$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: wBab0s2kIZ93G2IBXi8joxc2oisCRUHUXK3BHBs31ME= Subject key identifier: DD:B3:C6:2E:FB:DA:3A:50:22:3A:8B:6C:D7:A1:A6:87:A1:BF:E1:C3 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: C8 Signing time: Fri 25 Apr 2025 04:50:02 +0000 Manifest this update: Fri 25 Apr 2025 04:50:02 +0000 Manifest next update: Fri 02 May 2025 04:50:02 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: bk5Akn8GBAF7TA8oDAGP00zhOpgggX9McCflAo+3xxw=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: LnyEnapgR4NWJ58uRDjQWaBGFO6rX2ZjgINHA+tVi+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Apr 25 04:50:02 2025 GMT Not After : May 2 04:50:02 2025 GMT Subject: CN=680b147a-a77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:3b:0e:5a:c0:e5:8c:e8:cb:00:49:05:aa: 87:f6:78:ce:e9:af:0d:62:d8:4d:9f:92:49:12:6c: 43:d1:10:95:ee:7b:be:02:63:fc:5b:91:7f:63:89: 9a:1e:db:33:25:8f:21:02:8b:61:b6:03:f5:07:86: 68:5b:43:15:22:fe:0d:36:a9:bc:a6:f1:01:0e:6e: 69:87:63:0d:e8:dd:09:01:83:f9:50:52:6b:6e:3c: c4:17:83:b3:5a:77:af:70:9c:31:ec:38:26:1d:68: 8c:3e:ee:d2:10:9b:86:e1:ff:59:2a:f2:48:4d:c2: 7f:df:05:a1:1b:89:78:1a:71:9f:63:fd:87:87:62: 33:75:fc:26:7e:14:8b:39:b8:9c:2f:85:2b:11:cf: 82:71:52:17:f2:e1:47:c7:82:5d:cf:bd:7b:e2:ed: 46:f8:52:ae:57:5b:f6:8b:5f:70:5a:23:cb:90:0e: 2f:fb:81:d5:b0:80:c4:87:ab:a3:1f:54:a5:e2:7a: 8a:66:a5:94:8a:ae:c2:e2:23:49:97:69:17:99:5a: a1:71:8c:85:07:f0:8c:93:a5:79:28:00:fa:51:54: c6:44:67:dd:ab:44:0f:14:e3:a0:58:95:5c:d9:77: 6a:b5:f3:a8:47:4b:b2:59:26:af:80:7b:7e:b1:75: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:C6:2E:FB:DA:3A:50:22:3A:8B:6C:D7:A1:A6:87:A1:BF:E1:C3 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ef:2d:ed:14:22:96:0c:0c:32:74:6d:f5:f3:bc:b4:c8:62: 89:66:16:ed:04:8b:1c:92:4b:5b:89:ae:56:1d:8f:20:9d:b3: 03:ba:ff:e4:4c:25:c0:3b:45:93:15:fc:16:d9:8b:94:fd:a9: 21:9d:ce:e4:6e:c0:e4:c9:af:a5:44:cf:eb:2c:42:21:b8:fe: 8e:df:d6:f5:48:d6:18:0a:30:03:25:db:e5:dc:71:a1:5f:6d: 3a:32:2b:72:3b:58:6a:bd:45:50:7d:0e:d9:44:04:3c:b0:65: 46:f8:95:93:d9:f6:bc:25:cf:65:a8:13:70:f2:35:8f:0b:4c: 12:c1:5f:a7:b9:74:7a:5e:66:42:19:a1:da:8f:9d:a2:62:d4: 56:d2:44:08:68:f7:41:8d:34:64:7e:71:67:e3:a4:02:1a:ad: 49:ac:d1:f8:e3:49:24:3d:28:cc:a9:f8:22:52:65:c8:43:eb: c4:ea:32:98:bf:39:a2:cf:9a:03:21:7f:de:16:76:64:ce:0f: 53:a4:43:b6:8e:d0:b6:d1:57:9d:f0:69:ae:35:c1:7c:7f:83: 5a:d5:ea:0a:b5:5d:25:7f:ae:a1:fb:32:c5:73:c8:4f:23:f2: b3:c5:48:a8:48:6f:f1:8d:fe:0c:7c:15:2f:4f:51:a7:26:7a: e1:e1:b1:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwNDI1MDQ1MDAyWhcNMjUwNTAyMDQ1MDAyWjAYMRYwFAYD VQQDEw02ODBiMTQ3YS1hNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPs7DlrA5YzoywBJBaqH9njO6a8NYthNn5JJEmxD0RCV7nu+AmP8W5F/Y4ma HtszJY8hAothtgP1B4ZoW0MVIv4NNqm8pvEBDm5ph2MN6N0JAYP5UFJrbjzEF4Oz WnevcJwx7DgmHWiMPu7SEJuG4f9ZKvJITcJ/3wWhG4l4GnGfY/2Hh2IzdfwmfhSL ObicL4UrEc+CcVIX8uFHx4Jdz7174u1G+FKuV1v2i19wWiPLkA4v+4HVsIDEh6uj H1Sl4nqKZqWUiq7C4iNJl2kXmVqhcYyFB/CMk6V5KAD6UVTGRGfdq0QPFOOgWJVc 2XdqtfOoR0uyWSavgHt+sXWCewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2zxi77 2jpQIjqLbNehpoehv+HDMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm7y3tFCKWDAwydG3187y0yGKJZhbtBIsckktbia5WHY8gnbMDuv/k TCXAO0WTFfwW2YuU/akhnc7kbsDkya+lRM/rLEIhuP6O39b1SNYYCjADJdvl3HGh X206MityO1hqvUVQfQ7ZRAQ8sGVG+JWT2fa8Jc9lqBNw8jWPC0wSwV+nuXR6XmZC GaHaj52iYtRW0kQIaPdBjTRkfnFn46QCGq1JrNH440kkPSjMqfgiUmXIQ+vE6jKY vzmiz5oDIX/eFnZkzg9TpEO2jtC20Ved8GmuNcF8f4Na1eoKtV0lf66h+zLFc8hP I/KzxUioSG/xjf4MfBUvT1GnJnrh4bES -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:15 2025 by rpki-client