$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: o6VCB610VljIbFWnZsAJtF1jAUmLJrz06lUNT1YUnDo= Subject key identifier: 5C:21:9F:03:62:AF:9D:4E:D3:3A:FA:76:85:7E:B9:1D:88:57:43:EB Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 01BE Signing time: Fri 25 Apr 2025 02:13:11 +0000 Manifest this update: Fri 25 Apr 2025 02:13:11 +0000 Manifest next update: Fri 02 May 2025 02:13:11 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: oNGdDT6e5k47Ee90i+AHF7eCmJruycAq+2CeBDAELsU=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Apr 25 02:13:11 2025 GMT Not After : May 2 02:13:11 2025 GMT Subject: CN=680aefb7-03f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:ad:18:dd:04:dc:69:98:12:32:fc:aa:67: db:70:c8:2d:3f:09:1e:65:a0:6f:4f:97:86:45:bb: c2:78:c0:fd:19:23:ec:09:7d:ef:23:7f:4d:3e:c8: ad:bb:9a:57:db:14:4d:9f:a6:46:ee:0b:aa:49:ab: 11:26:56:b6:42:75:4c:9c:1b:e8:03:48:3a:01:52: cf:fd:2f:76:e0:f3:f0:da:54:73:50:4b:16:69:27: 07:1d:f1:f2:a0:e8:e9:fa:66:fa:ae:ea:c3:81:c0: 11:19:4d:a0:61:ab:63:c9:06:85:ad:d0:7f:b2:bf: 34:2b:3b:d1:36:45:15:d6:33:5d:86:35:fb:81:1f: 81:ec:e2:1c:7b:54:e6:d8:cc:2a:fc:02:38:9d:7e: 6d:aa:42:03:56:d8:43:f5:5b:9f:93:9c:a7:5a:bf: 8e:f6:df:1f:c6:a3:cf:61:6b:4c:72:70:7e:2e:a7: 8c:1e:52:14:c8:68:80:ac:93:a7:f6:22:98:9e:69: c7:88:b8:bf:83:5f:d7:71:c9:98:ec:c3:df:48:2f: 31:dc:0b:47:38:af:8c:17:82:c9:7f:d1:e9:27:94: 11:7b:fa:d9:a0:a5:e7:37:7b:26:a2:e6:f7:22:a9: b6:0d:9b:07:b8:27:7c:b7:53:71:d9:d3:16:b9:31: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:9F:03:62:AF:9D:4E:D3:3A:FA:76:85:7E:B9:1D:88:57:43:EB X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7d:67:95:0e:8c:04:3d:0b:54:e0:08:25:36:d7:56:10:ab: 5b:53:d1:40:a9:96:59:91:2a:29:d7:ec:93:72:71:03:56:18: b2:15:0d:10:68:8c:97:fb:d3:10:85:92:f2:12:cf:f1:57:20: e7:a7:cd:dc:22:e7:f8:8e:8a:fc:85:15:7b:5e:37:42:eb:4e: 30:a3:b5:80:8f:0b:be:0d:8d:d2:b3:b8:3d:f7:06:cb:46:98: d9:76:be:d5:60:50:8a:5f:5f:b1:c1:7c:39:27:4c:fd:0b:ba: ac:25:e6:98:fe:27:35:f5:f7:6c:6e:fd:ab:6c:01:4e:19:be: 94:98:30:39:f7:ba:5b:38:35:a9:2e:8d:f1:05:54:e6:fe:12: e3:c9:1a:82:2d:27:b0:32:07:74:3f:6c:57:c0:d6:ee:3b:25: 2c:19:55:10:05:d5:73:5d:07:7c:01:bc:6d:d1:8b:53:0e:4b: d7:e8:fc:b8:32:31:b2:68:b1:c2:b9:f1:17:a2:f7:4c:fd:55: 9e:e9:e2:7d:e9:c1:49:94:b0:2e:73:4c:d5:8b:31:3e:25:c4: 65:0c:04:f2:72:1f:ed:c6:d5:38:d6:13:d0:0b:06:0b:9e:40: cc:0c:ea:e9:0a:d3:cc:12:c7:72:c8:4a:60:b7:2e:87:c1:55: ff:b5:f1:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwNDI1MDIxMzExWhcNMjUwNTAyMDIxMzExWjAYMRYwFAYD VQQDEw02ODBhZWZiNy0wM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVCtGN0E3GmYEjL8qmfbcMgtPwkeZaBvT5eGRbvCeMD9GSPsCX3vI39NPsit u5pX2xRNn6ZG7guqSasRJla2QnVMnBvoA0g6AVLP/S924PPw2lRzUEsWaScHHfHy oOjp+mb6rurDgcARGU2gYatjyQaFrdB/sr80KzvRNkUV1jNdhjX7gR+B7OIce1Tm 2Mwq/AI4nX5tqkIDVthD9Vufk5ynWr+O9t8fxqPPYWtMcnB+LqeMHlIUyGiArJOn 9iKYnmnHiLi/g1/XccmY7MPfSC8x3AtHOK+MF4LJf9HpJ5QRe/rZoKXnN3smoub3 Iqm2DZsHuCd8t1Nx2dMWuTHwTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwhnwNi r51O0zr6doV+uR2IV0PrMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYfWeVDowEPQtU4AglNtdWEKtbU9FAqZZZkSop1+yTcnEDVhiyFQ0Q aIyX+9MQhZLyEs/xVyDnp83cIuf4jor8hRV7XjdC604wo7WAjwu+DY3Ss7g99wbL RpjZdr7VYFCKX1+xwXw5J0z9C7qsJeaY/ic19fdsbv2rbAFOGb6UmDA597pbODWp Lo3xBVTm/hLjyRqCLSewMgd0P2xXwNbuOyUsGVUQBdVzXQd8Abxt0YtTDkvX6Py4 MjGyaLHCufEXovdM/VWe6eJ96cFJlLAuc0zVizE+JcRlDATych/txtU41hPQCwYL nkDMDOrpCtPMEsdyyEpgty6HwVX/tfGB -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:36 2025 by rpki-client