$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json) Hash identifier: ZXeCOKyMGTu6IvSLksZjagdKnk9b5hN8cId34ehiLb8= Subject key identifier: 33:D7:C2:01:29:E3:35:73:46:56:BA:FF:BE:F6:DD:DA:C5:23:63:16 Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft Manifest number: 3A Signing time: Fri 13 Jun 2025 06:27:41 +0000 Manifest this update: Fri 13 Jun 2025 06:27:41 +0000 Manifest next update: Fri 20 Jun 2025 06:27:41 +0000 Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: 3lBe45XGsz3vuF22QrgE6dtfM5IkJES1usD38xPAtlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Validity Not Before: Jun 13 06:27:41 2025 GMT Not After : Jun 20 06:27:41 2025 GMT Subject: CN=684bc4dd-0075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:f9:14:2c:27:aa:10:56:50:8c:ef:6c:e5: 42:97:fb:8c:4e:1b:c4:d1:66:33:07:3a:37:4e:ed: 13:76:5b:35:45:dc:ae:74:36:b8:14:31:f6:b9:69: 07:97:86:e7:e1:70:f8:d5:65:1e:bf:48:1e:b8:08: 97:24:4f:2a:a7:2b:53:60:6b:8d:2d:9c:5b:67:e1: 6f:73:78:43:d6:17:fd:13:7a:d9:b7:47:61:1d:93: 91:2e:7a:f1:b9:ef:e7:57:fe:4d:6f:13:2f:ba:9f: 74:b3:94:fd:af:14:7b:1f:1c:62:aa:13:76:c2:48: 18:bb:96:31:0b:f0:a7:19:86:f5:58:f5:f4:e3:67: 45:b0:49:41:9b:1d:0e:95:42:ec:bc:00:a4:a9:64: ec:12:a6:6c:99:bb:e5:bb:65:bb:7d:a5:a3:e1:81: 42:70:93:f5:4b:70:2b:42:c5:a8:fd:0a:90:17:e9: ad:35:88:da:66:91:e2:65:e3:f1:d0:47:aa:f1:8e: de:10:b9:e1:25:3e:2d:9f:10:06:3e:a7:68:f6:0d: 38:dc:ea:0e:2c:06:00:1c:57:70:47:83:4d:d4:43: dd:64:bf:6b:97:4e:1d:33:74:c8:26:8d:db:22:fb: d4:c3:71:60:17:0f:21:d3:2c:9d:77:24:ed:a3:59: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D7:C2:01:29:E3:35:73:46:56:BA:FF:BE:F6:DD:DA:C5:23:63:16 X509v3 Authority Key Identifier: keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e2:65:7b:71:f6:4d:89:3b:5e:2a:f1:e2:c3:81:1e:f3:2b: b4:51:2d:8b:ba:d2:57:67:33:1f:d0:9b:75:26:40:b5:a4:9c: 20:a8:80:0d:95:f8:53:6d:ab:37:f7:a6:e1:2b:b2:ec:5e:de: 8b:45:5f:21:ae:b4:a6:ac:40:68:45:6e:5a:8a:31:ad:26:d1: b1:e6:77:7f:11:db:d9:99:b6:8d:c5:72:0a:a9:ae:f3:ef:f7: ac:f0:cd:be:8b:56:64:a5:4e:0f:77:48:3e:e8:08:16:9b:aa: 24:2d:97:b0:bf:f6:96:11:b0:9a:84:b3:34:37:c6:94:3a:72: 47:51:07:cb:94:83:af:95:e7:99:3b:1f:e4:ce:87:28:d0:a3: c3:5b:ce:52:34:e8:ce:be:e2:ba:e0:20:72:16:90:f8:51:80: 69:39:b5:a2:a8:43:e5:51:e7:ac:3f:33:06:63:0c:1d:8a:3d: da:fd:82:c5:6a:09:e3:79:f7:94:57:0f:a6:9f:42:4b:08:9a: 62:f6:eb:46:74:58:60:2c:6b:30:8f:a3:61:69:2c:d0:77:b4: d1:cf:d9:0f:50:9f:3f:b5:5b:03:73:0b:d1:da:6a:15:80:aa: 50:0d:f3:26:1c:f7:b6:3d:12:78:d8:d2:86:70:da:91:a4:e1: 53:8a:d3:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4 Qzg2ODg3NzAeFw0yNTA2MTMwNjI3NDFaFw0yNTA2MjAwNjI3NDFaMBgxFjAUBgNV BAMTDTY4NGJjNGRkLTAwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0m/kULCeqEFZQjO9s5UKX+4xOG8TRZjMHOjdO7RN2WzVF3K50NrgUMfa5aQeX hufhcPjVZR6/SB64CJckTyqnK1Nga40tnFtn4W9zeEPWF/0Tetm3R2Edk5EuevG5 7+dX/k1vEy+6n3SzlP2vFHsfHGKqE3bCSBi7ljEL8KcZhvVY9fTjZ0WwSUGbHQ6V Quy8AKSpZOwSpmyZu+W7Zbt9paPhgUJwk/VLcCtCxaj9CpAX6a01iNpmkeJl4/HQ R6rxjt4QueElPi2fEAY+p2j2DTjc6g4sBgAcV3BHg03UQ91kv2uXTh0zdMgmjdsi +9TDcWAXDyHTLJ13JO2jWc2FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM9fCASnj NXNGVrr/vvbd2sUjYxYwHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfiZXtx9k2JO14q8eLDgR7zK7RRLYu60ldnMx/Qm3UmQLWknCCogA2V +FNtqzf3puErsuxe3otFXyGutKasQGhFblqKMa0m0bHmd38R29mZto3FcgqprvPv 96zwzb6LVmSlTg93SD7oCBabqiQtl7C/9pYRsJqEszQ3xpQ6ckdRB8uUg6+V55k7 H+TOhyjQo8NbzlI06M6+4rrgIHIWkPhRgGk5taKoQ+VR56w/MwZjDB2KPdr9gsVq CeN595RXD6afQksImmL260Z0WGAsazCPo2FpLNB3tNHP2Q9Qnz+1WwNzC9HaahWA qlAN8yYc97Y9EnjY0oZw2pGk4VOK0zY= -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:47 2025 by rpki-client