:19:5c:84: 38:f5:6d:f9:b9:4d:0e:a5:ae:66:23:d5:87:4d:e3: 48:65:42:92:0c:8f:73:cf:dc:cd:91:dd:a2:04:c3: 3a:31:9e:68:9a:a4:f3:8d:b5:1a:a4:df:09:45:d4: 42:57:c2:42:26:73:91:e2:82:1d:c6:14:4a:9b:d1: 01:6b:7d:0d:6f:a9:d0:3d:68:f9:ac:72:65:26:44: 58:fd:2f:13:96:65:34:20:f8:7a:96:9a:17:cd:44: 4e:6e:cb:e2:e4:97:8f:be:83:26:c8:17:4f:70:ee: c8:ce:b0:d0:40:50:45:1e:09:70:5c:51:ad:b6:80: 7b:27:49:3b:99:cf:93:c0:9c:ed:33:15:8d:5d:16: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:FC:3E:48:19:9B:25:7F:2E:8B:3A:F9:D5:55:BB:0E:5B:FE:02 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c0:0a:b2:28:08:35:5f:58:1a:eb:c5:5c:f6:01:be:1b:d2: 88:91:bc:92:d8:6b:35:5d:4b:ad:bd:f2:b9:6a:6a:8a:8c:3f: 26:03:27:e6:2e:62:a5:77:35:04:2f:36:f3:e9:b5:2d:7c:6d: c6:5f:9e:31:72:79:56:28:ae:4c:f5:29:1e:58:9c:d7:ed:a4: d5:d3:ca:66:d3:f3:e6:8d:91:7e:77:0c:5d:1b:11:df:0c:76: 86:ec:b8:db:02:f1:e0:ef:b9:59:af:fc:c0:76:8a:24:d8:b7: 74:8d:db:e4:9f:f3:0a:c2:d7:b4:b1:a1:c3:45:c6:aa:b8:c6: d6:fb:a9:b6:3b:54:0e:36:2b:ad:5f:f9:70:84:2e:98:93:98: 6e:c7:28:18:ae:14:f9:de:cb:64:30:0f:25:ed:b9:e7:5b:aa: fc:f0:44:7f:6d:41:f8:38:98:f3:b2:28:83:31:43:99:99:b5: 7b:24:d6:b8:ad:10:4c:cb:94:de:5d:33:9b:97:0a:b1:5f:d7: f8:72:a8:ad:72:35:5b:dc:1b:f8:33:ec:72:05:3c:85:97:9e: e1:40:05:c9:9a:e8:fd:d3:bc:f1:a9:3c:00:69:c0:28:bb:21: 1e:a6:79:62:63:f8:a6:75:ae:07:86:ef:ae:3d:ed:b8:8d:00: c5:b3:1a:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUwNTExMDQ1MDM1WhcNMjUwNTE4MDQ1MDM1WjAYMRYwFAYD VQQDEw02ODIwMmM5Yy1mOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA7F+/jUwVe9JIoFK7epbt9BVhiGgQuM1q9Zy5lXnLkQkyYyFTxdU6b7vtDt u1M/ZOTr+zW2+b8u13qh7W/9VpFe2jLQnWmhGpbJBqamOqmU2xPD57JaMdYBYXDK UM2vwltUmTZOaQgi36o7lCn1ty9mrmAZXIQ49W35uU0Opa5mI9WHTeNIZUKSDI9z z9zNkd2iBMM6MZ5omqTzjbUapN8JRdRCV8JCJnOR4oIdxhRKm9EBa30Nb6nQPWj5 rHJlJkRY/S8TlmU0IPh6lpoXzURObsvi5JePvoMmyBdPcO7IzrDQQFBFHglwXFGt toB7J0k7mc+TwJztMxWNXRYLrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOe/D5I GZslfy6LOvnVVbsOW/4CMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4wAqyKAg1X1ga68Vc9gG+G9KIkbyS2Gs1XUutvfK5amqKjD8mAyfm LmKldzUELzbz6bUtfG3GX54xcnlWKK5M9SkeWJzX7aTV08pm0/PmjZF+dwxdGxHf DHaG7LjbAvHg77lZr/zAdook2Ld0jdvkn/MKwte0saHDRcaquMbW+6m2O1QONiut X/lwhC6Yk5huxygYrhT53stkMA8l7bnnW6r88ER/bUH4OJjzsiiDMUOZmbV7JNa4 rRBMy5TeXTOblwqxX9f4cqitcjVb3Bv4M+xyBTyFl57hQAXJmuj907zxqTwAacAo uyEepnliY/imda4Hhu+uPe24jQDFsxrb -----END CERTIFICATE-----Generated at Mon May 12 04:35:16 2025 by rpki-client