$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: DfEVPZ6QiC1fMNBb1q+9EPQS9Sy2DwJLVGQzUPIvg3g= Subject key identifier: 1D:20:CA:1B:D2:2A:3F:36:01:4E:AE:19:F0:07:42:B6:AD:A9:19:AA Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0301 Signing time: Fri 25 Apr 2025 01:01:41 +0000 Manifest this update: Fri 25 Apr 2025 01:01:40 +0000 Manifest next update: Fri 02 May 2025 01:01:40 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: rx48hI+kUePT+YrVHjg9Glq1hcZtDXiojv/IvSSA/dE=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Apr 25 01:01:40 2025 GMT Not After : May 2 01:01:40 2025 GMT Subject: CN=680adef4-984e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:c0:76:10:0d:cc:87:45:14:d7:2b:3a:94: e2:dc:0b:de:bd:03:28:cf:63:b8:6e:b2:41:c9:8d: 9f:51:03:fc:f0:35:df:cf:9c:c8:68:e9:a3:06:d9: 09:0f:dd:40:ae:ec:a6:34:00:8e:1a:1e:ab:df:c0: 3a:c4:f9:72:fe:fd:31:2e:ab:cc:6b:3c:69:6e:91: 4c:bf:12:d9:6f:c1:6b:f2:ea:80:95:8c:b5:f3:8b: 64:70:3b:72:c6:d3:f6:92:6b:c8:9c:57:8f:18:a0: 40:bc:b9:a3:b0:4f:35:73:cb:ac:2f:c2:83:25:2c: 72:7c:09:ab:dd:27:c6:4f:e3:83:bb:33:4c:19:b9: 71:4d:40:b6:b9:05:2b:b4:77:b3:0b:ca:4c:df:c6: 43:a3:cf:ed:36:ae:f5:a6:28:f9:c5:56:02:26:3d: ef:d8:f8:e9:54:20:9a:fd:54:78:a9:12:38:47:14: c1:4c:ef:0f:09:42:3a:d1:4c:89:90:f8:13:44:8c: 01:2c:55:e1:71:8f:18:ca:bb:15:e3:be:ac:d7:dd: f4:8d:1e:a5:20:29:3d:42:ef:d6:5d:ba:5f:19:b5: cd:1f:f8:76:2b:22:b1:07:d9:0d:76:06:00:fd:27: 40:86:ea:21:b0:43:6d:27:91:f9:88:90:cc:5b:51: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:20:CA:1B:D2:2A:3F:36:01:4E:AE:19:F0:07:42:B6:AD:A9:19:AA X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:f8:3f:04:6d:c1:8d:26:fa:6d:70:73:ab:41:72:ff:a8: c0:44:c8:fa:d4:d9:6c:7a:35:3a:f1:ca:66:47:2f:61:1f:5c: 60:ff:a3:6a:1d:09:84:c9:1b:c2:46:37:62:1f:3b:5f:86:c0: c1:a9:d8:ac:71:cd:4a:ca:c0:71:77:83:cc:1b:20:2c:ae:c1: 46:08:25:af:b7:ac:0d:9b:da:b9:30:e3:95:6d:09:cf:be:a2: e2:21:8c:ab:ef:31:e7:f9:3e:14:66:b0:9d:95:94:51:0f:e0: 73:42:db:5a:6e:1e:38:c8:b8:aa:99:7f:b1:04:53:b2:b4:df: 78:cc:38:14:52:bf:56:0b:3e:46:eb:cc:bb:1a:3a:0d:03:29: d2:ef:1e:23:10:b7:4b:04:5a:19:24:c3:32:75:a6:81:38:71: ba:54:ba:77:58:7c:76:87:a4:32:c2:68:7a:b0:25:40:67:23: 2c:13:f2:8b:39:e5:01:dd:cf:2d:d6:70:05:d9:0a:51:8a:64: ab:1d:fd:c6:eb:21:40:13:b1:f6:db:26:61:26:13:c2:1a:7f: 88:1a:3e:6f:2e:a4:da:d8:d8:01:c6:40:ea:ed:52:da:d7:d7: 55:49:f5:e6:bd:ab:05:10:bc:19:68:c5:65:54:f5:2d:c1:63: b9:0f:4b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNDI1MDEwMTQwWhcNMjUwNTAyMDEwMTQwWjAYMRYwFAYD VQQDEw02ODBhZGVmNC05ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscrAdhANzIdFFNcrOpTi3AvevQMoz2O4brJByY2fUQP88DXfz5zIaOmjBtkJ D91AruymNACOGh6r38A6xPly/v0xLqvMazxpbpFMvxLZb8Fr8uqAlYy184tkcDty xtP2kmvInFePGKBAvLmjsE81c8usL8KDJSxyfAmr3SfGT+ODuzNMGblxTUC2uQUr tHezC8pM38ZDo8/tNq71pij5xVYCJj3v2PjpVCCa/VR4qRI4RxTBTO8PCUI60UyJ kPgTRIwBLFXhcY8YyrsV476s1930jR6lICk9Qu/WXbpfGbXNH/h2KyKxB9kNdgYA /SdAhuohsENtJ5H5iJDMW1GoRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0gyhvS Kj82AU6uGfAHQratqRmqMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx1/g/BG3BjSb6bXBzq0Fy/6jARMj61NlsejU68cpmRy9hH1xg/6Nq HQmEyRvCRjdiHztfhsDBqdiscc1KysBxd4PMGyAsrsFGCCWvt6wNm9q5MOOVbQnP vqLiIYyr7zHn+T4UZrCdlZRRD+BzQttabh44yLiqmX+xBFOytN94zDgUUr9WCz5G 68y7GjoNAynS7x4jELdLBFoZJMMydaaBOHG6VLp3WHx2h6Qywmh6sCVAZyMsE/KL OeUB3c8t1nAF2QpRimSrHf3G6yFAE7H22yZhJhPCGn+IGj5vLqTa2NgBxkDq7VLa 19dVSfXmvasFELwZaMVlVPUtwWO5D0sD -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:40 2025 by rpki-client