$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: uEqw6U73/ANwo6RR1rCDNEw1lV169DHlGFsAd96YGOQ= Subject key identifier: 03:03:52:5A:02:2D:8C:74:57:2C:1E:04:BD:C5:F2:B0:AC:A8:E7:B3 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 0823 Signing time: Thu 24 Apr 2025 20:40:43 +0000 Manifest this update: Thu 24 Apr 2025 20:40:43 +0000 Manifest next update: Thu 01 May 2025 20:40:43 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: 5O+okOj5GF0ra45pmL6p2EqEOHwM5QNC1VAFDuYVzis=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Apr 24 20:40:43 2025 GMT Not After : May 1 20:40:43 2025 GMT Subject: CN=680aa1cb-5296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:2d:bd:1d:93:63:de:c5:d7:b3:05:28:22: 9f:35:c0:18:c9:2b:35:ae:e0:73:4c:05:97:a0:c2: 67:39:75:ed:08:64:6d:b6:15:0c:b7:a0:8f:db:45: ef:34:de:71:1e:5b:42:36:06:0e:31:35:00:2e:d0: 83:25:84:8c:fd:66:bf:96:81:16:ad:94:d4:73:d7: d0:bc:20:ef:1d:ca:32:85:b5:da:09:c5:05:dd:ef: aa:e9:13:ca:05:22:15:0c:79:96:d6:00:e5:09:ba: 02:67:71:ef:b8:3c:39:71:fb:9b:55:28:81:1c:4e: 2b:be:a4:69:39:6f:a8:4b:bc:35:c2:e6:f4:e9:13: c8:e4:ee:f9:ed:f2:c7:71:17:d5:cc:b8:a9:5f:ad: 8e:70:d2:c2:00:1f:7b:06:77:53:13:4c:d7:69:f6: e9:da:1e:05:4d:29:d3:65:bd:74:35:37:93:54:50: fc:d1:b6:e2:90:03:f5:2e:a7:6e:f6:f0:7a:ae:34: e5:4a:0c:ec:b4:68:ee:08:74:f7:db:0b:58:72:49: f5:f1:a6:7c:75:a0:f4:bb:6b:9b:e9:36:c2:62:8b: 84:10:87:dd:29:a5:ef:a1:ad:4b:43:d8:8b:52:fc: f3:58:c4:9d:d2:f3:75:c7:93:1a:52:6f:3a:60:03: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:52:5A:02:2D:8C:74:57:2C:1E:04:BD:C5:F2:B0:AC:A8:E7:B3 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b5:20:d0:18:4a:67:5c:52:e9:66:5a:b6:18:db:21:a6:0c: fa:b9:81:2c:81:9f:e9:de:4c:2a:39:62:04:42:70:8a:13:a1: 56:88:ed:92:0c:ab:09:4e:cf:71:8e:42:e2:a9:af:ce:46:8f: 48:90:ef:42:0e:14:5b:ac:ef:c2:f0:df:b4:3c:53:80:9a:4a: ce:a0:b0:ed:a4:64:ae:9d:ed:f4:2d:93:0b:85:63:ed:23:77: 37:fb:12:a1:a4:4f:5f:12:6e:a5:b3:d6:cd:cf:44:7b:03:b9: c4:d1:fb:75:83:74:12:35:15:c4:df:eb:76:cf:09:64:74:c2: d6:75:fc:75:5a:bf:61:6b:fe:8a:01:c9:ce:eb:70:8c:64:9b: 5d:64:62:6e:29:28:12:bc:9d:97:77:b6:d8:44:92:4e:35:88: b4:50:f1:92:1b:51:e9:03:6e:ea:a4:6b:54:32:db:56:30:e6: 36:45:8f:44:c3:ce:aa:79:a4:9c:34:de:40:a2:a8:27:8f:20: 14:8f:9b:e6:a4:e5:22:7a:d5:4c:70:da:75:e6:87:eb:b1:cb: b8:98:53:e5:e3:aa:2e:ff:70:50:23:90:38:9b:f0:7b:2f:cd: 0c:2c:f3:95:02:29:36:ef:7d:ab:71:12:27:91:40:4d:12:c7: 49:e6:41:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjUwNDI0MjA0MDQzWhcNMjUwNTAxMjA0MDQzWjAYMRYwFAYD VQQDEw02ODBhYTFjYi01Mjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNUtvR2TY97F17MFKCKfNcAYySs1ruBzTAWXoMJnOXXtCGRtthUMt6CP20Xv NN5xHltCNgYOMTUALtCDJYSM/Wa/loEWrZTUc9fQvCDvHcoyhbXaCcUF3e+q6RPK BSIVDHmW1gDlCboCZ3HvuDw5cfubVSiBHE4rvqRpOW+oS7w1wub06RPI5O757fLH cRfVzLipX62OcNLCAB97BndTE0zXafbp2h4FTSnTZb10NTeTVFD80bbikAP1Lqdu 9vB6rjTlSgzstGjuCHT32wtYckn18aZ8daD0u2ub6TbCYouEEIfdKaXvoa1LQ9iL UvzzWMSd0vN1x5MaUm86YAOSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMDUloC LYx0VyweBL3F8rCsqOezMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjtSDQGEpnXFLpZlq2GNshpgz6uYEsgZ/p3kwqOWIEQnCKE6FWiO2S DKsJTs9xjkLiqa/ORo9IkO9CDhRbrO/C8N+0PFOAmkrOoLDtpGSune30LZMLhWPt I3c3+xKhpE9fEm6ls9bNz0R7A7nE0ft1g3QSNRXE3+t2zwlkdMLWdfx1Wr9ha/6K AcnO63CMZJtdZGJuKSgSvJ2Xd7bYRJJONYi0UPGSG1HpA27qpGtUMttWMOY2RY9E w86qeaScNN5AoqgnjyAUj5vmpOUietVMcNp15ofrscu4mFPl46ou/3BQI5A4m/B7 L80MLPOVAik2732rcRInkUBNEsdJ5kHo -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:45 2025 by rpki-client