$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: xaKbEoiNeb2hdYvs13+sh/vk+Bt2yHBaAPXY4+1iSkQ= Subject key identifier: FC:AF:BF:E7:FE:F4:34:83:D9:A2:2A:A5:1F:2C:6F:69:6E:D9:86:A9 Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 061A Signing time: Thu 24 Apr 2025 22:34:03 +0000 Manifest this update: Thu 24 Apr 2025 22:34:02 +0000 Manifest next update: Thu 01 May 2025 22:34:02 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: Cg3XjNRkbtbW675e5yROmo7tQkXu8xBaKnwH5zbXGCQ=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: Apr 24 22:34:02 2025 GMT Not After : May 1 22:34:02 2025 GMT Subject: CN=680abc5b-709a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:3d:90:28:79:79:0a:0e:52:e1:37:6a:48: ec:b0:3e:68:b7:22:da:af:16:7d:76:be:e6:52:a8: 46:72:60:62:6e:d1:86:e6:50:b7:b0:18:d5:97:36: c1:c4:b5:5d:20:36:43:c9:35:64:6b:04:69:52:2c: b5:87:06:f4:dd:9f:ad:51:88:ab:a5:0c:12:61:d5: ae:61:58:c9:62:c4:66:a2:fb:8d:3e:3d:58:31:92: 07:79:9a:d9:eb:29:d6:23:38:bc:78:f0:3c:a8:35: 4e:ad:98:be:f0:92:95:4c:87:37:ea:37:99:9c:e4: 27:97:5e:d6:4c:93:21:13:5a:10:56:b4:07:b0:bd: 7c:b2:5e:0e:e1:fc:51:31:9a:f1:cd:3c:a1:5a:3d: d9:da:f3:27:84:2b:81:b9:b8:f9:be:5f:20:73:ed: 60:ae:98:db:6c:68:7f:41:14:23:55:d2:d2:e1:ab: e3:e1:47:1b:96:ed:27:70:d2:42:8f:c0:f6:1a:c9: 3f:3b:ae:6b:4a:e4:3f:2c:ae:ff:ba:ff:a5:26:b5: db:de:03:c2:cb:97:04:c3:ef:46:1c:b5:35:db:9e: 59:92:34:2f:f2:17:aa:ca:94:0d:73:42:ca:70:b9: 59:95:f2:56:34:0a:c1:e5:79:8d:7b:bd:b8:f2:14: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AF:BF:E7:FE:F4:34:83:D9:A2:2A:A5:1F:2C:6F:69:6E:D9:86:A9 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:5b:58:cd:15:df:88:c7:a9:13:16:92:fd:98:d2:63:fe: 26:fb:50:9a:73:47:7e:50:02:ae:6a:78:0e:8e:5d:c1:64:7e: 6a:e3:aa:40:9a:e2:64:30:27:16:0c:34:a6:77:02:b4:db:0d: 94:11:c0:5a:48:71:b4:ae:68:02:42:ab:d7:87:28:cc:61:be: ed:70:45:52:e5:83:a2:44:23:92:5c:5e:81:e5:ae:47:60:34: 02:3e:ca:d4:8e:de:87:23:e3:19:40:87:4a:64:a3:56:2c:8c: a0:45:19:a6:c3:be:e1:bf:2a:b2:62:42:dc:d9:35:dd:2b:05: a3:a5:ee:04:91:3b:f1:5d:6b:82:0a:98:77:12:f2:0a:89:a2: cb:6e:fb:4a:68:c8:76:1f:33:d0:17:ab:d7:2b:23:48:b5:5e: ac:57:cd:60:47:5b:f1:41:24:6c:28:89:18:f2:f5:f4:45:11: a0:fd:2e:66:a3:46:9d:87:15:3a:ab:05:57:67:7f:a9:d3:29: c0:8f:b2:6a:23:4e:83:a3:7e:2e:55:27:8d:fc:7b:f7:ad:89: 2e:a7:a5:50:91:ae:f4:ec:f8:d7:12:04:fa:90:e8:66:98:bc: 56:f5:97:f9:e8:37:d6:a0:ae:8c:d6:52:33:14:f4:1d:04:b3: 50:63:49:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUwNDI0MjIzNDAyWhcNMjUwNTAxMjIzNDAyWjAYMRYwFAYD VQQDEw02ODBhYmM1Yi03MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ89kCh5eQoOUuE3akjssD5otyLarxZ9dr7mUqhGcmBibtGG5lC3sBjVlzbB xLVdIDZDyTVkawRpUiy1hwb03Z+tUYirpQwSYdWuYVjJYsRmovuNPj1YMZIHeZrZ 6ynWIzi8ePA8qDVOrZi+8JKVTIc36jeZnOQnl17WTJMhE1oQVrQHsL18sl4O4fxR MZrxzTyhWj3Z2vMnhCuBubj5vl8gc+1grpjbbGh/QRQjVdLS4avj4Ucblu0ncNJC j8D2Gsk/O65rSuQ/LK7/uv+lJrXb3gPCy5cEw+9GHLU1255ZkjQv8heqypQNc0LK cLlZlfJWNArB5XmNe7248hQbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyvv+f+ 9DSD2aIqpR8sb2lu2YapMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/VtYzRXfiMepExaS/ZjSY/4m+1Cac0d+UAKuangOjl3BZH5q46pA muJkMCcWDDSmdwK02w2UEcBaSHG0rmgCQqvXhyjMYb7tcEVS5YOiRCOSXF6B5a5H YDQCPsrUjt6HI+MZQIdKZKNWLIygRRmmw77hvyqyYkLc2TXdKwWjpe4EkTvxXWuC Cph3EvIKiaLLbvtKaMh2HzPQF6vXKyNItV6sV81gR1vxQSRsKIkY8vX0RRGg/S5m o0adhxU6qwVXZ3+p0ynAj7JqI06Do34uVSeN/Hv3rYkup6VQka707PjXEgT6kOhm mLxW9Zf56DfWoK6M1lIzFPQdBLNQY0lC -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:31 2025 by rpki-client