$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft File: gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json) Hash identifier: scT0p5/hZEHhqqpnQTHKmi/NcT94Li+ooSiO4vPtwF8= Subject key identifier: C0:3C:38:34:27:97:E7:B6:28:CC:2F:02:65:BB:B5:FA:69:E7:0F:C0 Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B Certificate issuer: /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft Manifest number: 0789 Signing time: Thu 24 Apr 2025 21:10:14 +0000 Manifest this update: Thu 24 Apr 2025 21:10:14 +0000 Manifest next update: Thu 01 May 2025 21:10:14 +0000 Files and hashes: 1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: +QuWg4jEkQ3blHls2uIpPGvZdX1lhHfCNvo0zX2Fx+Y=) 2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: YgjG4RIq8/AXh0+vxXX2Pz+/mF/LDmvghTRwjTbmhTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B Validity Not Before: Apr 24 21:10:14 2025 GMT Not After : May 1 21:10:14 2025 GMT Subject: CN=680aa8b6-c16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:04:29:75:90:40:07:dd:18:53:92:3f:6c: 09:68:82:c7:29:72:ec:bb:37:4a:7e:2f:07:f5:13: c9:b3:b8:9b:dd:64:52:d1:df:d3:55:58:50:45:b6: 37:66:72:d9:af:7e:c8:df:f0:62:e0:82:17:e2:70: 3f:4b:0e:06:d7:c4:3b:7e:24:e3:78:cf:9d:8d:25: 75:a5:8e:70:f2:13:b9:0d:e8:09:18:51:c0:ad:f6: a0:d5:61:5a:f9:c8:41:47:0e:04:48:35:c1:7b:f9: b9:0d:99:14:31:1b:d3:0d:bd:15:32:10:d1:55:ce: a7:60:c9:6e:ec:45:ef:3b:14:11:a7:bd:e7:ed:eb: 7d:a3:24:b5:d6:4e:d7:da:86:8a:22:4b:56:2c:5c: b3:71:a3:56:4a:d9:34:a0:52:cd:24:9f:12:d6:8b: 1b:36:04:86:a1:cc:11:fb:fd:d6:18:5e:f0:1c:e7: 0d:2f:1f:87:0e:a0:10:28:31:dc:a3:ae:67:02:16: 62:58:11:f0:35:72:54:83:95:d5:f4:73:ff:fb:56: 34:4c:be:4e:8f:fb:3b:7c:b2:41:1a:41:ad:73:5a: 03:d0:aa:ac:57:3a:56:8e:71:24:64:71:13:cf:41: 47:b2:a0:be:75:03:5d:a0:63:35:bf:66:50:a8:59: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:38:34:27:97:E7:B6:28:CC:2F:02:65:BB:B5:FA:69:E7:0F:C0 X509v3 Authority Key Identifier: keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:b7:e6:ee:ed:07:5e:56:5f:48:c7:7d:dd:5e:5c:b4:1e: af:dc:0f:26:ec:b4:56:e6:32:20:d3:02:6f:dc:04:a6:1d:eb: 93:be:d5:3d:9f:a1:89:c6:13:82:55:59:3a:45:4e:0a:dd:aa: d4:ad:9d:55:27:7f:55:98:fc:79:95:d7:9f:7b:54:d1:57:23: 87:17:a8:13:ee:fc:fa:20:10:f2:a1:77:0a:db:48:39:c9:82: ac:51:31:11:88:61:4c:28:40:67:a7:fa:ef:2c:bf:4a:ea:24: 6b:39:6d:da:75:c2:2a:ed:60:b7:35:38:c9:cb:5a:42:c5:ce: 62:78:ce:b2:47:07:61:67:a2:a6:d3:3b:6f:82:88:2e:5f:d0: 01:64:97:ce:7d:0b:d1:80:86:00:1c:df:07:16:b9:e8:e2:ef: dc:94:16:7f:1f:2c:e4:24:b8:21:b9:de:91:76:b6:a3:22:9d: d2:e3:cc:92:b4:e1:77:37:a5:ef:03:a3:29:78:91:c6:d4:73: 11:45:f2:e9:00:47:07:1a:9d:57:17:64:89:bb:1a:c6:40:06: 16:1c:37:81:5b:75:f2:e5:72:37:76:fe:0d:ce:ad:b8:1c:17: 01:19:3d:b8:0a:57:51:1c:e5:b7:e9:91:8a:d1:a6:9f:78:3e: bf:0d:f2:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGOTYxMTAvBgNVBAUTKDgwOUI3RTZERERFNDJGMDYyNzg0M0RCNTlGQTQxQUZB N0YzQjdDM0IwHhcNMjUwNDI0MjExMDE0WhcNMjUwNTAxMjExMDE0WjAYMRYwFAYD VQQDEw02ODBhYThiNi1jMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNMEKXWQQAfdGFOSP2wJaILHKXLsuzdKfi8H9RPJs7ib3WRS0d/TVVhQRbY3 ZnLZr37I3/Bi4IIX4nA/Sw4G18Q7fiTjeM+djSV1pY5w8hO5DegJGFHArfag1WFa +chBRw4ESDXBe/m5DZkUMRvTDb0VMhDRVc6nYMlu7EXvOxQRp73n7et9oyS11k7X 2oaKIktWLFyzcaNWStk0oFLNJJ8S1osbNgSGocwR+/3WGF7wHOcNLx+HDqAQKDHc o65nAhZiWBHwNXJUg5XV9HP/+1Y0TL5Oj/s7fLJBGkGtc1oD0KqsVzpWjnEkZHET z0FHsqC+dQNdoGM1v2ZQqFnQ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA8ODQn l+e2KMwvAmW7tfpp5w/AMB8GA1UdIwQYMBaAFICbfm3d5C8GJ4Q9tZ+kGvp/O3w7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUY5Ni8wRjg2RTYwRTA2 Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3WW5oRDIxbjZRYS1uODdm RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKdC1iZDNrTHdZbmhEMjFuNlFhLW44N2ZEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUY5Ni8wRjg2RTYwRTA2Q0QxMUVCOUYwMEFGMTFDNEY5QUUwMi9nSnQtYmQza0x3 WW5oRDIxbjZRYS1uODdmRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+7fm7u0HXlZfSMd93V5ctB6v3A8m7LRW5jIg0wJv3ASmHeuTvtU9 n6GJxhOCVVk6RU4K3arUrZ1VJ39VmPx5ldefe1TRVyOHF6gT7vz6IBDyoXcK20g5 yYKsUTERiGFMKEBnp/rvLL9K6iRrOW3adcIq7WC3NTjJy1pCxc5ieM6yRwdhZ6Km 0ztvgoguX9ABZJfOfQvRgIYAHN8HFrno4u/clBZ/HyzkJLghud6RdrajIp3S48yS tOF3N6XvA6MpeJHG1HMRRfLpAEcHGp1XF2SJuxrGQAYWHDeBW3Xy5XI3dv4Nzq24 HBcBGT24CldRHOW36ZGK0aafeD6/DfLP -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:08 2025 by rpki-client