$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft File: GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json) Hash identifier: Qj6RL/2b98UNIYAIesvU6gvDltrhKead2tFxEa6mWU0= Subject key identifier: 63:65:13:C3:B2:9A:8E:42:CC:C9:97:D2:45:F3:C5:5D:46:1E:D7:B5 Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft Manifest number: 05F8 Signing time: Thu 24 Apr 2025 22:42:35 +0000 Manifest this update: Thu 24 Apr 2025 22:42:34 +0000 Manifest next update: Thu 01 May 2025 22:42:34 +0000 Files and hashes: 1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: vpeTsIXNDDeZF0jxFTXR2sFZg5BZ0eZlocbQW0rDYqc=) 2: 6E6A801066CB11EFA513A684C4F9AE02.roa (hash: vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=) 3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Validity Not Before: Apr 24 22:42:34 2025 GMT Not After : May 1 22:42:34 2025 GMT Subject: CN=680abe5b-7299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:39:4a:c0:7c:92:c0:72:3b:24:17:03:09: 5a:69:bf:e6:03:f0:eb:fe:58:30:ad:3f:f2:2a:18: 00:26:22:c9:0c:a5:6c:1c:43:5f:5e:ac:fb:73:88: 55:d0:98:4a:80:68:5e:7a:60:20:f8:56:c9:63:25: 82:7f:9c:c6:71:9d:c6:81:7c:2d:f8:c7:b2:b3:18: 99:69:59:ac:16:7a:83:19:b5:55:68:dd:cc:58:82: 56:d8:98:73:64:88:1c:a8:7b:fa:09:a4:de:2d:50: 5b:09:88:92:46:94:f9:bf:b9:b4:73:38:64:88:0f: 5b:ad:54:43:e3:b7:e7:c4:fe:a9:62:fb:8d:77:56: d6:cf:c0:0e:8a:41:9d:fc:44:32:3a:2b:fb:a3:3e: de:c9:6c:22:ca:91:45:fb:30:b2:5f:bf:0a:02:4e: fb:d3:73:a6:9f:17:cd:5e:b2:89:ca:06:9e:15:e1: 18:97:a2:99:7f:db:1e:ae:b0:f5:c3:88:21:96:bc: 7d:d4:a1:60:51:eb:64:cb:f0:3a:c8:24:11:85:2c: 72:8e:a5:77:a6:e0:96:36:d7:7d:d8:08:51:a9:ab: 81:2e:2d:4d:34:d1:96:7e:42:67:f4:41:b3:f6:c7: 30:fe:0e:31:35:50:c2:c2:e8:08:87:64:4d:35:d5: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:65:13:C3:B2:9A:8E:42:CC:C9:97:D2:45:F3:C5:5D:46:1E:D7:B5 X509v3 Authority Key Identifier: keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:74:cb:81:e3:98:f1:fa:ab:10:0b:85:db:ce:9c:ae:9b:4c: 8e:29:0c:35:73:8d:b6:d2:3b:9e:3c:83:69:1b:90:f7:af:bf: 6b:fd:17:01:b0:1a:ef:9b:5c:c2:fd:c8:f2:85:20:86:9b:23: 08:30:2a:80:fd:2c:f9:cc:9e:3a:79:f8:23:8e:66:4c:5c:89: 9e:51:b9:5d:76:a9:e8:74:d6:70:54:08:c0:5f:ea:21:c8:64: 08:4f:86:18:11:3f:17:98:2c:1c:73:70:9f:1d:73:6c:5c:e7: 5f:70:a7:b9:22:8b:e6:b8:d1:9c:a3:0e:ff:f5:9c:0c:02:b7: 02:e9:fd:c0:40:8c:5d:1f:91:20:ed:7f:41:27:53:68:8e:38: 8e:ec:03:1b:1a:9f:89:bd:c1:87:b8:68:d6:cb:f8:9a:02:5f: 40:68:46:c8:9d:ce:96:24:40:14:f1:e5:92:84:fd:b1:c3:6f: ec:fb:f5:11:33:19:92:a6:86:33:6a:c9:09:a5:02:1b:6f:8f: c3:92:8f:4e:b0:26:2b:83:7c:cc:02:6b:69:18:d4:b1:ab:2a: aa:d1:1a:a4:71:2c:18:49:f9:6b:13:a6:cb:3a:56:64:2a:24: e2:62:4d:83:f9:9b:12:6b:07:8a:a1:b9:d7:6d:f8:f6:3e:34: 75:dd:bf:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz RDkyNUI2MzYwHhcNMjUwNDI0MjI0MjM0WhcNMjUwNTAxMjI0MjM0WjAYMRYwFAYD VQQDEw02ODBhYmU1Yi03Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQk5SsB8ksByOyQXAwlaab/mA/Dr/lgwrT/yKhgAJiLJDKVsHENfXqz7c4hV 0JhKgGheemAg+FbJYyWCf5zGcZ3GgXwt+MeysxiZaVmsFnqDGbVVaN3MWIJW2Jhz ZIgcqHv6CaTeLVBbCYiSRpT5v7m0czhkiA9brVRD47fnxP6pYvuNd1bWz8AOikGd /EQyOiv7oz7eyWwiypFF+zCyX78KAk7703OmnxfNXrKJygaeFeEYl6KZf9serrD1 w4ghlrx91KFgUetky/A6yCQRhSxyjqV3puCWNtd92AhRqauBLi1NNNGWfkJn9EGz 9scw/g4xNVDCwugIh2RNNdVYsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNlE8Oy mo5CzMmX0kXzxV1GHte1MB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2 NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwQy9DM0VDRDk2OEE2NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92 ZlFLMnZySXM0Vms5a2x0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDadMuB45jx+qsQC4Xbzpyum0yOKQw1c4220juePINpG5D3r79r/RcB sBrvm1zC/cjyhSCGmyMIMCqA/Sz5zJ46efgjjmZMXImeUblddqnodNZwVAjAX+oh yGQIT4YYET8XmCwcc3CfHXNsXOdfcKe5IovmuNGcow7/9ZwMArcC6f3AQIxdH5Eg 7X9BJ1NojjiO7AMbGp+JvcGHuGjWy/iaAl9AaEbInc6WJEAU8eWShP2xw2/s+/UR MxmSpoYzaskJpQIbb4/Dko9OsCYrg3zMAmtpGNSxqyqq0RqkcSwYSflrE6bLOlZk KiTiYk2D+ZsSaweKobnXbfj2PjR13b9v -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:29 2025 by rpki-client