$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: o0uAs6jsnrXBjcUWStkJelUe/Xk/8Ff/nN5sR+QvVgo= Subject key identifier: F6:EC:1C:27:90:A1:39:64:4C:8B:2D:19:5F:E8:77:23:DA:E0:FB:B2 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 3480 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 3480 Signing time: Fri 02 May 2025 14:21:46 +0000 Manifest this update: Fri 02 May 2025 14:21:45 +0000 Manifest next update: Fri 09 May 2025 14:21:45 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: w8WMh4NhQ10JP0u+3KJ2ZIrfFbl43X6NEz2F6A3C/t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 14:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13440 (0x3480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: May 2 14:21:45 2025 GMT Not After : May 9 14:21:45 2025 GMT Subject: CN=6814d4f9-91e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:32:14:a2:a4:5f:f9:6d:a1:01:0b:13:f6: b4:7c:06:2b:f5:5e:d7:92:af:3e:72:62:36:2a:d3: cd:a1:24:1e:ef:2e:01:eb:d3:d2:e2:2a:02:b9:f5: e2:7f:dc:51:79:77:32:76:7a:46:e9:5c:ff:d9:4e: 63:69:db:46:88:55:e0:d1:64:fa:4f:f8:40:3c:a9: 0a:78:0b:fe:b7:9d:c5:02:4e:6f:1e:54:3c:c2:63: f9:31:f8:52:c9:19:5c:1b:06:44:96:22:e9:17:82: b7:df:2b:8c:47:77:d3:33:11:a2:84:c8:ee:e4:55: f2:86:4f:fd:dc:fb:65:2a:ad:62:7e:f5:3e:2b:b8: ce:d7:15:79:e2:6c:8e:32:e5:4a:84:97:50:e2:ea: 91:8c:62:5f:ea:05:78:b4:f2:a2:d5:cd:dc:a1:b0: 31:d5:94:e6:c6:79:a1:89:cf:1a:ed:2b:18:47:fd: f9:e7:35:a1:9e:56:b3:0d:19:63:41:7f:0b:91:ca: 27:bc:12:3b:b2:55:75:d0:78:b2:e9:81:45:cd:7a: 7d:c5:59:40:b2:ba:5a:09:58:d0:40:fb:05:0c:46: 08:5d:04:30:2d:d0:b8:a5:46:da:f4:9c:e8:e3:5b: 1b:92:7b:f0:e4:83:df:48:a1:4b:a0:2f:b6:d6:23: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EC:1C:27:90:A1:39:64:4C:8B:2D:19:5F:E8:77:23:DA:E0:FB:B2 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:08:6f:74:81:39:08:f7:8c:0f:df:d1:2b:5d:bd:94:1a: de:c1:cd:3d:17:70:93:de:a2:ec:33:52:1c:95:cf:52:43:bf: 25:da:1a:aa:1c:2f:e7:d1:02:e3:73:52:c3:2a:8f:6d:84:98: 33:84:57:e3:e3:86:e5:6b:d2:06:ba:db:58:18:6c:0d:6d:0a: 51:85:c9:23:11:ea:c5:63:6e:5f:37:b4:d7:3f:74:cc:19:14: 81:1f:fc:e0:0a:1b:e2:51:36:d1:67:33:30:40:ad:bf:09:f2: ea:a5:a6:f4:3e:aa:77:1b:ff:26:ba:15:26:d1:61:fa:2f:42: da:18:31:3f:0f:1f:83:5c:ae:a0:5d:2b:46:6f:af:11:05:85: be:3e:a4:1f:62:09:67:ea:8f:5d:f0:cf:97:c7:5e:b6:81:60: 07:b9:ed:0d:4c:f5:66:c0:3f:36:db:3e:3a:c8:53:17:e5:44: ea:86:68:7a:31:a1:53:7e:7a:5b:5d:43:20:4e:16:2e:db:68: 9b:b4:b5:7d:45:96:56:bd:f6:2f:59:47:74:ca:5c:69:c5:2e: 62:d0:bb:86:7c:6f:ba:19:b9:ee:b6:73:9c:6f:78:1c:70:9c: 26:b8:58:45:1b:90:65:11:05:42:e0:e6:21:df:29:19:f3:f1: e9:9b:7a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUwNTAyMTQyMTQ1WhcNMjUwNTA5MTQyMTQ1WjAYMRYwFAYD VQQDEw02ODE0ZDRmOS05MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnIyFKKkX/ltoQELE/a0fAYr9V7Xkq8+cmI2KtPNoSQe7y4B69PS4ioCufXi f9xReXcydnpG6Vz/2U5jadtGiFXg0WT6T/hAPKkKeAv+t53FAk5vHlQ8wmP5MfhS yRlcGwZEliLpF4K33yuMR3fTMxGihMju5FXyhk/93PtlKq1ifvU+K7jO1xV54myO MuVKhJdQ4uqRjGJf6gV4tPKi1c3cobAx1ZTmxnmhic8a7SsYR/355zWhnlazDRlj QX8LkconvBI7slV10Hiy6YFFzXp9xVlAsrpaCVjQQPsFDEYIXQQwLdC4pUba9Jzo 41sbknvw5IPfSKFLoC+21iPFLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbsHCeQ oTlkTIstGV/odyPa4PuyMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ1whvdIE5CPeMD9/RK129lBrewc09F3CT3qLsM1Iclc9SQ78l2hqq HC/n0QLjc1LDKo9thJgzhFfj44bla9IGuttYGGwNbQpRhckjEerFY25fN7TXP3TM GRSBH/zgChviUTbRZzMwQK2/CfLqpab0Pqp3G/8muhUm0WH6L0LaGDE/Dx+DXK6g XStGb68RBYW+PqQfYgln6o9d8M+Xx162gWAHue0NTPVmwD822z46yFMX5UTqhmh6 MaFTfnpbXUMgThYu22ibtLV9RZZWvfYvWUd0ylxpxS5i0LuGfG+6GbnutnOcb3gc cJwmuFhFG5BlEQVC4OYh3ykZ8/Hpm3qc -----END CERTIFICATE-----Generated at Sat May 3 02:23:40 2025 by rpki-client