$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: MAN3HAQUWf0zdaafy73NIvSLXP+ClHFv43B8NMySMwY= Subject key identifier: F9:E7:DA:71:91:58:8B:F9:73:A9:14:F7:D2:98:52:34:2C:27:9D:35 Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1EEF Signing time: Thu 24 Apr 2025 16:02:55 +0000 Manifest this update: Thu 24 Apr 2025 16:02:55 +0000 Manifest next update: Thu 01 May 2025 16:02:55 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: qqnFGzdAfl0gIQwgRbNmd3bCEaVBK2jhm1IXWZQ0vUA=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: N8CiTad7+YCKPe2opBHwCiq7VtSImphL9JYd7EN47KQ=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7939 (0x1f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: Apr 24 16:02:55 2025 GMT Not After : May 1 16:02:55 2025 GMT Subject: CN=680a60af-deae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:86:a7:17:f3:92:45:9e:fd:2a:97:25:fc: 1d:ec:13:6d:98:84:ea:25:13:c3:32:85:19:74:a5: 8c:33:60:6d:c0:a8:d4:fb:0e:3d:bb:7e:64:c4:32: 69:41:02:f3:e9:86:66:3e:29:89:0e:32:8f:45:27: 79:7d:db:f3:4f:17:68:f7:a5:7c:64:c4:14:00:65: 8b:dd:fd:11:0a:c7:f6:35:3d:03:1c:c5:75:81:12: 8b:7b:e9:93:cc:ea:d1:94:66:40:b4:30:6f:3a:af: d4:0a:0f:69:80:67:45:d4:f6:d0:af:ce:97:61:7e: 7e:b0:c5:fa:b3:b8:16:79:e6:49:ef:45:e6:52:cb: 12:4b:ed:ce:47:31:3b:1d:16:2a:66:46:76:c7:6b: f0:21:24:28:a1:e4:ef:27:d6:18:2b:a2:1a:b4:0a: 4c:2d:08:50:77:d4:6d:85:b7:28:8d:b3:42:ad:6e: f8:28:0d:53:6d:e5:41:ff:4d:fb:79:b3:f1:77:eb: 28:b8:02:54:95:1e:c3:8b:a2:d6:5c:ca:28:e2:e7: a1:e9:31:fb:f7:e8:0e:a8:6f:b4:1b:f8:d5:37:1a: 74:af:24:34:63:e5:37:98:37:75:a5:e9:21:80:a6: e8:80:6e:bc:fd:c8:7c:f9:f7:64:42:f2:c4:99:e5: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E7:DA:71:91:58:8B:F9:73:A9:14:F7:D2:98:52:34:2C:27:9D:35 X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:50:47:11:78:a2:af:a8:0d:33:d2:93:83:b5:87:07:60:66: b8:8b:27:17:15:00:ed:65:96:e4:f4:c2:2f:c6:00:82:72:dc: 93:de:6d:00:be:f2:99:d8:27:14:8c:21:52:09:cf:c2:20:04: 4b:06:ad:0e:eb:2c:44:0c:de:81:53:70:8b:20:0e:1e:34:86: e9:da:db:e3:8d:6c:da:bf:61:f7:58:4b:3d:6e:69:39:68:d7: 6b:03:64:16:b1:aa:11:0a:63:63:ae:78:f3:a0:4a:96:00:93: b3:21:4d:86:09:68:7b:43:b7:06:9a:21:f2:fd:94:32:89:29: a4:d8:2d:7d:28:d1:8d:28:b3:20:8e:3f:b5:f9:13:a0:b8:21: c1:8f:27:6d:6f:77:46:7f:a8:99:d1:fd:16:8e:f0:c3:b7:30: 2c:1d:f5:75:f1:ed:20:41:1c:b2:3d:ea:df:ba:ca:e3:49:a5: 1c:6a:6d:fe:cc:a3:a7:ea:7d:81:09:a0:60:bd:8a:c4:26:c3: de:fe:38:bf:77:09:ad:4e:b1:d5:c9:b1:63:41:b1:62:ff:c3: b5:84:d1:cf:17:13:61:48:cf:33:a9:c8:d1:51:e6:6d:dc:04: af:83:6a:59:a4:5d:53:80:c0:09:a1:18:cc:32:b8:68:01:7e: cf:d5:68:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjUwNDI0MTYwMjU1WhcNMjUwNTAxMTYwMjU1WjAYMRYwFAYD VQQDEw02ODBhNjBhZi1kZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5KGpxfzkkWe/SqXJfwd7BNtmITqJRPDMoUZdKWMM2BtwKjU+w49u35kxDJp QQLz6YZmPimJDjKPRSd5fdvzTxdo96V8ZMQUAGWL3f0RCsf2NT0DHMV1gRKLe+mT zOrRlGZAtDBvOq/UCg9pgGdF1PbQr86XYX5+sMX6s7gWeeZJ70XmUssSS+3ORzE7 HRYqZkZ2x2vwISQooeTvJ9YYK6IatApMLQhQd9RthbcojbNCrW74KA1TbeVB/037 ebPxd+souAJUlR7Di6LWXMoo4ueh6TH79+gOqG+0G/jVNxp0ryQ0Y+U3mDd1pekh gKbogG68/ch8+fdkQvLEmeWA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnn2nGR WIv5c6kU99KYUjQsJ501MB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvUEcReKKvqA0z0pODtYcHYGa4iycXFQDtZZbk9MIvxgCCctyT3m0A vvKZ2CcUjCFSCc/CIARLBq0O6yxEDN6BU3CLIA4eNIbp2tvjjWzav2H3WEs9bmk5 aNdrA2QWsaoRCmNjrnjzoEqWAJOzIU2GCWh7Q7cGmiHy/ZQyiSmk2C19KNGNKLMg jj+1+ROguCHBjydtb3dGf6iZ0f0WjvDDtzAsHfV18e0gQRyyPerfusrjSaUcam3+ zKOn6n2BCaBgvYrEJsPe/ji/dwmtTrHVybFjQbFi/8O1hNHPFxNhSM8zqcjRUeZt 3ASvg2pZpF1TgMAJoRjMMrhoAX7P1Wh4 -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:56 2025 by rpki-client