$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: fXbMzBY7XsJazlBy+kZMGLHganhb9I8yCQlpqCQuyJs= Subject key identifier: 3B:CB:16:7A:06:A1:25:47:E9:13:EF:88:79:D1:4F:8E:FF:2C:43:23 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0821 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 081A Signing time: Thu 24 Apr 2025 20:41:40 +0000 Manifest this update: Thu 24 Apr 2025 20:41:40 +0000 Manifest next update: Thu 01 May 2025 20:41:39 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: SuTzTSMgYaH7tQ3u8FiiefArWFJ0rarZMnugRG9EwC4=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: HLJ4E+O4+cyS3vrwMtki5z6A2KFnmKhIcHCO2Ezqz2E=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: I3TylIitR1gs3qeVyLm/iGnBJAcsnmMydwLVLUYv63M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2081 (0x821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Apr 24 20:41:40 2025 GMT Not After : May 1 20:41:39 2025 GMT Subject: CN=680aa204-e061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:4b:24:66:03:8d:0b:1e:79:a4:16:db:71: 72:7b:d0:70:2b:cb:1e:b0:1a:54:bf:0d:c2:87:48: 92:be:4a:bc:86:76:2d:c9:28:70:09:41:83:cf:28: 9f:ab:e5:9d:67:f0:4f:a3:a7:ee:68:ae:70:41:4d: 65:99:f3:cd:97:b5:2d:7c:d5:a8:bc:f1:0c:5d:45: 8f:35:88:35:1e:6d:45:e1:22:75:b1:06:01:ba:48: 3e:b9:63:7c:0b:db:b8:cf:86:05:18:e6:74:37:9e: 66:d3:67:5e:1d:b2:c0:8e:82:8a:45:b0:01:aa:c5: 39:83:b9:21:44:05:cc:e0:d3:b6:ea:39:8c:e9:74: 0c:53:1a:46:11:09:5c:7a:89:54:88:01:00:6e:32: 76:69:9a:7a:5b:14:51:bd:68:55:73:7d:48:fd:c0: 62:88:4c:79:f3:ea:82:f5:9d:85:0a:e1:64:a0:f2: d4:eb:f2:ab:f3:49:59:c6:70:b5:e9:64:9d:a8:64: 57:ad:0e:5d:93:a1:e6:ed:24:03:65:b6:bd:b0:6f: 89:91:dc:bf:4b:59:45:c5:d4:91:d2:fd:fb:31:8a: 09:aa:76:5c:9c:b9:e8:0b:50:a0:50:46:eb:83:84: c2:16:89:96:4d:1b:5a:a8:af:ab:ba:8f:ec:58:e7: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CB:16:7A:06:A1:25:47:E9:13:EF:88:79:D1:4F:8E:FF:2C:43:23 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:60:a1:52:0c:3b:ac:48:81:c1:d7:d4:b6:f1:8c:f2:70:b9: 1d:3b:e9:a2:4f:05:c8:05:c5:48:24:44:14:7e:25:27:ba:6b: f7:72:17:29:eb:ed:40:a8:d2:6d:e9:1a:b9:77:5b:3b:6c:5e: ab:87:6f:d0:9f:9e:21:4d:f3:c2:d7:e3:74:ca:f7:00:12:a2: bd:6f:f9:81:5a:0b:f4:4f:25:c2:7b:ca:bc:73:b3:04:1e:fe: 11:0a:d7:72:50:d3:3a:8a:a0:42:1d:8a:2d:b1:2a:58:35:5f: e0:6c:d2:9b:f6:a6:15:7e:27:40:14:0e:32:76:06:ba:d4:03: 83:de:50:63:48:46:70:6b:82:cd:c1:f7:b1:92:69:2a:a0:dd: 2e:7a:1a:4d:97:41:6c:29:2f:e7:44:03:11:bc:d2:e1:3d:ef: 92:94:61:a8:96:b2:88:ae:a8:d7:48:e9:c3:88:9c:83:d2:61: cf:ab:b8:6b:c4:ed:de:d9:cd:81:37:e0:38:97:6e:9c:ca:87: 30:74:8b:41:e4:be:b6:68:01:e1:28:f1:1b:7d:8b:4a:b6:c4: 92:fd:b5:f6:49:73:df:b3:87:f2:28:66:54:28:23:be:68:a2: 60:66:d8:54:87:3d:fc:09:d1:e2:43:74:91:7b:fe:75:58:cc: a2:cf:86:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNDI0MjA0MTQwWhcNMjUwNTAxMjA0MTM5WjAYMRYwFAYD VQQDEw02ODBhYTIwNC1lMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3VLJGYDjQseeaQW23Fye9BwK8sesBpUvw3Ch0iSvkq8hnYtyShwCUGDzyif q+WdZ/BPo6fuaK5wQU1lmfPNl7UtfNWovPEMXUWPNYg1Hm1F4SJ1sQYBukg+uWN8 C9u4z4YFGOZ0N55m02deHbLAjoKKRbABqsU5g7khRAXM4NO26jmM6XQMUxpGEQlc eolUiAEAbjJ2aZp6WxRRvWhVc31I/cBiiEx58+qC9Z2FCuFkoPLU6/Kr80lZxnC1 6WSdqGRXrQ5dk6Hm7SQDZba9sG+Jkdy/S1lFxdSR0v37MYoJqnZcnLnoC1CgUEbr g4TCFomWTRtaqK+ruo/sWOdJgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvLFnoG oSVH6RPviHnRT47/LEMjMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+YKFSDDusSIHB19S28YzycLkdO+miTwXIBcVIJEQUfiUnumv3chcp 6+1AqNJt6Rq5d1s7bF6rh2/Qn54hTfPC1+N0yvcAEqK9b/mBWgv0TyXCe8q8c7ME Hv4RCtdyUNM6iqBCHYotsSpYNV/gbNKb9qYVfidAFA4ydga61AOD3lBjSEZwa4LN wfexkmkqoN0uehpNl0FsKS/nRAMRvNLhPe+SlGGolrKIrqjXSOnDiJyD0mHPq7hr xO3e2c2BN+A4l26cyocwdItB5L62aAHhKPEbfYtKtsSS/bX2SXPfs4fyKGZUKCO+ aKJgZthUhz38CdHiQ3SRe/51WMyiz4a6 -----END CERTIFICATE-----Generated at Sat Apr 26 05:48:06 2025 by rpki-client