$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: QnodHRO8aKDwzZK2OzOph3Ua96wSc+7WQmauGxjywrs= Subject key identifier: EB:10:E2:06:21:CD:5C:77:4A:32:E4:73:0C:EF:35:80:F7:58:64:30 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 01DA Signing time: Fri 25 Apr 2025 01:55:19 +0000 Manifest this update: Fri 25 Apr 2025 01:55:18 +0000 Manifest next update: Fri 02 May 2025 01:55:18 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: cKLl+loVbvhdLyiJkGsJNVS3KC8zSfDXUXCYXHtPMHE=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Apr 25 01:55:18 2025 GMT Not After : May 2 01:55:18 2025 GMT Subject: CN=680aeb86-1f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:6c:89:cb:3e:6f:66:e3:c3:dd:2f:0f:d6: 16:a5:7d:6e:e1:22:41:1b:dd:24:90:6f:ae:2d:a1: 54:af:b9:5b:3a:06:43:84:77:7d:4d:8b:0e:b4:69: 31:e7:ef:91:25:3c:d8:e3:dc:f2:8d:6b:04:62:69: 2c:0a:ce:d5:ce:6e:e5:31:af:58:4a:23:a0:69:29: 59:8c:46:fd:2b:62:89:75:11:52:30:b9:01:88:9a: 72:e3:bf:42:66:20:b4:92:4c:47:2c:e7:c9:1f:98: cd:27:f1:e2:ac:6b:6d:9e:e7:d6:8f:05:4b:05:96: 3c:fc:4e:50:16:0e:9f:da:99:16:2f:15:44:b9:ae: 64:6d:77:d5:58:2d:a4:f0:4b:83:ee:3f:a3:07:0a: 2c:f1:98:96:fc:2e:e3:5f:fe:32:51:72:61:2a:3d: 67:c0:29:ba:0c:a9:70:97:89:f4:e4:14:c1:3b:c8: fd:ff:d3:02:8a:a2:9d:48:09:6d:80:21:7e:f3:b9: 1d:23:b6:f8:9f:b7:5d:0c:62:0e:06:a6:50:d7:8f: b5:91:f7:a4:d7:ee:08:84:1e:39:a2:0b:02:54:29: 57:a7:06:2a:1b:88:d7:13:d8:75:c3:9e:85:bd:da: 54:8b:d8:d4:f0:36:c0:cf:03:fd:96:e0:62:e3:98: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:10:E2:06:21:CD:5C:77:4A:32:E4:73:0C:EF:35:80:F7:58:64:30 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:4f:28:a8:fe:87:ca:61:b5:e3:ea:04:1c:1d:dd:c8:aa: a9:df:c8:e3:61:82:87:9d:e4:f6:64:df:37:d3:58:9c:be:22: 61:6e:d3:f5:ae:00:26:16:3b:b6:f0:b8:67:09:55:89:7a:b7: c0:7f:ac:25:bd:ae:d2:53:9d:6b:d9:5f:72:23:cd:0a:63:6c: 7a:a5:b5:83:21:87:06:bb:de:9e:5e:6e:c0:24:bb:b7:b5:6f: 6d:4e:6c:32:c4:af:5a:32:14:6f:0d:b1:18:9a:80:c9:64:13: c7:6b:91:23:46:30:ba:74:c7:c7:18:ba:29:46:58:8b:be:ea: dc:1c:fc:8f:90:5c:8f:48:76:18:39:46:6c:4c:f4:81:fb:0d: 8e:b6:da:5d:6c:38:5f:49:9d:1d:6a:97:c6:53:24:cc:0b:7c: ec:9b:3d:ee:a4:89:64:dc:60:57:b4:4a:d1:11:e7:44:c1:51: 2f:cf:85:8c:20:f5:96:e4:b3:47:10:ed:62:95:8b:a9:b0:fb: d7:3a:15:ed:02:53:c3:52:96:66:ad:76:d3:6f:1c:cc:f1:c9: 45:e7:c4:47:a7:3a:ab:24:ba:61:34:a5:e9:6c:c8:50:3a:56: 4f:aa:c9:f3:87:ac:62:e0:42:c3:bc:81:dc:1b:2d:67:71:f1: df:07:7c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwNDI1MDE1NTE4WhcNMjUwNTAyMDE1NTE4WjAYMRYwFAYD VQQDEw02ODBhZWI4Ni0xZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WZsics+b2bjw90vD9YWpX1u4SJBG90kkG+uLaFUr7lbOgZDhHd9TYsOtGkx 5++RJTzY49zyjWsEYmksCs7Vzm7lMa9YSiOgaSlZjEb9K2KJdRFSMLkBiJpy479C ZiC0kkxHLOfJH5jNJ/HirGttnufWjwVLBZY8/E5QFg6f2pkWLxVEua5kbXfVWC2k 8EuD7j+jBwos8ZiW/C7jX/4yUXJhKj1nwCm6DKlwl4n05BTBO8j9/9MCiqKdSAlt gCF+87kdI7b4n7ddDGIOBqZQ14+1kfek1+4IhB45ogsCVClXpwYqG4jXE9h1w56F vdpUi9jU8DbAzwP9luBi45jqwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsQ4gYh zVx3SjLkcwzvNYD3WGQwMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0808oqP6HymG14+oEHB3dyKqp38jjYYKHneT2ZN8301icviJhbtP1 rgAmFju28LhnCVWJerfAf6wlva7SU51r2V9yI80KY2x6pbWDIYcGu96eXm7AJLu3 tW9tTmwyxK9aMhRvDbEYmoDJZBPHa5EjRjC6dMfHGLopRliLvurcHPyPkFyPSHYY OUZsTPSB+w2OttpdbDhfSZ0dapfGUyTMC3zsmz3upIlk3GBXtErREedEwVEvz4WM IPWW5LNHEO1ilYupsPvXOhXtAlPDUpZmrXbTbxzM8clF58RHpzqrJLphNKXpbMhQ OlZPqsnzh6xi4ELDvIHcGy1ncfHfB3wf -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:07 2025 by rpki-client