$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: Xd1h15AaOPT5hgUQP44zqWHc5YVKtg8+hn3SpyAVq9c= Subject key identifier: E9:D3:BC:E8:78:25:53:EE:05:C5:81:55:AA:03:E3:F2:0E:CC:42:92 Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 0575 Signing time: Mon 12 May 2025 23:06:50 +0000 Manifest this update: Mon 12 May 2025 23:06:50 +0000 Manifest next update: Mon 19 May 2025 23:06:50 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: hQp+fHK5oLZgipWufIWdWRoPYzBaTyURe4ex5JeYpEo=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: eALzuGTBIdO32t7InjPCWdnlihceQ6Ej+q9aOFO73+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: May 12 23:06:50 2025 GMT Not After : May 19 23:06:50 2025 GMT Subject: CN=68227f0a-121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:53:0c:1b:67:ba:a1:4a:b5:11:9d:31:94: e8:8a:98:61:3e:b3:90:0a:4c:fe:63:1d:2f:ed:88: 50:59:f1:25:48:7c:bc:5b:6c:d9:c6:9f:d6:85:ea: d1:a9:c1:5b:90:fc:e3:53:be:ae:5f:bb:af:12:6c: 16:d9:20:85:75:7d:08:8d:a8:12:82:78:49:11:e2: ad:06:33:fe:10:25:0c:3c:61:d0:4b:50:db:32:df: 3b:84:24:e3:87:0f:15:67:1a:40:b0:21:5c:eb:84: 7f:df:75:a3:40:51:8d:1c:3e:fe:8c:c6:77:60:f0: 09:4b:40:7d:6c:fb:2e:b8:06:1f:61:8e:80:ec:e8: 0a:c4:ef:69:d5:fa:1d:22:1a:6b:0d:26:4e:e1:3e: e9:46:29:02:43:59:d8:57:ff:3a:b6:06:89:cb:9d: 15:80:f7:53:49:89:97:37:ee:67:0d:1d:07:52:85: 7e:8c:b7:b6:29:4e:20:c4:b0:6e:80:8c:03:96:0d: 20:a7:73:44:cd:0e:e2:31:aa:f3:b2:de:ff:f7:aa: 2e:4b:b6:c4:99:0e:ba:4a:8f:b7:8c:00:ae:33:53: 9b:bf:d0:88:73:6a:88:58:50:45:d4:62:9d:1e:5d: 8f:a3:f6:29:37:ad:78:25:40:17:4a:a9:3f:ea:81: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:BC:E8:78:25:53:EE:05:C5:81:55:AA:03:E3:F2:0E:CC:42:92 X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a4:1c:4a:6c:02:2d:58:27:a4:6a:68:47:fb:b5:05:f7:46: dc:98:b1:12:35:a2:bb:7c:5a:49:f8:55:cc:7a:33:46:bd:9c: ad:8d:47:3d:f2:1e:0e:d4:0b:13:80:55:0a:e1:fa:7a:f1:3f: c0:6d:55:77:d7:4b:2a:d9:32:46:6b:af:e3:f8:30:21:db:66: 01:39:72:e7:cf:d7:39:3e:f1:44:ec:f8:32:50:43:9d:77:79: ca:33:5a:bf:a7:04:5c:f5:cc:19:d7:23:7d:6a:a0:a6:9c:30: e3:a3:a0:85:e7:10:91:fe:29:26:3a:b8:c0:ee:50:57:e9:b5: 4b:f2:bd:60:8e:8d:55:b9:17:4f:e6:d2:03:33:70:52:e5:b9: e3:52:5b:c1:19:c6:c5:d9:91:95:95:ed:5b:37:ed:96:1f:b3: 5a:d2:bc:d8:9a:ef:c5:16:33:7b:a5:17:9c:aa:f8:3a:13:b7: 9c:30:7a:04:62:ee:5d:90:45:d9:2d:fb:91:45:19:e2:54:d3: 23:af:09:f6:14:25:3b:40:18:6b:34:72:42:2c:60:45:cd:66: 03:88:fe:8c:a3:2c:84:b4:6a:6a:85:b2:8c:ee:8b:76:d7:fa: 22:1b:0b:a1:92:f3:8a:a7:67:e5:09:1c:55:db:0b:3f:13:f5: c0:cb:d6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUwNTEyMjMwNjUwWhcNMjUwNTE5MjMwNjUwWjAYMRYwFAYD VQQDEw02ODIyN2YwYS0xMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7tTDBtnuqFKtRGdMZToiphhPrOQCkz+Yx0v7YhQWfElSHy8W2zZxp/WherR qcFbkPzjU76uX7uvEmwW2SCFdX0IjagSgnhJEeKtBjP+ECUMPGHQS1DbMt87hCTj hw8VZxpAsCFc64R/33WjQFGNHD7+jMZ3YPAJS0B9bPsuuAYfYY6A7OgKxO9p1fod IhprDSZO4T7pRikCQ1nYV/86tgaJy50VgPdTSYmXN+5nDR0HUoV+jLe2KU4gxLBu gIwDlg0gp3NEzQ7iMarzst7/96ouS7bEmQ66So+3jACuM1Obv9CIc2qIWFBF1GKd Hl2Po/YpN614JUAXSqk/6oH44wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnTvOh4 JVPuBcWBVaoD4/IOzEKSMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNpBxKbAItWCekamhH+7UF90bcmLESNaK7fFpJ+FXMejNGvZytjUc9 8h4O1AsTgFUK4fp68T/AbVV310sq2TJGa6/j+DAh22YBOXLnz9c5PvFE7PgyUEOd d3nKM1q/pwRc9cwZ1yN9aqCmnDDjo6CF5xCR/ikmOrjA7lBX6bVL8r1gjo1VuRdP 5tIDM3BS5bnjUlvBGcbF2ZGVle1bN+2WH7Na0rzYmu/FFjN7pRecqvg6E7ecMHoE Yu5dkEXZLfuRRRniVNMjrwn2FCU7QBhrNHJCLGBFzWYDiP6MoyyEtGpqhbKM7ot2 1/oiGwuhkvOKp2flCRxV2ws/E/XAy9Yz -----END CERTIFICATE-----Generated at Wed May 14 02:57:58 2025 by rpki-client