$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json) Hash identifier: JK6ao5CRbziMMLC6RPhsY7lrp2HTHQpyDbjDE5SkQIM= Subject key identifier: 61:83:7E:BD:1A:F0:75:16:8F:3E:37:DC:DC:CE:93:5B:98:E7:AE:C3 Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft Manifest number: 33 Signing time: Sun 27 Apr 2025 06:26:59 +0000 Manifest this update: Sun 27 Apr 2025 06:26:58 +0000 Manifest next update: Sun 04 May 2025 06:26:58 +0000 Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: Yk1KlDTlWtEJAo9FSoFPMWx5kMywmOjGo74/O8mk+WY=) 2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=) 3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Validity Not Before: Apr 27 06:26:58 2025 GMT Not After : May 4 06:26:58 2025 GMT Subject: CN=680dce32-96b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:35:c1:8a:30:89:14:a6:f9:80:a8:4c:37: ac:6c:5b:d4:b9:3d:15:1a:d0:63:e9:81:77:8f:0c: 2d:0a:91:cb:b3:82:39:69:dc:74:00:55:94:f9:91: f3:69:23:a9:27:3c:f2:4e:31:0f:68:de:76:39:e9: e0:44:df:e2:5e:bc:7c:d3:bf:2a:4d:15:48:3a:e4: f7:2b:18:2f:10:18:a7:56:9a:6e:8a:ad:fb:cc:9f: a3:51:b5:b5:9e:d4:f2:bd:2c:2d:65:2f:fb:b8:1a: 20:6c:d6:24:ea:9c:ed:de:6c:eb:17:a0:3b:1b:46: 70:06:a7:bb:06:2b:6e:5c:8d:2a:c8:1d:21:3b:ed: b0:31:2c:94:8e:68:55:e1:d5:55:3e:75:bf:50:01: 3a:0e:fa:a7:47:61:be:e7:7a:cf:8d:37:17:ca:97: a0:40:98:ca:22:31:de:7d:5d:5c:3c:50:c1:23:e6: 03:1c:8d:a0:00:2f:f2:00:1f:4a:08:28:29:56:10: 60:2f:a4:f7:11:cc:49:8e:79:03:a9:7b:c4:b2:4f: aa:33:4c:f4:63:22:a3:7f:60:77:db:a2:3c:37:43: ed:38:d5:29:ff:7e:e1:87:02:03:f3:55:28:e3:77: 2e:62:1c:de:fe:85:eb:60:97:6c:7a:1f:41:06:f8: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:7E:BD:1A:F0:75:16:8F:3E:37:DC:DC:CE:93:5B:98:E7:AE:C3 X509v3 Authority Key Identifier: keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:46:25:e2:85:c8:3d:c4:37:07:e5:c8:20:1f:d4:3f:3b:a1: 78:3a:f8:56:cf:89:cd:e1:28:2f:cc:38:c6:5f:d0:7a:24:1a: 25:1b:30:e3:08:68:0a:12:1f:eb:bb:49:2f:a5:3c:14:ba:01: 49:82:9b:41:20:a9:b3:82:a4:7e:d3:f3:b8:08:a8:19:f6:44: 11:ac:e8:54:b1:b6:4d:43:00:36:d2:b2:02:9c:5d:3a:78:e7: 38:45:9f:18:29:52:6d:db:85:ff:0e:c3:46:dd:7a:35:7b:ac: 8f:09:d2:31:d9:2c:ee:54:46:ad:9d:d8:99:f2:80:5f:2a:3c: 0c:2f:5d:ea:b8:25:de:01:a7:5d:5d:bd:33:02:0c:5d:d0:34: f2:45:7c:e0:1d:66:4e:55:ae:d0:dd:43:98:82:a7:92:d0:25: 16:1f:2d:a1:e5:fe:80:68:d4:ef:e9:d2:e2:b4:85:02:34:f4: 3a:1b:f9:d5:b3:98:6a:86:a6:f7:8d:1e:73:94:7f:73:1c:be: 30:0f:13:cb:29:d1:95:18:e4:aa:5e:cd:60:47:c6:8f:57:da: 21:14:c5:bd:1e:4e:d5:b2:34:84:f4:26:a6:e1:10:5c:a1:b9: 74:68:33:0f:8c:12:53:70:70:e5:fb:16:ee:a1:d4:63:3f:ec: 43:a4:ff:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODU3NjExMC8GA1UEBRMoMTg5MUQ1NENFRjZBOTBDMjMyRkNBODkxRTM5OUY5Nzgz ODY3MTFFRTAeFw0yNTA0MjcwNjI2NThaFw0yNTA1MDQwNjI2NThaMBgxFjAUBgNV BAMTDTY4MGRjZTMyLTk2YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFWzXBijCJFKb5gKhMN6xsW9S5PRUa0GPpgXePDC0Kkcuzgjlp3HQAVZT5kfNp I6knPPJOMQ9o3nY56eBE3+JevHzTvypNFUg65PcrGC8QGKdWmm6KrfvMn6NRtbWe 1PK9LC1lL/u4GiBs1iTqnO3ebOsXoDsbRnAGp7sGK25cjSrIHSE77bAxLJSOaFXh 1VU+db9QAToO+qdHYb7nes+NNxfKl6BAmMoiMd59XVw8UMEj5gMcjaAAL/IAH0oI KClWEGAvpPcRzEmOeQOpe8SyT6ozTPRjIqN/YHfbojw3Q+041Sn/fuGHAgPzVSjj dy5iHN7+hetgl2x6H0EG+LyDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYYN+vRrw dRaPPjfc3M6TW5jnrsMwHwYDVR0jBBgwFoAUGJHVTO9qkMIy/KiR45n5eDhnEe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NTc2LzJERTk0QTlBRDdB NDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01JeV9LaVI0NW41ZURobkVl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0pIVlRPOXFrTUl5X0tpUjQ1bjVlRGhuRWU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NTc2LzJERTk0QTlBRDdBNDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01J eV9LaVI0NW41ZURobkVlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRGJeKFyD3ENwflyCAf1D87oXg6+FbPic3hKC/MOMZf0HokGiUbMOMI aAoSH+u7SS+lPBS6AUmCm0EgqbOCpH7T87gIqBn2RBGs6FSxtk1DADbSsgKcXTp4 5zhFnxgpUm3bhf8Ow0bdejV7rI8J0jHZLO5URq2d2JnygF8qPAwvXeq4Jd4Bp11d vTMCDF3QNPJFfOAdZk5VrtDdQ5iCp5LQJRYfLaHl/oBo1O/p0uK0hQI09Dob+dWz mGqGpveNHnOUf3McvjAPE8sp0ZUY5KpezWBHxo9X2iEUxb0eTtWyNIT0JqbhEFyh uXRoMw+MElNwcOX7Fu6h1GM/7EOk/1I= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net