$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: m0nmfaX6+xLfbDSzZ5akVkTVUdwxytNzbIgPFyzuboU= Subject key identifier: 4D:44:61:E9:7D:40:27:EB:DF:67:7F:D8:F2:F9:88:A3:0D:AC:76:6B Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 039D Signing time: Fri 25 Apr 2025 00:31:46 +0000 Manifest this update: Fri 25 Apr 2025 00:31:45 +0000 Manifest next update: Fri 02 May 2025 00:31:45 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: wl0x0VR6Jl3z6C3v3vQPjen8XMWpxzC2WTPdud2mAfc=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Validity Not Before: Apr 25 00:31:45 2025 GMT Not After : May 2 00:31:45 2025 GMT Subject: CN=680ad7f2-3f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:6d:75:1e:d4:95:b9:6a:34:70:6d:d0:1d: 45:79:3c:04:1f:17:3d:3f:cb:e2:c0:64:0b:61:56: a1:88:6a:60:22:11:97:0e:ea:8c:c3:03:79:9f:8e: b8:1b:4d:1e:73:12:4a:3c:d6:a6:de:b6:53:27:c2: a7:cb:54:d6:5e:98:19:32:29:3c:59:58:29:54:e0: c5:d4:17:77:85:ff:c2:7c:ea:78:4b:16:4b:6a:59: 3c:c4:0d:73:27:15:98:16:bc:3c:92:72:d1:e0:21: 4c:c8:fb:05:bf:d0:b4:72:e9:d7:3e:44:0f:e6:0d: 2b:ac:9b:84:d5:9a:71:3d:39:92:ae:07:db:3e:cc: 06:de:03:f5:fc:db:8f:92:25:00:bb:3d:2c:bb:29: d5:d3:2b:1a:2f:83:7c:16:6c:14:08:85:1c:e3:6c: bf:8c:33:f9:99:13:f5:3e:bc:55:0f:3e:c5:b0:12: 4f:b7:93:43:2c:20:9f:e2:1a:2c:09:46:2b:96:7c: 73:ac:f7:f0:b2:51:6b:f0:34:f6:df:e8:44:2a:cf: 16:f6:8c:3e:19:13:2f:f5:eb:0a:ac:72:88:f0:1f: f2:f1:41:07:a1:ca:c6:24:71:73:16:cf:7a:a2:55: 39:2b:08:2c:16:94:02:94:83:35:80:e3:61:f3:09: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:44:61:E9:7D:40:27:EB:DF:67:7F:D8:F2:F9:88:A3:0D:AC:76:6B X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d6:62:dd:a6:00:dd:f9:46:04:3c:ba:7d:58:be:b0:2b:96: a3:80:71:15:7a:e7:37:11:c5:dd:9f:f3:ba:33:bf:02:38:b3: 4f:0b:62:af:19:01:63:66:43:91:96:02:f2:97:30:61:8f:2e: ea:cf:8e:96:00:0f:3e:e4:f9:f3:60:2a:f6:4d:ba:e6:89:e4: 6b:50:f0:1a:7b:7b:e8:bc:d0:bf:c8:09:9b:49:65:8f:68:fc: f7:04:f0:96:ac:f6:21:39:ed:f3:6d:47:4e:66:8d:46:ff:85: 4c:c7:c8:f3:e2:d1:64:bb:14:db:38:ea:23:d7:ca:2c:26:94: 99:de:01:46:8e:54:30:f2:f1:81:e7:a2:6c:0f:71:df:12:4a: cd:e4:dc:59:a4:ff:5b:52:04:51:e2:d2:be:d9:05:e0:3b:95: b2:c8:0d:99:54:91:dd:62:d3:64:86:78:33:7f:23:48:6c:b8: c8:87:54:df:e9:90:54:6d:08:9d:ce:01:9a:fa:57:00:f8:6a: ee:21:ab:0c:ff:58:5d:22:72:83:60:c1:fe:39:8e:70:73:e4: 65:2c:0b:34:b2:be:b7:a9:da:80:10:60:80:03:2a:e8:e2:72: dc:f5:fc:32:9f:66:90:dd:59:5c:7a:ab:80:94:23:87:8a:cf: 60:8f:1a:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjUwNDI1MDAzMTQ1WhcNMjUwNTAyMDAzMTQ1WjAYMRYwFAYD VQQDEw02ODBhZDdmMi0zZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw9tdR7UlblqNHBt0B1FeTwEHxc9P8viwGQLYVahiGpgIhGXDuqMwwN5n464 G00ecxJKPNam3rZTJ8Kny1TWXpgZMik8WVgpVODF1Bd3hf/CfOp4SxZLalk8xA1z JxWYFrw8knLR4CFMyPsFv9C0cunXPkQP5g0rrJuE1ZpxPTmSrgfbPswG3gP1/NuP kiUAuz0suynV0ysaL4N8FmwUCIUc42y/jDP5mRP1PrxVDz7FsBJPt5NDLCCf4hos CUYrlnxzrPfwslFr8DT23+hEKs8W9ow+GRMv9esKrHKI8B/y8UEHocrGJHFzFs96 olU5KwgsFpQClIM1gONh8wk6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1EYel9 QCfr32d/2PL5iKMNrHZrMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1mLdpgDd+UYEPLp9WL6wK5ajgHEVeuc3EcXdn/O6M78COLNPC2Kv GQFjZkORlgLylzBhjy7qz46WAA8+5PnzYCr2TbrmieRrUPAae3vovNC/yAmbSWWP aPz3BPCWrPYhOe3zbUdOZo1G/4VMx8jz4tFkuxTbOOoj18osJpSZ3gFGjlQw8vGB 56JsD3HfEkrN5NxZpP9bUgRR4tK+2QXgO5WyyA2ZVJHdYtNkhngzfyNIbLjIh1Tf 6ZBUbQidzgGa+lcA+GruIasM/1hdInKDYMH+OY5wc+RlLAs0sr63qdqAEGCAAyro 4nLc9fwyn2aQ3VlcequAlCOHis9gjxrE -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:04 2025 by rpki-client