$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: OnynJ/NP2EWikX7wwnLGfkgw8UO6nNIxJM3CnaE5LRU= Subject key identifier: E1:27:20:BA:37:09:1E:72:20:A3:1F:57:E0:90:5F:E9:9F:E0:A6:B8 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: E5 Signing time: Fri 25 Apr 2025 04:28:35 +0000 Manifest this update: Fri 25 Apr 2025 04:28:34 +0000 Manifest next update: Fri 02 May 2025 04:28:34 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: tQuyHDTSZXOkq0vkjZFQ4iIT5YtmwJRMDePBAFbY2w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Apr 25 04:28:34 2025 GMT Not After : May 2 04:28:34 2025 GMT Subject: CN=680b0f73-c996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:d8:bf:cb:c2:72:f1:8b:dc:6e:38:79:99: dd:5e:e8:f5:56:73:9f:ce:32:fe:93:72:5d:39:43: ca:2c:2a:1f:e2:5c:9e:d0:14:08:c2:22:c5:72:7d: cb:06:d6:ac:fe:5e:b8:c9:da:9f:ec:5d:b9:81:39: 47:0f:c1:ce:9c:d6:0f:a9:b0:70:9e:3b:21:3e:65: 46:d0:e8:10:32:08:26:91:cd:df:8c:c0:40:6a:29: 5b:8a:7d:01:30:3b:c5:e7:95:bb:93:7d:79:98:35: 73:b1:12:98:e9:3a:0b:75:c6:f9:cb:57:95:dd:0d: 78:a1:49:15:8c:e8:34:d9:b0:56:ea:70:56:4d:1c: d4:a3:57:f0:72:20:51:31:8c:6e:f6:96:1a:25:61: c5:6e:90:10:30:d1:b7:88:00:66:c1:da:9c:30:bc: 0d:ec:3c:18:f5:44:22:2f:07:b2:bc:8e:33:ad:fb: f9:3c:be:6e:9d:5c:c9:93:e8:dc:09:78:0b:52:9f: 1c:18:33:fa:5f:82:59:8e:02:a0:7f:39:91:95:da: e7:78:6c:28:4a:90:51:de:df:42:ef:59:f0:b7:12: 98:86:2c:92:ed:48:ea:2e:67:f7:e5:34:07:96:15: 86:06:d4:88:bd:9b:5c:b2:22:f5:b0:bb:87:64:1f: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:20:BA:37:09:1E:72:20:A3:1F:57:E0:90:5F:E9:9F:E0:A6:B8 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:4b:c4:07:08:4a:a9:e4:06:73:8e:b2:82:99:9d:70:12:bc: 9a:a6:1a:3b:fb:88:52:5d:b0:09:10:13:c0:a7:2f:1f:16:8e: 21:43:3a:c3:5f:4a:86:e0:33:93:df:97:19:55:83:68:fd:43: 0b:35:91:8e:35:16:22:24:03:40:f9:48:2d:c5:ae:ca:25:80: 83:f2:76:01:2c:ca:e1:45:b9:a8:ab:df:80:83:8f:58:5d:25: a2:99:a6:22:40:a1:1d:dd:5a:3d:35:ad:5a:6a:8d:04:0c:1e: c7:1a:c0:9e:1b:df:90:a3:35:b9:44:a7:5d:08:f5:c7:0d:93: ea:d2:b7:02:ed:86:52:9b:43:1f:a3:6f:6b:21:a6:a0:9e:e0: cd:f8:a7:8a:5e:1a:fe:91:1e:5b:4d:a9:e2:6f:48:2f:e0:6e: 47:68:52:15:52:1d:20:da:10:58:06:4e:ae:7a:ef:c3:f7:41: 75:6b:ac:cf:b3:60:ad:73:36:1a:59:a7:29:08:47:41:22:eb: 4d:df:e4:84:5d:f7:1e:8f:dc:1e:15:6e:10:47:83:09:6a:4e: 84:6a:de:19:c3:99:33:3e:f3:7e:c2:60:14:e8:fd:22:cd:f7: 64:cb:1d:35:0b:5c:77:1e:8e:1c:77:42:da:5b:cc:6f:79:42: c7:e6:60:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUwNDI1MDQyODM0WhcNMjUwNTAyMDQyODM0WjAYMRYwFAYD VQQDEw02ODBiMGY3My1jOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIXYv8vCcvGL3G44eZndXuj1VnOfzjL+k3JdOUPKLCof4lye0BQIwiLFcn3L Btas/l64ydqf7F25gTlHD8HOnNYPqbBwnjshPmVG0OgQMggmkc3fjMBAailbin0B MDvF55W7k315mDVzsRKY6ToLdcb5y1eV3Q14oUkVjOg02bBW6nBWTRzUo1fwciBR MYxu9pYaJWHFbpAQMNG3iABmwdqcMLwN7DwY9UQiLweyvI4zrfv5PL5unVzJk+jc CXgLUp8cGDP6X4JZjgKgfzmRldrneGwoSpBR3t9C71nwtxKYhiyS7UjqLmf35TQH lhWGBtSIvZtcsiL1sLuHZB8W6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEnILo3 CR5yIKMfV+CQX+mf4Ka4MB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyS8QHCEqp5AZzjrKCmZ1wEryapho7+4hSXbAJEBPApy8fFo4hQzrD X0qG4DOT35cZVYNo/UMLNZGONRYiJANA+Ugtxa7KJYCD8nYBLMrhRbmoq9+Ag49Y XSWimaYiQKEd3Vo9Na1aao0EDB7HGsCeG9+QozW5RKddCPXHDZPq0rcC7YZSm0Mf o29rIaagnuDN+KeKXhr+kR5bTanib0gv4G5HaFIVUh0g2hBYBk6ueu/D90F1a6zP s2CtczYaWacpCEdBIutN3+SEXfcej9weFW4QR4MJak6Eat4Zw5kzPvN+wmAU6P0i zfdkyx01C1x3Ho4cd0LaW8xveULH5mDq -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:58 2025 by rpki-client