$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: OkXXyEdGecxr1ZijgOE2xG5TSt3g1zV7eTdxjeakwQE= Subject key identifier: A5:70:A2:36:FA:00:04:D1:45:61:A3:40:1F:64:E0:CF:32:C5:E4:86 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 01E3 Signing time: Fri 25 Apr 2025 01:52:41 +0000 Manifest this update: Fri 25 Apr 2025 01:52:41 +0000 Manifest next update: Fri 02 May 2025 01:52:41 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: GLwahYnA42ISIjiV/1bV3ZMUOQI+o1nxlnO+29ayLlc=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Apr 25 01:52:41 2025 GMT Not After : May 2 01:52:41 2025 GMT Subject: CN=680aeae9-e141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:a9:46:69:53:5e:ac:fc:34:8a:32:36:cf: 76:26:df:71:6b:84:94:7c:de:82:c4:3f:79:ec:17: 01:22:7d:33:ff:91:d4:30:a9:0c:a8:0d:eb:e0:70: 94:cc:47:5a:6f:c1:77:fb:49:54:04:fc:56:c7:eb: fe:00:03:6e:9f:b8:72:dd:57:45:fd:15:3d:3a:90: 6f:21:8e:fc:d8:4a:1b:63:5b:2a:5c:01:77:f3:c0: de:df:3e:54:4f:78:18:b9:77:20:ca:2c:e9:15:a8: 80:e2:19:cb:42:dd:f9:f9:9a:61:dc:a2:ab:98:94: 5c:35:4e:6e:c2:2c:3a:86:7f:03:62:58:1b:e9:da: fa:81:97:9c:06:52:76:08:9f:f7:36:a1:4b:95:2c: e5:b5:eb:7e:d1:12:1b:0d:91:97:98:ad:6a:33:5d: 73:17:a2:a6:bd:38:78:be:b7:63:3e:a2:99:7a:51: 77:c8:08:2f:18:01:ed:eb:68:87:de:6a:cd:a2:34: 39:6f:02:5c:4a:e8:02:3c:f0:82:ad:1e:c8:e1:a2: b3:22:63:8f:b9:07:9c:47:dc:42:40:a2:a4:a8:c3: 43:b1:cf:d1:c0:28:12:9a:97:90:8c:77:af:79:5e: 7a:70:29:9b:12:8e:d7:18:fb:eb:5d:75:cc:b7:f6: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:A2:36:FA:00:04:D1:45:61:A3:40:1F:64:E0:CF:32:C5:E4:86 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:80:f1:d5:1a:bf:43:6c:82:48:8b:9f:ee:d0:89:82:e3:88: dc:da:7d:c8:8b:13:55:39:65:e9:6d:03:0b:50:7b:4e:a9:25: 01:b6:d6:28:dc:91:9a:cd:b2:22:3d:c3:b8:d7:b9:26:59:ae: fe:f5:34:e6:5a:7c:9b:48:07:c2:ec:ba:ca:0e:8f:ba:1b:fb: 2b:bd:e9:be:90:68:5a:eb:fa:c7:d7:b0:95:ff:18:5c:81:e7: 0e:49:21:56:e3:d9:2d:e1:91:2d:6f:61:9b:d3:f8:da:ee:46: cb:4a:ee:eb:58:d4:3a:6b:40:17:5b:4e:b8:65:87:88:39:58: 46:8e:89:e6:2e:fa:14:36:ff:75:b9:ab:d0:f6:65:91:3f:52: 79:8b:96:2d:96:4c:ce:4e:7e:7f:af:0e:db:3f:d5:ad:b7:78: e8:df:1a:26:25:e6:18:2e:53:78:54:9a:14:da:0f:16:b1:a4: da:bc:d0:d4:85:b2:7c:4c:08:a6:29:f9:f4:cb:53:c0:13:97: 5b:d6:f1:85:a9:08:2b:cf:56:53:63:e5:c1:60:93:02:ba:d8: 0b:b0:07:5b:dd:4e:7b:28:d1:44:e3:86:1f:90:cd:35:d8:cb: 63:68:35:12:96:9d:ce:c6:76:9e:aa:62:10:1b:b8:19:64:15: b9:51:3d:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwNDI1MDE1MjQxWhcNMjUwNTAyMDE1MjQxWjAYMRYwFAYD VQQDEw02ODBhZWFlOS1lMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfOpRmlTXqz8NIoyNs92Jt9xa4SUfN6CxD957BcBIn0z/5HUMKkMqA3r4HCU zEdab8F3+0lUBPxWx+v+AANun7hy3VdF/RU9OpBvIY782EobY1sqXAF388De3z5U T3gYuXcgyizpFaiA4hnLQt35+Zph3KKrmJRcNU5uwiw6hn8DYlgb6dr6gZecBlJ2 CJ/3NqFLlSzltet+0RIbDZGXmK1qM11zF6KmvTh4vrdjPqKZelF3yAgvGAHt62iH 3mrNojQ5bwJcSugCPPCCrR7I4aKzImOPuQecR9xCQKKkqMNDsc/RwCgSmpeQjHev eV56cCmbEo7XGPvrXXXMt/ZbDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVwojb6 AATRRWGjQB9k4M8yxeSGMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcgPHVGr9DbIJIi5/u0ImC44jc2n3IixNVOWXpbQMLUHtOqSUBttYo 3JGazbIiPcO417kmWa7+9TTmWnybSAfC7LrKDo+6G/srvem+kGha6/rH17CV/xhc gecOSSFW49kt4ZEtb2Gb0/ja7kbLSu7rWNQ6a0AXW064ZYeIOVhGjonmLvoUNv91 uavQ9mWRP1J5i5YtlkzOTn5/rw7bP9Wtt3jo3xomJeYYLlN4VJoU2g8WsaTavNDU hbJ8TAimKfn0y1PAE5db1vGFqQgrz1ZTY+XBYJMCutgLsAdb3U57KNFE44YfkM01 2MtjaDUSlp3OxnaeqmIQG7gZZBW5UT0u -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:49 2025 by rpki-client