$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json) Hash identifier: 6Q2jWI6fh86fnpLQGqzX8bROIT5IXyMgBP+PQ79r7Hg= Subject key identifier: 92:86:7E:BA:6A:64:CA:10:1E:30:F2:FF:D5:C2:87:27:E1:D3:CD:62 Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft Manifest number: 077E Signing time: Thu 24 Apr 2025 21:12:45 +0000 Manifest this update: Thu 24 Apr 2025 21:12:45 +0000 Manifest next update: Thu 01 May 2025 21:12:45 +0000 Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: Zjp0Mu+fZM3tXnRa6l1xx5Lc/XVgnBtcSfnSgDj0v78=) 2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: ioUnn9Sg1+1Knr69k6HvCYNkUAJj3SY+tArXzL4hN4U=) 3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 7BAdUQMZjuuZNgHFdOha+SYqXFalxz5F+SZR0XZCmpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: Apr 24 21:12:45 2025 GMT Not After : May 1 21:12:45 2025 GMT Subject: CN=680aa94d-f6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:03:b5:45:38:f0:2a:58:9b:b1:eb:0e:67: f5:3c:af:dd:e5:ae:80:a3:6d:62:8e:cd:75:cc:04: 74:4f:8c:4c:8e:0a:fa:71:07:bd:bf:90:7b:b4:0a: c9:f8:24:44:50:fb:36:da:48:d6:c7:cc:6c:37:36: 03:91:69:12:2d:b8:68:f7:6b:ce:42:56:75:da:c2: e5:92:71:e3:fc:e0:69:f3:7c:df:3c:6c:ed:07:8f: 77:2c:87:aa:a2:f0:a1:0e:83:94:c2:6b:60:43:e4: 78:ed:7a:52:71:4e:ab:87:86:fd:df:3d:da:4d:84: 74:55:38:2d:34:df:ab:ee:ce:8b:72:e2:b5:f2:b2: 87:9f:06:1e:c3:29:5f:34:1d:22:e1:1a:4e:49:7e: 71:87:11:c0:78:c0:b4:03:e6:76:ac:8a:d0:f0:c4: b2:6a:ce:40:5e:92:05:58:fa:9b:c2:94:e8:c8:a7: c7:49:a1:29:be:bd:c3:e6:53:fd:c6:87:4c:d4:d3: 07:28:a3:12:01:ec:74:bf:8a:af:0f:7c:50:ca:33: aa:2e:40:94:11:34:d4:cd:80:63:1d:7b:d7:65:82: e9:4f:86:eb:06:2e:b0:c6:f3:31:00:51:9c:ee:36: 66:0a:df:ea:b9:29:92:c8:d2:e3:b4:4d:a0:d2:7c: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:86:7E:BA:6A:64:CA:10:1E:30:F2:FF:D5:C2:87:27:E1:D3:CD:62 X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dc:19:a0:eb:12:0f:7d:f2:ee:12:63:78:b4:4c:1f:31:bc: 7f:b0:eb:78:cd:09:1a:f3:80:10:6d:c1:aa:e3:e3:9a:d1:8a: 33:4c:71:5b:e1:0c:55:c3:73:a8:06:8d:6e:f0:28:38:1d:68: 98:00:fa:d1:06:0c:2a:44:f0:25:b8:e7:d5:00:f5:0b:19:4f: d5:91:09:ac:e2:b6:58:c2:dc:99:d7:5f:73:87:0e:72:9d:14: 0b:31:60:80:9e:31:45:b2:9c:0c:c5:77:80:3b:9e:91:8b:a3: ad:a3:11:ee:64:4d:20:e4:63:72:07:f8:3e:4c:e8:85:2f:ed: 82:22:4c:de:38:a3:33:37:5d:88:c8:63:9a:97:f7:56:ed:a8: 43:47:df:41:d4:46:c1:18:d5:9e:a1:85:8e:89:0c:b2:a9:e9: 4e:b2:93:45:c0:c6:30:b4:7b:d6:db:2d:12:ba:d7:fa:19:f5: b4:8e:57:56:51:29:53:01:0d:af:07:05:59:ad:11:0b:de:b9: 6d:d4:f3:b4:f9:03:33:15:c0:ae:68:1b:83:67:a0:04:e2:c1: 8e:f7:cd:2f:2e:da:0f:e5:c1:41:03:92:56:97:98:65:82:5a: 38:2a:97:9a:a6:eb:cf:60:e5:4a:f2:47:0a:4d:02:dc:c0:9a: b0:a7:1e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjUwNDI0MjExMjQ1WhcNMjUwNTAxMjExMjQ1WjAYMRYwFAYD VQQDEw02ODBhYTk0ZC1mNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xQDtUU48CpYm7HrDmf1PK/d5a6Ao21ijs11zAR0T4xMjgr6cQe9v5B7tArJ +CREUPs22kjWx8xsNzYDkWkSLbho92vOQlZ12sLlknHj/OBp83zfPGztB493LIeq ovChDoOUwmtgQ+R47XpScU6rh4b93z3aTYR0VTgtNN+r7s6LcuK18rKHnwYewylf NB0i4RpOSX5xhxHAeMC0A+Z2rIrQ8MSyas5AXpIFWPqbwpToyKfHSaEpvr3D5lP9 xodM1NMHKKMSAex0v4qvD3xQyjOqLkCUETTUzYBjHXvXZYLpT4brBi6wxvMxAFGc 7jZmCt/quSmSyNLjtE2g0nx9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKGfrpq ZMoQHjDy/9XChyfh081iMB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUE3Ri9FOTY0QUY0QzBCNTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VC dnNqSW4wVUJsNHdKSURhN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3Bmg6xIPffLuEmN4tEwfMbx/sOt4zQka84AQbcGq4+Oa0YozTHFb 4QxVw3OoBo1u8Cg4HWiYAPrRBgwqRPAluOfVAPULGU/VkQms4rZYwtyZ119zhw5y nRQLMWCAnjFFspwMxXeAO56Ri6OtoxHuZE0g5GNyB/g+TOiFL+2CIkzeOKMzN12I yGOal/dW7ahDR99B1EbBGNWeoYWOiQyyqelOspNFwMYwtHvW2y0Sutf6GfW0jldW USlTAQ2vBwVZrREL3rlt1PO0+QMzFcCuaBuDZ6AE4sGO980vLtoP5cFBA5JWl5hl glo4KpeapuvPYOVK8kcKTQLcwJqwpx7Y -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:17 2025 by rpki-client