$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: 4xT3U0A9iMNCtbmu1+MVDxl6eHtmNdDNXbJ/ia+o6hk= Subject key identifier: E8:4B:21:94:28:18:E9:69:2A:EB:32:17:6F:02:41:43:2D:AB:F0:3C Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 0179 Signing time: Sun 11 May 2025 02:42:36 +0000 Manifest this update: Sun 11 May 2025 02:42:36 +0000 Manifest next update: Sun 18 May 2025 02:42:36 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: aaK3dDA1LaVTTEphleN+k3eBP3g3Gxc76yW9ROO/fqw=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: F7gDTN0o2wOD506HIpMLfgl8UeSu5eT6/M2YdzZQ6qI=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: May 11 02:42:36 2025 GMT Not After : May 18 02:42:36 2025 GMT Subject: CN=68200e9c-5768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:51:5e:a2:e0:2f:d1:b7:7b:ba:6d:37:3b: ed:f9:02:95:ae:27:42:2a:4c:15:41:28:9f:05:95: 3e:09:32:fb:7e:3e:03:e4:92:2e:5e:b9:92:f8:74: 5f:68:32:de:82:c9:71:a4:41:eb:c0:bb:dc:54:20: 7a:20:37:f4:55:b6:50:57:c1:d9:67:28:c4:c8:fc: 69:78:df:39:f4:c1:a3:cd:e2:4b:7d:99:1b:bb:8c: 5e:b8:88:43:b6:33:ef:0e:c7:01:fc:4a:fe:91:29: 51:00:46:16:5e:e6:3a:63:90:b3:a6:08:cd:a9:e0: 87:58:88:04:b1:ef:e8:45:cc:6b:76:e7:9a:d0:40: 53:f1:75:38:67:91:5b:32:38:dc:10:50:a0:e8:65: f0:ae:1e:74:7e:ea:f2:18:44:7c:11:1b:74:b1:07: 92:58:da:13:e3:72:20:de:5e:1c:de:85:d8:d7:df: 10:46:6a:41:26:14:e8:85:da:28:bc:7a:c8:25:c6: da:4c:96:cd:d7:54:99:00:2f:46:bd:65:9c:d4:58: 5d:06:7e:cd:cb:e6:cc:f4:c8:f2:c4:6a:7d:f9:b2: 47:ef:48:44:90:67:f5:33:91:ae:19:50:ce:fa:a3: a9:4d:50:5e:34:15:4d:35:6c:86:a1:e5:b1:c6:99: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4B:21:94:28:18:E9:69:2A:EB:32:17:6F:02:41:43:2D:AB:F0:3C X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:09:14:b9:4b:15:32:f1:3e:ab:b8:20:ab:d9:a6:54:f4:f3: 2f:af:db:cb:4e:f4:f5:5a:d2:d1:06:aa:e4:ce:fa:23:3f:e6: 63:d9:ca:8b:b3:6c:87:b0:96:fa:ee:eb:31:13:f8:27:c4:ed: f5:30:4c:d9:1a:68:32:71:b8:07:1c:b3:58:5f:30:68:5d:1d: f7:32:67:8e:ea:61:ad:b6:ef:da:dc:10:fa:91:9d:1f:a8:75: b2:21:12:77:7d:b3:f8:bc:03:8a:c6:e1:73:9e:d0:06:7f:ed: 11:69:91:a8:7b:20:5f:82:eb:76:7e:80:b8:27:88:ad:f3:20: 8a:29:71:59:2c:f6:f9:7d:7f:6a:82:7d:99:ac:03:6e:19:6a: ca:9e:f4:5e:ee:c9:f9:e3:09:72:29:59:62:5d:2a:b9:c5:11: 51:7a:04:6b:f6:c8:19:e2:3b:b1:be:47:be:2d:9b:84:c0:ed: f5:6e:63:09:50:d4:09:e0:49:17:38:62:58:5c:1f:fc:07:6e: 02:20:ad:1f:84:37:7c:51:a9:15:7e:aa:05:e2:a6:63:6d:59: 34:ff:16:ea:fc:93:0e:1c:a1:07:19:c5:2c:a3:a8:a1:6f:ba: e4:e2:7e:04:d1:b9:f2:50:91:e9:fd:61:f6:11:d5:29:d4:7a: db:64:d1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwNTExMDI0MjM2WhcNMjUwNTE4MDI0MjM2WjAYMRYwFAYD VQQDEw02ODIwMGU5Yy01NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DxRXqLgL9G3e7ptNzvt+QKVridCKkwVQSifBZU+CTL7fj4D5JIuXrmS+HRf aDLegslxpEHrwLvcVCB6IDf0VbZQV8HZZyjEyPxpeN859MGjzeJLfZkbu4xeuIhD tjPvDscB/Er+kSlRAEYWXuY6Y5CzpgjNqeCHWIgEse/oRcxrduea0EBT8XU4Z5Fb MjjcEFCg6GXwrh50furyGER8ERt0sQeSWNoT43Ig3l4c3oXY198QRmpBJhTohdoo vHrIJcbaTJbN11SZAC9GvWWc1FhdBn7Ny+bM9MjyxGp9+bJH70hEkGf1M5GuGVDO +qOpTVBeNBVNNWyGoeWxxplCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhLIZQo GOlpKusyF28CQUMtq/A8MB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkCRS5SxUy8T6ruCCr2aZU9PMvr9vLTvT1WtLRBqrkzvojP+Zj2cqL s2yHsJb67usxE/gnxO31MEzZGmgycbgHHLNYXzBoXR33MmeO6mGttu/a3BD6kZ0f qHWyIRJ3fbP4vAOKxuFzntAGf+0RaZGoeyBfgut2foC4J4it8yCKKXFZLPb5fX9q gn2ZrANuGWrKnvRe7sn54wlyKVliXSq5xRFRegRr9sgZ4juxvke+LZuEwO31bmMJ UNQJ4EkXOGJYXB/8B24CIK0fhDd8UakVfqoF4qZjbVk0/xbq/JMOHKEHGcUso6ih b7rk4n4E0bnyUJHp/WH2EdUp1HrbZNGz -----END CERTIFICATE-----Generated at Mon May 12 19:56:58 2025 by rpki-client