$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 2OTw2pVXZwdnawNy5Zb62J00lAa0ud7IPp0xZe1NeYo= Subject key identifier: BC:54:CB:8C:D1:ED:A4:A8:13:60:81:A9:E9:84:F1:03:E5:80:F8:04 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C0C Signing time: Thu 24 Apr 2025 18:35:29 +0000 Manifest this update: Thu 24 Apr 2025 18:35:29 +0000 Manifest next update: Thu 01 May 2025 18:35:29 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: mDwY0FMFYYxuIzZuqDZPqcA+M7FKMy6tIPsyZJ4yt+0=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Apr 24 18:35:29 2025 GMT Not After : May 1 18:35:29 2025 GMT Subject: CN=680a8471-7ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:c6:3f:2b:eb:25:b0:3e:8d:9c:66:01:d6: 5a:e0:45:79:12:31:dd:a9:5b:e2:53:93:9f:ff:ba: e7:c1:26:76:57:c6:4c:9b:52:54:ef:68:ff:4d:ed: 8e:1a:d9:59:37:ff:6b:80:f7:4d:cb:b5:ec:e5:fb: a1:fe:17:f7:37:e8:5e:1e:21:33:2b:2b:7c:2c:61: f5:40:f3:36:39:7c:76:4d:62:3a:53:66:b7:ef:16: 62:67:34:da:62:bf:8d:3e:0a:94:f9:a0:b3:ad:63: c9:c5:d8:87:75:78:2d:6b:4f:1b:17:3f:36:e5:45: ec:e0:5b:2f:48:2d:54:74:5a:81:f9:2b:0a:fe:7f: 4f:84:5c:7d:7c:ce:05:ae:7b:bc:af:e8:c2:4d:95: f5:f7:3e:ec:47:59:0f:d8:ff:7d:7c:76:90:e4:0e: a7:f4:19:a2:ed:cd:21:5e:cc:6a:b2:8f:f0:e4:64: 81:61:f1:27:dd:ce:cf:6a:ca:9a:af:43:3e:71:0f: f3:ae:87:69:15:53:4c:6b:14:10:4a:df:24:b4:c2: 33:10:e5:9f:18:17:ad:5b:f8:9c:40:c1:14:91:a0: 64:01:39:d3:23:8e:48:8d:f1:bf:bc:d2:76:3b:8d: 54:11:c7:9c:03:3a:b0:56:00:30:fb:15:66:dd:9e: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:54:CB:8C:D1:ED:A4:A8:13:60:81:A9:E9:84:F1:03:E5:80:F8:04 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:30:bd:72:37:5f:08:3b:68:fb:6b:49:88:10:ea:10:d0:6f: 4d:28:50:20:ba:38:83:80:ca:30:8d:d4:d7:f1:8f:e6:02:a0: fc:ee:9f:a2:c4:f9:cc:18:d8:9a:52:6b:e4:02:f1:98:77:ed: 99:a3:e1:3b:88:56:b1:35:3c:2b:32:b5:b9:56:cf:e7:e8:7d: 67:27:ad:87:2a:19:36:85:a1:e8:b6:6c:1e:e9:5e:e3:0e:93: 70:b2:43:5f:0e:d0:8f:66:59:37:6b:a8:27:26:18:78:8e:32: 55:de:4b:51:30:86:3f:54:7f:d6:9f:5d:ad:7d:6a:2b:54:87: 3b:16:c2:b4:fd:16:52:55:a1:ea:d2:3f:b6:d1:7d:35:bf:cf: 72:f8:4a:0f:9e:84:30:d7:a8:e1:66:ff:8b:4d:a9:db:2b:c0: ec:d9:c6:7d:c3:84:c8:de:cd:ab:2a:e1:5b:62:fe:28:e2:80: 5a:3e:e1:95:6b:03:68:f6:ba:66:dd:3b:57:66:cc:9e:af:ef: 7b:4f:33:7d:4e:0f:ea:d0:74:2c:29:0a:99:de:94:2b:9d:36: 68:3a:e5:01:7f:d1:bf:64:c2:8e:fd:55:f4:90:33:53:d6:85: f7:2f:a6:40:df:64:1b:ed:ac:84:8e:7c:eb:6f:50:0a:4c:da: 57:ef:88:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwNDI0MTgzNTI5WhcNMjUwNTAxMTgzNTI5WjAYMRYwFAYD VQQDEw02ODBhODQ3MS03ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB7GPyvrJbA+jZxmAdZa4EV5EjHdqVviU5Of/7rnwSZ2V8ZMm1JU72j/Te2O GtlZN/9rgPdNy7Xs5fuh/hf3N+heHiEzKyt8LGH1QPM2OXx2TWI6U2a37xZiZzTa Yr+NPgqU+aCzrWPJxdiHdXgta08bFz825UXs4FsvSC1UdFqB+SsK/n9PhFx9fM4F rnu8r+jCTZX19z7sR1kP2P99fHaQ5A6n9Bmi7c0hXsxqso/w5GSBYfEn3c7Pasqa r0M+cQ/zrodpFVNMaxQQSt8ktMIzEOWfGBetW/icQMEUkaBkATnTI45IjfG/vNJ2 O41UEcecAzqwVgAw+xVm3Z7kfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxUy4zR 7aSoE2CBqemE8QPlgPgEMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGML1yN18IO2j7a0mIEOoQ0G9NKFAgujiDgMowjdTX8Y/mAqD87p+i xPnMGNiaUmvkAvGYd+2Zo+E7iFaxNTwrMrW5Vs/n6H1nJ62HKhk2haHotmwe6V7j DpNwskNfDtCPZlk3a6gnJhh4jjJV3ktRMIY/VH/Wn12tfWorVIc7FsK0/RZSVaHq 0j+20X01v89y+EoPnoQw16jhZv+LTanbK8Ds2cZ9w4TI3s2rKuFbYv4o4oBaPuGV awNo9rpm3TtXZsyer+97TzN9Tg/q0HQsKQqZ3pQrnTZoOuUBf9G/ZMKO/VX0kDNT 1oX3L6ZA32Qb7ayEjnzrb1AKTNpX74gV -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:44 2025 by rpki-client