$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json) Hash identifier: wsL0MkeVH7OObWCwDbnWAlJiotR2dDKxQ7SVKRBMu/M= Subject key identifier: 5C:05:F7:66:57:67:20:2B:B1:6C:88:42:2D:83:40:77:EA:A4:6F:48 Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft Manifest number: 04A5 Signing time: Thu 24 Apr 2025 23:41:46 +0000 Manifest this update: Thu 24 Apr 2025 23:41:45 +0000 Manifest next update: Thu 01 May 2025 23:41:45 +0000 Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: m7kT1NyuACLgTpqvkUWH/bmt01zAb2njZ1qqq4zcurA=) 2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: en/5+Is2njNPEHjZ9D4KmksDt8McYOOkdTXWUEGbh1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Validity Not Before: Apr 24 23:41:45 2025 GMT Not After : May 1 23:41:45 2025 GMT Subject: CN=680acc3a-dfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:76:77:83:8b:39:c6:f9:54:8d:a2:7d:2d: 94:ca:a3:1f:77:47:c7:e5:38:51:ab:65:8f:fc:43: ba:bd:2a:c3:86:91:d4:95:36:2a:6e:67:67:7d:38: 80:2e:c0:79:8e:6e:e2:77:41:1c:af:a0:67:5c:89: 85:a7:11:6b:ee:bc:86:c6:98:94:85:38:a1:a6:a2: f7:a7:b6:52:0b:c8:e1:a7:9f:14:be:6c:7c:3d:ef: 0a:05:26:56:ab:46:80:65:cb:cc:7e:ce:4b:35:a5: 02:00:83:06:1d:70:3d:68:fb:9c:d6:94:67:59:90: 20:4f:b0:b0:36:c5:24:7c:96:12:23:02:ff:13:cf: 77:d3:6d:59:d2:45:ae:a1:29:72:04:6f:14:d4:cc: 14:2a:e4:b1:81:b2:58:84:0e:90:42:1d:28:cd:71: 68:d9:d9:85:49:5f:62:f7:fc:77:d2:37:d5:dc:43: a8:9f:31:b7:d3:2c:93:ed:a4:41:e0:cb:a1:fe:dd: e8:e1:54:41:87:73:65:39:80:d0:9b:ed:24:a0:c0: a0:87:b5:ab:4c:49:40:ac:d6:7f:1f:67:7f:d3:8f: db:ca:8b:fc:35:78:5a:67:e6:12:a9:31:02:90:b0: a5:2b:0e:64:ff:74:00:39:1c:a8:a3:fd:2e:84:5d: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:05:F7:66:57:67:20:2B:B1:6C:88:42:2D:83:40:77:EA:A4:6F:48 X509v3 Authority Key Identifier: keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:23:51:58:20:68:eb:49:2b:a5:92:80:09:c2:57:64:01:9f: da:47:c2:34:ff:1b:9f:cb:25:63:a4:1c:b2:c2:62:93:38:b3: 63:93:6a:56:9a:3f:34:18:b6:0d:08:1d:b3:f5:7f:ac:d9:7b: 0a:44:ec:a9:d4:f3:8a:5b:cf:e8:c1:6a:8f:0c:ac:b9:4e:20: c7:de:b3:d5:33:3c:82:23:81:89:83:fa:c7:15:83:33:2e:6d: e4:5a:a9:fc:a9:f6:bb:33:16:86:dc:65:d6:7d:29:26:c9:6b: 03:cc:d3:a5:72:cd:3f:cc:dd:18:48:e5:42:9d:29:b3:14:4f: f5:2d:d6:59:a6:cd:52:67:8e:3f:5c:8b:ab:ce:fd:a9:b1:50: 8a:d8:b6:62:9c:d7:b3:52:a0:a0:0b:39:4f:52:3c:00:b3:35: 61:eb:6b:75:15:d7:10:c7:4d:2b:01:f3:4d:ee:5b:f6:6f:a7: d5:ce:fe:c2:58:a9:34:7c:22:98:07:b5:b9:17:20:0a:5a:c0: c4:c7:40:51:6c:d2:e8:e2:3a:8a:8f:72:c1:26:fd:63:15:61: 70:c9:a0:92:69:9d:35:e0:94:e0:06:f4:70:49:7c:3a:df:70: 1d:39:04:33:99:43:2d:ad:56:1a:ef:ed:23:45:75:52:0b:c2: 20:4f:c5:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw MjU1OTYxNTYwHhcNMjUwNDI0MjM0MTQ1WhcNMjUwNTAxMjM0MTQ1WjAYMRYwFAYD VQQDEw02ODBhY2MzYS1kZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKx2d4OLOcb5VI2ifS2UyqMfd0fH5ThRq2WP/EO6vSrDhpHUlTYqbmdnfTiA LsB5jm7id0Ecr6BnXImFpxFr7ryGxpiUhTihpqL3p7ZSC8jhp58Uvmx8Pe8KBSZW q0aAZcvMfs5LNaUCAIMGHXA9aPuc1pRnWZAgT7CwNsUkfJYSIwL/E893021Z0kWu oSlyBG8U1MwUKuSxgbJYhA6QQh0ozXFo2dmFSV9i9/x30jfV3EOonzG30yyT7aRB 4Muh/t3o4VRBh3NlOYDQm+0koMCgh7WrTElArNZ/H2d/04/byov8NXhaZ+YSqTEC kLClKw5k/3QAORyoo/0uhF3mdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwF92ZX ZyArsWyIQi2DQHfqpG9IMB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkxQy9CQzI2M0E4RTJCRDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVD SVlxaV9IYjJGYlFDVlpZVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbI1FYIGjrSSulkoAJwldkAZ/aR8I0/xufyyVjpByywmKTOLNjk2pW mj80GLYNCB2z9X+s2XsKROyp1POKW8/owWqPDKy5TiDH3rPVMzyCI4GJg/rHFYMz Lm3kWqn8qfa7MxaG3GXWfSkmyWsDzNOlcs0/zN0YSOVCnSmzFE/1LdZZps1SZ44/ XIurzv2psVCK2LZinNezUqCgCzlPUjwAszVh62t1FdcQx00rAfNN7lv2b6fVzv7C WKk0fCKYB7W5FyAKWsDEx0BRbNLo4jqKj3LBJv1jFWFwyaCSaZ014JTgBvRwSXw6 33AdOQQzmUMtrVYa7+0jRXVSC8IgT8Up -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:10 2025 by rpki-client