$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: u89dwWxKI+FPiqvM53OVu4wvfz5GXeEAGW7ke2lDG28= Subject key identifier: BC:C6:77:C2:97:73:3E:5F:66:62:62:A9:A1:29:25:92:4F:3C:89:F3 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 12B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 12A1 Signing time: Thu 24 Apr 2025 17:05:41 +0000 Manifest this update: Thu 24 Apr 2025 17:05:40 +0000 Manifest next update: Thu 01 May 2025 17:05:40 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: Q+KI0RWnN9BogIBpyJvVXx68VK7tlXwLpXgITnJytaY=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4791 (0x12b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Apr 24 17:05:40 2025 GMT Not After : May 1 17:05:40 2025 GMT Subject: CN=680a6f64-78de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:25:52:5d:c9:a4:89:35:23:36:37:8b:5f: 2e:8e:cd:42:50:23:a8:4f:58:82:0e:ae:e3:06:43: df:6e:b1:6a:2f:82:49:f4:eb:8f:56:d8:56:c8:98: 09:62:8f:e3:62:dd:47:5d:7f:fe:b4:e9:08:ea:30: 1f:34:1f:ea:c0:d0:c2:ea:57:21:40:6b:6c:89:9e: 21:ff:c0:5f:70:f9:16:a6:f7:63:31:c9:87:94:6f: 57:08:c3:e2:89:6c:ad:a5:2f:d0:ee:63:bb:6b:53: ab:04:0d:5a:a6:cf:d6:4b:a3:43:17:12:c7:8e:b6: bf:03:ec:a3:86:3b:62:fb:67:7f:3c:3b:4e:73:5f: f0:8b:f4:a0:1c:c8:60:f6:a6:4f:02:83:f9:90:67: 2e:72:a1:9b:c9:3d:a5:98:33:6a:5d:2c:24:20:df: 99:9e:24:5b:d7:32:a5:d7:23:fd:73:b1:97:72:1c: af:46:f1:a7:08:61:1c:14:e5:b2:2e:34:25:f4:80: 6f:d5:08:9a:5d:11:a9:37:27:ba:91:63:c6:47:6c: 25:cf:96:99:7b:8e:c1:4f:8a:e7:07:e1:c1:2b:55: 80:31:79:81:a5:ee:d6:0a:1c:2e:17:41:6c:eb:e7: 6f:35:10:bf:49:a3:25:83:34:6e:75:f2:b3:05:a1: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C6:77:C2:97:73:3E:5F:66:62:62:A9:A1:29:25:92:4F:3C:89:F3 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:ae:57:0e:00:3a:18:bf:e7:27:78:50:9f:61:74:c0:3a: c3:5c:c6:82:14:e2:ec:06:5a:d5:fe:a6:45:cb:bf:8c:3c:ae: 36:8c:78:ec:d7:32:a8:48:32:b8:3e:1d:9d:02:9f:56:11:4b: 3a:70:1f:d7:8e:5d:32:f7:dc:14:56:68:f9:99:ab:13:7b:8d: 31:d2:7b:33:7d:6a:36:ba:c8:0b:5b:a0:2b:0f:98:67:43:0b: cc:82:a8:76:11:48:11:36:7d:9f:79:e7:c2:07:d3:ee:1e:04: d2:3c:63:ba:2b:ad:bd:be:bf:e1:9d:20:46:d9:56:af:82:ba: b7:92:9a:39:8f:3c:d2:6a:43:88:3b:9c:a7:86:3c:4b:19:9b: 0f:1b:e8:08:76:ae:9a:73:5c:ed:bb:36:04:4f:f0:01:8b:f9: fa:ba:f7:c2:8e:55:3a:70:07:1e:6f:d4:5d:1f:b2:e4:88:b1: c7:c9:44:98:b4:d3:85:06:9b:f4:ca:ee:e6:cc:df:e7:bc:a5: 85:7f:03:fb:4a:54:03:b2:6c:1c:c5:a2:3f:f7:cc:84:2f:d4: d6:4c:21:88:e4:f9:85:8e:c3:ba:01:ae:2b:d5:14:ca:f1:4c: c9:98:5f:0d:a4:ac:80:e9:5a:3d:e9:e7:e9:a9:d9:a0:9a:6c: 27:fa:ba:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUwNDI0MTcwNTQwWhcNMjUwNTAxMTcwNTQwWjAYMRYwFAYD VQQDEw02ODBhNmY2NC03OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSIlUl3JpIk1IzY3i18ujs1CUCOoT1iCDq7jBkPfbrFqL4JJ9OuPVthWyJgJ Yo/jYt1HXX/+tOkI6jAfNB/qwNDC6lchQGtsiZ4h/8BfcPkWpvdjMcmHlG9XCMPi iWytpS/Q7mO7a1OrBA1aps/WS6NDFxLHjra/A+yjhjti+2d/PDtOc1/wi/SgHMhg 9qZPAoP5kGcucqGbyT2lmDNqXSwkIN+ZniRb1zKl1yP9c7GXchyvRvGnCGEcFOWy LjQl9IBv1QiaXRGpNye6kWPGR2wlz5aZe47BT4rnB+HBK1WAMXmBpe7WChwuF0Fs 6+dvNRC/SaMlgzRudfKzBaHXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzGd8KX cz5fZmJiqaEpJZJPPInzMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqp65XDgA6GL/nJ3hQn2F0wDrDXMaCFOLsBlrV/qZFy7+MPK42jHjs 1zKoSDK4Ph2dAp9WEUs6cB/Xjl0y99wUVmj5masTe40x0nszfWo2usgLW6ArD5hn QwvMgqh2EUgRNn2feefCB9PuHgTSPGO6K629vr/hnSBG2Vavgrq3kpo5jzzSakOI O5ynhjxLGZsPG+gIdq6ac1ztuzYET/ABi/n6uvfCjlU6cAceb9RdH7LkiLHHyUSY tNOFBpv0yu7mzN/nvKWFfwP7SlQDsmwcxaI/98yEL9TWTCGI5PmFjsO6Aa4r1RTK 8UzJmF8NpKyA6Vo96efpqdmgmmwn+roc -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:44 2025 by rpki-client