$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: Y0bpwnJL1952/ZcPN981COlDPkH9luCl6DQoquFoE68= Subject key identifier: 6E:E3:57:61:B3:60:CA:E6:B8:F5:AA:98:A6:15:5F:04:1C:61:C0:08 Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 03 Signing time: Fri 25 Apr 2025 07:12:10 +0000 Manifest this update: Fri 25 Apr 2025 07:12:10 +0000 Manifest next update: Fri 02 May 2025 07:12:10 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: ZdIplbqQcjHNANyaDcESgUTApza90T1aK0U/FCAes+c=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Apr 25 07:12:10 2025 GMT Not After : May 2 07:12:10 2025 GMT Subject: CN=680b35ca-01ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:9f:b0:22:da:34:dd:5a:0e:3f:8f:e7:f1: ba:1d:c8:9c:6c:3f:bf:74:25:cd:19:bf:01:11:7e: 76:dc:59:1a:2d:a1:99:64:12:50:ba:aa:4d:c1:d3: 8b:45:55:84:c5:a5:47:9a:76:9f:1c:54:30:87:38: e2:e1:c4:63:5c:a7:e1:ec:b6:31:34:46:60:cf:10: c5:4a:02:eb:cf:27:cf:d8:c3:5d:a4:1c:cc:56:f5: 07:f0:f5:18:74:50:a5:0e:33:29:9c:3b:d8:07:a8: 46:92:22:fe:44:9a:8a:08:5c:de:af:69:a4:b4:68: 82:d2:c5:d0:d2:8a:e6:0a:cb:e4:6e:4d:9b:4c:3a: 52:92:67:9c:65:30:83:e6:ef:ce:92:a7:99:4d:bb: ac:e9:28:78:e3:52:08:a8:2a:86:59:86:ca:eb:26: d8:f1:fa:a6:7a:91:a7:30:bc:79:90:f2:a2:ba:54: 2c:14:3a:87:13:2b:7d:1e:e1:26:ea:f7:59:9d:99: 80:19:2f:a1:cb:5f:44:d2:02:99:c1:dd:20:4b:c4: 47:93:5d:ea:ed:35:fd:eb:24:a8:d9:15:5e:26:19: d5:db:82:34:e4:22:2a:bd:ad:a9:15:28:c1:58:0e: 45:a3:93:67:00:a2:b2:bc:e1:04:a6:4a:d6:62:ca: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E3:57:61:B3:60:CA:E6:B8:F5:AA:98:A6:15:5F:04:1C:61:C0:08 X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:03:0d:1d:13:41:2d:cd:58:7f:53:38:c7:c5:55:b2:97:69: cb:6f:a1:8a:59:43:07:0d:79:7d:57:cd:8c:e9:ec:37:23:b0: df:9b:cc:ed:2c:68:b1:af:29:c1:14:f6:79:4a:01:0a:23:4e: 7d:c1:dd:83:c0:f1:04:27:45:35:76:13:17:a2:59:a7:90:84: 26:b9:ae:43:46:84:ea:84:8e:7d:01:4f:d4:39:c8:56:59:18: 8e:5d:56:51:c2:a8:76:a0:d8:6d:7b:2c:a8:8b:38:90:1b:2f: 32:74:16:d0:96:b9:b1:22:4f:18:c5:e6:89:29:a0:a4:29:18: 2e:fe:88:83:80:7a:17:9d:b1:47:2c:58:8e:59:3e:14:86:bf: 46:20:7c:31:c7:84:d9:b3:7b:5f:74:9c:61:41:7d:00:99:f1: c2:b1:a0:3d:63:3f:31:21:ce:27:03:d6:3e:8f:85:c8:c4:9c: ef:d9:d6:99:e0:e8:a6:9a:72:3d:04:aa:9e:f5:0d:be:e4:3c: 95:af:00:93:17:69:6c:a8:02:9f:33:70:ed:c0:33:da:19:d9: c5:4f:30:f5:65:40:41:99:a2:78:b8:a4:6e:4e:55:d3:bc:ec: b9:48:76:f6:03:0d:9d:fb:57:04:4c:1b:a4:09:2e:ec:be:21: 97:0e:54:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTA0MjUwNzEyMTBaFw0yNTA1MDIwNzEyMTBaMBgxFjAUBgNV BAMTDTY4MGIzNWNhLTAxZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7b5+wIto03VoOP4/n8bodyJxsP790Jc0ZvwERfnbcWRotoZlkElC6qk3B04tF VYTFpUeadp8cVDCHOOLhxGNcp+HstjE0RmDPEMVKAuvPJ8/Yw12kHMxW9Qfw9Rh0 UKUOMymcO9gHqEaSIv5EmooIXN6vaaS0aILSxdDSiuYKy+RuTZtMOlKSZ5xlMIPm 786Sp5lNu6zpKHjjUgioKoZZhsrrJtjx+qZ6kacwvHmQ8qK6VCwUOocTK30e4Sbq 91mdmYAZL6HLX0TSApnB3SBLxEeTXertNf3rJKjZFV4mGdXbgjTkIiq9rakVKMFY DkWjk2cAorK84QSmStZiylvFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbuNXYbNg yua49aqYphVfBBxhwAgwHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsDDR0TQS3NWH9TOMfFVbKXactvoYpZQwcNeX1XzYzp7DcjsN+bzO0s aLGvKcEU9nlKAQojTn3B3YPA8QQnRTV2ExeiWaeQhCa5rkNGhOqEjn0BT9Q5yFZZ GI5dVlHCqHag2G17LKiLOJAbLzJ0FtCWubEiTxjF5okpoKQpGC7+iIOAehedsUcs WI5ZPhSGv0YgfDHHhNmze190nGFBfQCZ8cKxoD1jPzEhzicD1j6PhcjEnO/Z1png 6Kaacj0Eqp71Db7kPJWvAJMXaWyoAp8zcO3AM9oZ2cVPMPVlQEGZoni4pG5OVdO8 7LlIdvYDDZ37VwRMG6QJLuy+IZcOVIw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:26 2025 by rpki-client