$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft File: GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json) Hash identifier: YMKTzdTcbGEplBPfEoFXhNMBQdHnDBLb5IR9rI8w4gg= Subject key identifier: 8D:F0:BC:FA:66:ED:D8:6C:25:F8:59:5E:83:00:47:61:E1:E6:84:F5 Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft Manifest number: 0760 Signing time: Thu 24 Apr 2025 21:22:41 +0000 Manifest this update: Thu 24 Apr 2025 21:22:41 +0000 Manifest next update: Thu 01 May 2025 21:22:41 +0000 Files and hashes: 1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: iQ64pCh4iVRf+XGggbFeghYwk4qqFDXEvTI/TeMGsB0=) 2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: Fp1TJ1Mbd3VWESMXXvk8el1Q1QgoDrJME4tHr7SUS8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Validity Not Before: Apr 24 21:22:41 2025 GMT Not After : May 1 21:22:41 2025 GMT Subject: CN=680aaba1-7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:42:0d:3e:b2:2d:ce:f6:46:3a:98:0a:b8: 21:2c:02:c3:ef:15:fb:15:43:94:35:44:35:84:9e: 6b:af:41:e9:f4:c1:8c:be:c3:80:a9:30:5b:38:80: 9d:05:b1:0e:51:e4:3b:6b:ef:d5:4a:7c:e1:da:25: 1e:9a:6d:8a:b5:80:4c:91:24:c7:fc:81:5e:14:36: 7c:9f:54:d2:fd:71:56:ee:6a:81:6e:77:ee:7f:10: 30:1c:17:10:b0:07:85:aa:1c:7d:3e:f9:7a:8a:43: fc:18:32:dd:0a:6f:d2:a6:e5:b9:5a:9a:d3:66:5d: 3f:ea:7e:db:1b:9a:c9:64:89:b6:c3:4f:ff:34:33: 68:31:bc:1f:f0:4c:5d:98:3c:f5:fb:ae:10:dd:86: 01:14:69:b3:eb:41:a6:d9:fd:06:ad:76:ce:13:27: 06:25:ef:2a:a9:b0:2c:f2:79:57:7f:48:28:f4:82: 5b:43:09:a9:5d:1e:11:67:e2:c2:99:cc:18:97:02: ce:f4:df:eb:84:22:d5:9a:55:d9:57:6d:92:ac:52: 7f:79:66:b3:2f:e9:d0:cb:eb:eb:e5:3e:0b:f3:28: b0:99:81:7c:18:ed:e9:65:0f:b8:00:f8:90:17:90: 93:c6:ed:66:b8:f5:7f:52:ec:b8:f4:c6:7f:b1:c4: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F0:BC:FA:66:ED:D8:6C:25:F8:59:5E:83:00:47:61:E1:E6:84:F5 X509v3 Authority Key Identifier: keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:14:7b:8c:a8:ca:96:21:59:cd:bc:52:a9:46:09:0a:3b:ca: fb:64:2f:59:13:c8:bc:c1:7e:20:8c:7d:4c:38:5a:1f:2c:81: cf:b7:17:74:00:da:7c:0c:df:2b:2a:d0:f7:53:72:e3:21:df: f6:15:72:e5:f8:89:4e:a2:d4:dd:83:6c:fb:98:06:47:13:24: b7:f6:c7:f4:69:3f:24:fd:46:56:aa:b5:82:b8:02:b3:06:67: 67:72:70:9e:18:7f:ee:de:6b:00:16:a6:e1:cf:82:b5:e4:39: 85:68:41:0f:fb:55:83:ea:6a:51:86:bf:fc:50:0b:d8:6c:12: a0:1c:a6:56:3e:d5:fc:35:40:30:9f:65:9a:81:ca:39:fa:66: be:18:1f:01:65:54:fd:24:90:85:8e:30:ce:a8:1e:25:96:57: f6:a5:25:66:9a:b3:3c:cb:e8:40:1f:c2:a8:4a:68:25:66:7a: f9:24:31:44:44:d8:70:6d:cd:07:42:b1:9f:bb:9f:25:52:4b: 8c:dc:87:73:6f:06:aa:d9:7b:ae:61:9e:e1:07:80:1c:7c:91: e2:c0:8e:9d:6b:45:88:09:16:50:c5:9f:ce:94:bf:01:2d:df: 77:f6:c8:67:e4:37:25:73:34:a5:26:58:82:55:23:47:d4:4b: f7:09:6a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF Njc0MkYyMjEwHhcNMjUwNDI0MjEyMjQxWhcNMjUwNTAxMjEyMjQxWjAYMRYwFAYD VQQDEw02ODBhYWJhMS03NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhZCDT6yLc72RjqYCrghLALD7xX7FUOUNUQ1hJ5rr0Hp9MGMvsOAqTBbOICd BbEOUeQ7a+/VSnzh2iUemm2KtYBMkSTH/IFeFDZ8n1TS/XFW7mqBbnfufxAwHBcQ sAeFqhx9Pvl6ikP8GDLdCm/SpuW5WprTZl0/6n7bG5rJZIm2w0//NDNoMbwf8Exd mDz1+64Q3YYBFGmz60Gm2f0GrXbOEycGJe8qqbAs8nlXf0go9IJbQwmpXR4RZ+LC mcwYlwLO9N/rhCLVmlXZV22SrFJ/eWazL+nQy+vr5T4L8yiwmYF8GO3pZQ+4APiQ F5CTxu1muPV/Uuy49MZ/scQTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3wvPpm 7dhsJfhZXoMAR2Hh5oT1MB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4 MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RC8xOERDNTc0MjE4MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdM NEtkdHpheVpKcmJtZEM4aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuFHuMqMqWIVnNvFKpRgkKO8r7ZC9ZE8i8wX4gjH1MOFofLIHPtxd0 ANp8DN8rKtD3U3LjId/2FXLl+IlOotTdg2z7mAZHEyS39sf0aT8k/UZWqrWCuAKz BmdncnCeGH/u3msAFqbhz4K15DmFaEEP+1WD6mpRhr/8UAvYbBKgHKZWPtX8NUAw n2Wagco5+ma+GB8BZVT9JJCFjjDOqB4lllf2pSVmmrM8y+hAH8KoSmglZnr5JDFE RNhwbc0HQrGfu58lUkuM3Idzbwaq2XuuYZ7hB4AcfJHiwI6da0WICRZQxZ/OlL8B Ld939shn5DclczSlJliCVSNH1Ev3CWqE -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:29 2025 by rpki-client