$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft File: G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json) Hash identifier: yP3Ic5W1POsHJ8rzeHVlmWvDDt+IclGrB9G9DCNmfz0= Subject key identifier: 76:F9:AC:B8:7F:97:94:A7:79:3E:DA:4A:2F:F8:2C:FE:84:DD:98:21 Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 Certificate issuer: /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft Manifest number: 1418 Signing time: Thu 24 Apr 2025 18:34:11 +0000 Manifest this update: Thu 24 Apr 2025 18:34:11 +0000 Manifest next update: Thu 01 May 2025 18:34:11 +0000 Files and hashes: 1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: CvImSrej4Z0/2pbwSCpgfRmviC8asdzZPRnJXSngAIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Validity Not Before: Apr 24 18:34:11 2025 GMT Not After : May 1 18:34:11 2025 GMT Subject: CN=680a8423-a846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:f4:9f:6f:fe:8b:a2:86:62:5d:a5:f9:04: b7:9c:17:89:27:ab:26:5b:10:fa:28:e3:41:cf:16: 57:fd:13:28:d1:8e:ee:fc:88:9c:e8:c2:1b:87:68: 0d:67:f1:b1:c7:28:42:d4:c7:63:dd:c2:f3:29:7f: 6d:c7:46:c3:81:5e:73:cd:04:ca:7b:5e:b8:25:11: 94:b3:a6:95:2d:62:b8:20:df:7b:da:c1:a2:95:16: 5f:bd:8b:6b:df:7c:62:af:e9:84:27:2e:47:8e:8a: 02:d4:63:eb:01:de:77:55:54:68:07:0a:e5:ef:b4: 61:19:23:1c:dd:53:74:7f:0f:e6:26:8b:5b:e1:98: 20:07:a3:72:61:3b:e5:9a:6e:a4:c2:33:aa:3a:db: 65:88:eb:c2:80:b3:c5:36:92:0e:89:41:aa:06:3a: 75:5e:ca:07:0f:09:d3:5d:fb:da:07:32:62:d1:12: dd:53:a2:86:48:d1:40:9a:42:8c:b2:c8:82:82:27: af:90:01:f9:59:64:1d:69:b0:dc:dc:fc:cc:b4:36: a1:05:73:5d:7c:08:94:f4:61:2d:cd:91:52:a3:05: 8c:45:d9:db:09:70:cb:b7:2b:d1:71:47:c8:70:26: 06:02:5e:2c:b7:c4:1d:84:d7:6e:54:75:68:60:af: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:AC:B8:7F:97:94:A7:79:3E:DA:4A:2F:F8:2C:FE:84:DD:98:21 X509v3 Authority Key Identifier: keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:29:d8:52:d2:b3:ab:a5:92:c2:6c:fd:8b:44:c5:4d:dd:1b: 27:39:0e:95:11:8d:33:1d:02:d2:c6:7c:20:3d:63:f4:ff:fc: 9f:85:2d:ec:9c:b5:73:d9:b5:c7:0f:b5:d0:90:e1:18:bf:4a: 33:47:d5:c1:1e:4c:bb:46:94:05:2c:72:d3:ca:e2:70:e2:5e: b8:94:c4:13:7d:e5:90:5d:3b:51:32:14:de:e1:69:cc:eb:e6: f5:2a:d0:fb:1e:b3:d1:6b:ef:02:0a:6b:3c:05:55:a6:69:36: 85:b2:6b:f6:b8:ba:f9:7d:46:28:e5:21:80:0a:b7:5f:c4:02: 18:cb:f5:7d:96:a2:81:d1:47:cd:7a:eb:85:bc:4a:8d:8f:94: 0f:9f:4f:c1:9f:b0:aa:60:0b:b1:5e:89:da:43:56:85:33:c0: d7:d0:03:dd:ff:0a:ea:c1:cd:9c:ce:9d:0d:5e:fd:92:65:7a: 8b:1d:d1:bc:e9:7e:c6:49:8d:26:d8:cf:d8:dd:b3:2d:08:8f: 0e:77:1e:15:f9:5e:81:48:57:c7:4b:84:e9:05:b1:eb:3d:8e: c8:94:6a:b5:90:50:06:cc:d4:1f:49:ae:36:84:d1:ef:82:4d: 35:97:b4:87:c3:c2:1d:60:ac:72:95:a1:83:54:3e:89:d2:2e: 4c:98:27:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND RjZBMDFBMzAwHhcNMjUwNDI0MTgzNDExWhcNMjUwNTAxMTgzNDExWjAYMRYwFAYD VQQDEw02ODBhODQyMy1hODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuv0n2/+i6KGYl2l+QS3nBeJJ6smWxD6KONBzxZX/RMo0Y7u/Iic6MIbh2gN Z/GxxyhC1Mdj3cLzKX9tx0bDgV5zzQTKe164JRGUs6aVLWK4IN972sGilRZfvYtr 33xir+mEJy5HjooC1GPrAd53VVRoBwrl77RhGSMc3VN0fw/mJotb4ZggB6NyYTvl mm6kwjOqOttliOvCgLPFNpIOiUGqBjp1XsoHDwnTXfvaBzJi0RLdU6KGSNFAmkKM ssiCgievkAH5WWQdabDc3PzMtDahBXNdfAiU9GEtzZFSowWMRdnbCXDLtyvRcUfI cCYGAl4st8QdhNduVHVoYK8XTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb5rLh/ l5SneT7aSi/4LP6E3ZghMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvKdhS0rOrpZLCbP2LRMVN3RsnOQ6VEY0zHQLSxnwgPWP0//yfhS3s nLVz2bXHD7XQkOEYv0ozR9XBHky7RpQFLHLTyuJw4l64lMQTfeWQXTtRMhTe4WnM 6+b1KtD7HrPRa+8CCms8BVWmaTaFsmv2uLr5fUYo5SGACrdfxAIYy/V9lqKB0UfN euuFvEqNj5QPn0/Bn7CqYAuxXonaQ1aFM8DX0APd/wrqwc2czp0NXv2SZXqLHdG8 6X7GSY0m2M/Y3bMtCI8Odx4V+V6BSFfHS4TpBbHrPY7IlGq1kFAGzNQfSa42hNHv gk01l7SHw8IdYKxylaGDVD6J0i5MmCdo -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:36 2025 by rpki-client