$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json) Hash identifier: wFsB0+Gz+wK6FonJiwKQP36TPoGGgiNF8johsIMpAV0= Subject key identifier: 96:61:B3:E2:67:2E:EE:ED:6F:EE:A1:0A:FC:99:45:A5:6E:F9:61:AF Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft Manifest number: 22 Signing time: Fri 25 Apr 2025 06:49:47 +0000 Manifest this update: Fri 25 Apr 2025 06:49:46 +0000 Manifest next update: Fri 02 May 2025 06:49:46 +0000 Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: L+iuEfz6d6XxUAjhr3Jw1l8QxOhF8O8UZ6YzzlvKJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Validity Not Before: Apr 25 06:49:46 2025 GMT Not After : May 2 06:49:46 2025 GMT Subject: CN=680b308b-640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:6e:39:de:6d:1a:8b:a0:92:7c:dc:b1:73: 34:1d:bb:fd:b2:11:e4:25:bd:ce:f8:3c:8f:77:ed: 62:05:fa:fb:7f:00:89:10:b2:d6:9c:be:4a:8a:35: da:7d:8c:0f:3e:f0:9b:26:2f:69:9c:8c:b3:0b:6f: c9:b8:b1:46:d1:15:42:7a:84:52:84:3f:f9:85:09: ed:0b:d5:fc:e5:0b:82:22:6e:90:ff:fb:52:77:0f: c6:10:09:d2:44:d0:00:44:09:0e:25:85:c0:c1:6c: 13:86:96:b9:5a:f2:67:1a:49:f0:bc:df:fe:7a:18: 66:6c:34:b4:cf:9e:05:a9:25:e6:5d:1f:7f:d9:c2: 9f:ac:a1:f3:1a:43:04:6b:bd:e1:fd:a0:76:1a:35: fd:2d:9a:82:dd:c0:76:46:df:78:a0:ce:84:3f:e3: cf:9d:59:bd:4d:cf:14:58:f7:d2:82:88:87:6f:4b: 4e:d9:fb:81:9f:8e:52:31:05:de:69:a3:6c:5a:e7: cf:bd:70:03:84:db:b1:72:a1:a1:c6:1c:2c:cc:50: 25:fe:37:15:5a:15:eb:4b:67:06:38:ca:d6:b8:ac: 6a:db:da:93:55:4a:c6:d4:bd:4d:70:85:9d:ba:4b: 1b:45:8f:6a:87:25:35:fe:4c:90:22:86:77:38:3e: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:B3:E2:67:2E:EE:ED:6F:EE:A1:0A:FC:99:45:A5:6E:F9:61:AF X509v3 Authority Key Identifier: keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:17:5c:07:ab:79:25:6e:c4:8f:06:5e:a4:eb:63:79:86:43: 2d:57:99:97:48:02:c2:de:d9:7f:47:c4:60:dd:bb:21:37:52: c0:46:95:cb:88:b9:71:f7:2c:c5:bb:36:74:0f:49:da:74:79: 18:ab:e3:3f:b5:69:ac:97:3c:fd:0c:2d:8f:5c:29:d9:ff:8b: 3e:69:eb:37:a3:af:2c:74:68:ad:0a:0b:d9:85:a2:d3:40:5f: 66:03:d1:dd:c7:93:ac:ad:b5:53:25:14:66:ca:b8:be:5a:00: 1a:c7:40:c5:e6:6f:3e:35:ce:80:59:b7:2a:ee:44:70:4d:25: ce:a7:6d:6b:1a:92:aa:e8:88:21:d1:c1:db:6d:0c:ea:4b:d7: f4:50:74:59:d7:1c:35:ca:a0:1b:cc:60:ce:72:24:71:51:0d: 76:12:7c:6b:d6:89:d4:4e:ed:2c:c7:3b:76:c7:7c:5b:a3:25: 2b:1a:c5:35:36:a0:59:26:9f:9b:7f:a7:6b:ef:8f:af:fd:15: b6:43:2a:7d:36:d0:43:8a:b7:4e:08:ee:12:64:49:a7:8a:16: 78:d9:d2:de:99:b2:d9:ab:37:c0:ce:a5:dd:3e:25:a7:ed:d8: 45:83:f4:6e:66:f6:5a:46:57:49:40:67:aa:0a:fc:c8:32:44: 9e:21:52:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4 Qzg2ODg3NzAeFw0yNTA0MjUwNjQ5NDZaFw0yNTA1MDIwNjQ5NDZaMBgxFjAUBgNV BAMTDTY4MGIzMDhiLTY0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi3G453m0ai6CSfNyxczQdu/2yEeQlvc74PI937WIF+vt/AIkQstacvkqKNdp9 jA8+8JsmL2mcjLMLb8m4sUbRFUJ6hFKEP/mFCe0L1fzlC4IibpD/+1J3D8YQCdJE 0ABECQ4lhcDBbBOGlrla8mcaSfC83/56GGZsNLTPngWpJeZdH3/Zwp+sofMaQwRr veH9oHYaNf0tmoLdwHZG33igzoQ/48+dWb1NzxRY99KCiIdvS07Z+4GfjlIxBd5p o2xa58+9cAOE27FyoaHGHCzMUCX+NxVaFetLZwY4yta4rGrb2pNVSsbUvU1whZ26 SxtFj2qHJTX+TJAihnc4PvGXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlmGz4mcu 7u1v7qEK/JlFpW75Ya8wHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGIXXAereSVuxI8GXqTrY3mGQy1XmZdIAsLe2X9HxGDduyE3UsBGlcuI uXH3LMW7NnQPSdp0eRir4z+1aayXPP0MLY9cKdn/iz5p6zejryx0aK0KC9mFotNA X2YD0d3Hk6yttVMlFGbKuL5aABrHQMXmbz41zoBZtyruRHBNJc6nbWsakqroiCHR wdttDOpL1/RQdFnXHDXKoBvMYM5yJHFRDXYSfGvWidRO7SzHO3bHfFujJSsaxTU2 oFkmn5t/p2vvj6/9FbZDKn020EOKt04I7hJkSaeKFnjZ0t6ZstmrN8DOpd0+Jaft 2EWD9G5m9lpGV0lAZ6oK/MgyRJ4hUuU= -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:39 2025 by rpki-client