$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: Lgoo8SJg5tPd4Jv83RVNF3QBjJ6YsWuFnhFQGc81SHw= Subject key identifier: A7:8F:EC:38:FA:B1:CB:98:1F:25:2E:BC:CA:FC:A8:43:F5:0C:C0:98 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 026C Signing time: Fri 25 Apr 2025 01:33:43 +0000 Manifest this update: Fri 25 Apr 2025 01:33:42 +0000 Manifest next update: Fri 02 May 2025 01:33:42 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: uG4mqphZnWpEXBT8m9fKax9tVLncGpCWs8LdHpigJFQ=) 2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: TtO94NVCrFd/kOM0g0jsLA5taaehqwgncyfWlORB4kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Apr 25 01:33:42 2025 GMT Not After : May 2 01:33:42 2025 GMT Subject: CN=680ae676-b5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:0e:04:9b:71:9b:13:a3:5b:6e:4c:7e:bc: 18:fa:90:3c:ee:39:86:03:a0:6e:04:7f:4b:8a:c2: 5b:6b:6b:de:a3:21:8a:f5:9f:f1:d5:27:63:bc:88: b2:dd:a8:2b:ad:62:84:fe:dc:c3:28:49:76:6b:59: fb:4c:c4:92:b5:95:1e:9e:8f:20:54:e9:ba:f4:16: 65:30:8a:a6:5c:ce:d7:d2:22:93:40:ca:53:6d:5e: 2d:0a:af:91:59:f9:ba:e3:9d:74:a9:09:21:68:a4: d7:e6:ec:9c:57:4a:cc:3c:8c:16:f0:4f:2a:d2:77: 16:cf:f6:2a:36:c7:19:7f:99:43:4a:5a:0f:ce:76: e4:e2:f4:30:ae:15:16:30:74:89:f5:c1:ec:1f:89: 39:31:20:03:7b:3c:3e:3e:48:3e:07:58:68:b4:ee: b9:c9:05:4c:d0:23:5c:90:d8:a8:cb:ed:ad:76:8a: 4f:97:c6:1e:7c:c6:72:44:10:b2:c2:82:77:ff:26: 9a:e8:e3:fe:a3:00:b8:3a:1c:67:6a:5f:0d:4f:4f: d2:7b:70:98:12:ae:5a:86:49:49:c6:8c:60:2e:8d: 4b:a1:d8:02:02:86:df:fd:44:21:ca:32:d7:0c:d7: cd:ee:48:a1:27:8f:70:70:f2:df:f3:52:26:a1:e6: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8F:EC:38:FA:B1:CB:98:1F:25:2E:BC:CA:FC:A8:43:F5:0C:C0:98 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:66:24:22:6e:40:fb:03:55:1f:d0:95:32:90:84:06:4f:ba: 2c:bb:bc:f4:a4:b5:77:0a:94:eb:ac:b2:9a:52:f7:ac:3d:bb: 65:36:0c:7c:79:31:b5:9e:72:b8:5b:a2:f9:8a:0d:2d:9c:a0: 9b:df:c5:be:ed:2b:99:6b:61:c9:23:08:4f:45:97:41:6e:d5: 1a:2c:8d:e4:86:27:6b:04:70:52:0b:d3:8a:76:49:f6:54:09: a0:f7:ab:d6:f5:72:b0:87:04:4e:b0:2f:85:e5:9e:23:b1:90: 69:22:2f:59:9e:01:0f:ef:e3:24:d8:e6:0d:e6:e3:45:2e:b7: f8:b2:48:fd:91:57:55:fe:d6:15:36:1c:f5:96:f5:11:b4:d0: 37:a9:1f:94:38:bd:d0:66:f6:ad:46:aa:0f:98:aa:5a:d2:20: 64:79:4e:52:c7:2d:6a:5b:05:d0:41:b8:db:fb:d7:a2:44:fe: 75:e4:6f:b2:9f:15:e5:cd:b8:32:ed:bc:20:2b:4a:df:3c:c0: 8f:bd:ea:2b:40:6e:a9:07:e1:9e:ba:86:d7:a6:f7:53:d4:cb: b3:b9:fd:65:bd:6c:0e:dc:62:ce:7b:3c:fd:bf:42:4a:37:92: 4d:e2:b8:db:e5:ac:57:1d:0e:10:ec:58:af:8f:b8:4e:c1:c7: 8b:03:e0:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUwNDI1MDEzMzQyWhcNMjUwNTAyMDEzMzQyWjAYMRYwFAYD VQQDEw02ODBhZTY3Ni1iNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6MOBJtxmxOjW25MfrwY+pA87jmGA6BuBH9LisJba2veoyGK9Z/x1SdjvIiy 3agrrWKE/tzDKEl2a1n7TMSStZUeno8gVOm69BZlMIqmXM7X0iKTQMpTbV4tCq+R Wfm64510qQkhaKTX5uycV0rMPIwW8E8q0ncWz/YqNscZf5lDSloPznbk4vQwrhUW MHSJ9cHsH4k5MSADezw+Pkg+B1hotO65yQVM0CNckNioy+2tdopPl8YefMZyRBCy woJ3/yaa6OP+owC4Ohxnal8NT0/Se3CYEq5ahklJxoxgLo1LodgCAobf/UQhyjLX DNfN7kihJ49wcPLf81Imoea3XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeP7Dj6 scuYHyUuvMr8qEP1DMCYMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZiQibkD7A1Uf0JUykIQGT7osu7z0pLV3CpTrrLKaUvesPbtlNgx8 eTG1nnK4W6L5ig0tnKCb38W+7SuZa2HJIwhPRZdBbtUaLI3khidrBHBSC9OKdkn2 VAmg96vW9XKwhwROsC+F5Z4jsZBpIi9ZngEP7+Mk2OYN5uNFLrf4skj9kVdV/tYV Nhz1lvURtNA3qR+UOL3QZvatRqoPmKpa0iBkeU5Sxy1qWwXQQbjb+9eiRP515G+y nxXlzbgy7bwgK0rfPMCPveorQG6pB+GeuobXpvdT1Muzuf1lvWwO3GLOezz9v0JK N5JN4rjb5axXHQ4Q7Fivj7hOwceLA+C8 -----END CERTIFICATE-----Generated at Sat Apr 26 15:00:34 2025 by rpki-client