$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: gwE5HcE5E95BiVwehCyFYzcxH3s88EbGZPvmcPbLnHw= Subject key identifier: 8F:E4:5C:08:F1:53:EA:E5:95:7E:82:00:9F:55:5A:C0:D6:01:7F:92 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 29 Signing time: Fri 25 Apr 2025 06:44:29 +0000 Manifest this update: Fri 25 Apr 2025 06:44:28 +0000 Manifest next update: Fri 02 May 2025 06:44:28 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: c9IUW5j+i2R3aAHakHlLbMbNwjhOL/3Pv/RcSGmx2AY=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: Apr 25 06:44:28 2025 GMT Not After : May 2 06:44:28 2025 GMT Subject: CN=680b2f4c-c2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:45:10:e3:01:96:2a:05:d1:3e:2f:9e:0d: d3:f3:e3:c5:6c:70:62:04:31:d9:e3:e0:eb:f2:6b: 5a:a9:ca:48:cf:8d:11:06:23:07:fe:31:2d:75:86: 62:06:cf:b0:c9:94:15:fa:6a:cf:ed:f7:60:e8:da: 1f:1e:44:7c:33:d5:ee:d0:7f:c0:55:cc:8e:a7:ac: ad:e9:4f:bc:d5:d5:19:d8:b7:e7:1a:91:f2:62:69: dd:29:71:d1:a8:9a:47:a6:f7:ab:4b:e2:db:39:25: c4:28:06:b9:a5:87:dc:6b:32:1e:94:27:74:1e:0e: 16:39:a5:87:26:50:cc:07:6f:47:cb:c1:de:cb:41: 4f:52:3a:ec:4f:3e:7d:31:da:c2:ac:58:f7:50:a1: 78:35:1b:8d:1e:b9:4d:0a:1f:25:5e:fe:ac:60:91: 65:f9:64:63:aa:d6:ea:96:f0:b3:e7:7e:4e:91:3b: bc:3e:d0:12:b3:18:aa:d1:fa:c7:81:12:0e:60:68: 68:7e:f4:ef:fd:7f:b2:fd:24:56:1a:60:59:45:9e: 61:7f:78:fe:5e:c7:01:7b:c5:c1:5f:09:b7:43:fe: db:fe:f6:cb:67:33:02:80:ef:17:a8:50:e0:87:c1: 38:7c:31:b2:2d:d8:ff:77:cb:f9:bc:b0:12:82:d3: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:5C:08:F1:53:EA:E5:95:7E:82:00:9F:55:5A:C0:D6:01:7F:92 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:3e:27:4e:75:8d:12:e8:5c:33:fe:de:09:9c:e5:c4:5f:50: f4:39:93:8a:b0:8c:3f:f3:2f:7a:82:51:ac:f2:90:37:a5:cd: d6:23:ef:f5:f8:26:47:dc:c4:06:bc:1f:3e:74:78:fe:de:55: 34:8c:84:a8:b6:a8:e2:1d:48:a7:72:4e:40:26:ac:fb:9e:8b: 2f:e2:a0:01:2e:8b:de:87:92:f7:c9:ab:57:83:d2:38:ee:63: 8d:62:45:97:03:b9:15:4e:25:06:c7:84:55:41:ce:71:e7:29: dc:3a:11:a6:b8:07:22:3f:64:04:68:76:eb:da:46:4b:63:f4: 3e:00:11:a9:17:30:45:cd:30:f0:ab:b1:20:7e:81:c1:6e:e9: 9a:83:c6:55:8e:43:d8:89:5b:24:0c:50:3c:bf:fc:ee:a3:55: f8:7b:06:0e:7b:ed:1f:86:fa:dc:b0:ff:5e:9f:97:21:9a:26: 97:99:47:93:4b:73:97:aa:52:d9:1d:c9:7e:2e:1b:d0:d0:c4: d8:48:b3:14:34:5a:e0:43:0e:3d:fd:a4:52:1a:c1:01:28:63: 89:94:06:d0:5d:a1:7d:e8:f8:2f:8b:00:54:09:87:d6:62:93: 81:c5:a2:4d:e9:94:c2:0e:64:fe:eb:f7:db:7f:f7:8d:22:ec: 19:6d:5a:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA0MjUwNjQ0MjhaFw0yNTA1MDIwNjQ0MjhaMBgxFjAUBgNV BAMTDTY4MGIyZjRjLWMyYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLxkUQ4wGWKgXRPi+eDdPz48VscGIEMdnj4Ovya1qpykjPjREGIwf+MS11hmIG z7DJlBX6as/t92Do2h8eRHwz1e7Qf8BVzI6nrK3pT7zV1RnYt+cakfJiad0pcdGo mkem96tL4ts5JcQoBrmlh9xrMh6UJ3QeDhY5pYcmUMwHb0fLwd7LQU9SOuxPPn0x 2sKsWPdQoXg1G40euU0KHyVe/qxgkWX5ZGOq1uqW8LPnfk6RO7w+0BKzGKrR+seB Eg5gaGh+9O/9f7L9JFYaYFlFnmF/eP5exwF7xcFfCbdD/tv+9stnMwKA7xeoUOCH wTh8MbIt2P93y/m8sBKC0/8pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj+RcCPFT 6uWVfoIAn1VawNYBf5IwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEU+J051jRLoXDP+3gmc5cRfUPQ5k4qwjD/zL3qCUazykDelzdYj7/X4 JkfcxAa8Hz50eP7eVTSMhKi2qOIdSKdyTkAmrPueiy/ioAEui96HkvfJq1eD0jju Y41iRZcDuRVOJQbHhFVBznHnKdw6Eaa4ByI/ZARoduvaRktj9D4AEakXMEXNMPCr sSB+gcFu6ZqDxlWOQ9iJWyQMUDy//O6jVfh7Bg577R+G+tyw/16flyGaJpeZR5NL c5eqUtkdyX4uG9DQxNhIsxQ0WuBDDj39pFIawQEoY4mUBtBdoX3o+C+LAFQJh9Zi k4HFok3plMIOZP7r99t/940i7BltWu0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:27 2025 by rpki-client