$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: bY9EWxee/Xsd5SMeR7L5tmPS50LRlkSOJ41G3QfqzAE= Subject key identifier: 56:AC:61:1A:51:21:C7:90:D0:08:AB:BC:AC:0D:75:A6:7A:F3:50:95 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03B5 Signing time: Fri 13 Jun 2025 00:14:31 +0000 Manifest this update: Fri 13 Jun 2025 00:14:31 +0000 Manifest next update: Fri 20 Jun 2025 00:14:31 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: aTupJbzk73fdiMBwZk6cbLySDYpsFuk64Z3ExF82Qso=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Jun 13 00:14:31 2025 GMT Not After : Jun 20 00:14:31 2025 GMT Subject: CN=684b6d67-e57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:f1:84:b8:12:49:c4:e6:96:d7:a3:a3:ac: 6b:f2:4a:c3:f1:a5:07:4f:9f:f6:d5:c1:6b:d4:5c: fd:07:e0:3d:c7:38:f4:a8:23:09:9c:6a:b0:4d:bf: a3:01:7a:54:d5:1e:57:60:c8:ee:90:7f:ad:0d:f7: 6d:42:2a:05:b5:60:3f:91:e5:71:d6:2a:37:07:80: 75:68:cf:bc:34:f2:db:6c:0f:a2:34:02:a1:f0:52: 7d:ad:40:2a:51:e4:23:0a:74:88:37:77:ce:dc:6a: 94:16:60:2a:b9:08:9a:9e:2a:07:1c:27:e1:05:e8: a6:61:6b:d4:8e:f4:8e:45:0c:17:32:08:ad:b9:70: a6:4c:0d:0a:3d:25:34:e9:33:e3:ce:70:34:52:e3: a8:de:a7:77:0f:b1:40:af:63:79:55:73:bc:79:96: d3:11:48:83:3f:b6:6d:bb:11:69:da:e8:11:68:93: d8:3f:8a:f6:2f:5f:cd:c0:a8:2a:f1:e8:27:87:71: d9:a6:ca:a4:e3:14:70:38:f1:e1:b9:9d:2d:df:8c: 3c:6c:9c:d8:07:3f:75:c2:52:e1:af:ad:5d:f8:1d: 0e:87:40:19:92:96:75:3e:00:0f:41:38:dd:7c:58: 47:fb:79:ed:02:9b:4a:1a:d9:7c:98:5e:e0:e8:c5: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AC:61:1A:51:21:C7:90:D0:08:AB:BC:AC:0D:75:A6:7A:F3:50:95 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:97:01:b1:6a:66:7a:62:b8:99:e1:b6:fa:40:81:d0:d6:d2: ed:84:2b:92:87:d5:c4:4d:ad:a2:e1:d7:95:89:4f:4b:69:9b: 1d:01:7c:72:57:59:cd:c8:7c:c9:3c:5e:ab:7f:46:67:b0:96: 40:16:b8:15:07:b4:c7:c5:9b:c5:a8:da:4e:ca:3f:d2:e3:91: c5:fc:dd:bf:75:00:50:09:2e:1b:bc:52:57:d3:4e:88:7b:4f: 66:a5:8d:ac:92:6b:9c:98:28:5e:b6:4a:6f:0b:5b:42:c2:4c: 51:d2:53:cc:0e:9e:72:a9:1c:ea:ec:3f:18:6c:13:8b:3a:14: 20:64:d0:67:e2:62:de:75:03:1b:12:b7:3c:6a:f3:ea:4e:2d: f6:3e:78:22:2c:27:92:b6:95:ea:5e:a2:6f:8f:5d:1e:2b:42: 03:5d:4b:9e:5c:18:52:82:54:ef:d6:36:49:f1:fa:ba:0f:18: 99:5e:67:9e:d4:e8:ce:3c:aa:23:e4:a6:ae:9b:49:28:c9:db: ea:59:f8:4c:c8:ac:81:f2:97:8f:fe:f6:f9:9c:22:e7:54:7b: 3b:b9:cd:f7:dc:fe:09:72:b8:fc:ac:7d:97:d7:69:32:3f:f4: 65:0c:75:09:bd:54:23:59:26:24:1d:d1:97:ce:d5:74:8d:cd: 28:be:5c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwNjEzMDAxNDMxWhcNMjUwNjIwMDAxNDMxWjAYMRYwFAYD VQQDEw02ODRiNmQ2Ny1lNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKLxhLgSScTmltejo6xr8krD8aUHT5/21cFr1Fz9B+A9xzj0qCMJnGqwTb+j AXpU1R5XYMjukH+tDfdtQioFtWA/keVx1io3B4B1aM+8NPLbbA+iNAKh8FJ9rUAq UeQjCnSIN3fO3GqUFmAquQianioHHCfhBeimYWvUjvSORQwXMgituXCmTA0KPSU0 6TPjznA0UuOo3qd3D7FAr2N5VXO8eZbTEUiDP7ZtuxFp2ugRaJPYP4r2L1/NwKgq 8egnh3HZpsqk4xRwOPHhuZ0t34w8bJzYBz91wlLhr61d+B0Oh0AZkpZ1PgAPQTjd fFhH+3ntAptKGtl8mF7g6MUgwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFasYRpR IceQ0AirvKwNdaZ681CVMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdlwGxamZ6YriZ4bb6QIHQ1tLthCuSh9XETa2i4deViU9LaZsdAXxy V1nNyHzJPF6rf0ZnsJZAFrgVB7THxZvFqNpOyj/S45HF/N2/dQBQCS4bvFJX006I e09mpY2skmucmChetkpvC1tCwkxR0lPMDp5yqRzq7D8YbBOLOhQgZNBn4mLedQMb Erc8avPqTi32PngiLCeStpXqXqJvj10eK0IDXUueXBhSglTv1jZJ8fq6DxiZXmee 1OjOPKoj5Kaum0koydvqWfhMyKyB8peP/vb5nCLnVHs7uc333P4Jcrj8rH2X12ky P/RlDHUJvVQjWSYkHdGXztV0jc0ovly5 -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:19 2025 by rpki-client