$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: P7XTCqavvi88lJgwnpmKqeTevg3UDK/I3t6rdJNOdaQ= Subject key identifier: 6F:30:76:B0:7F:75:6D:BD:91:A4:9A:7B:14:99:9D:EA:C0:0C:6D:B4 Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 39 Signing time: Fri 25 Apr 2025 06:31:59 +0000 Manifest this update: Fri 25 Apr 2025 06:31:58 +0000 Manifest next update: Fri 02 May 2025 06:31:58 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: G2LiSHfxjvQIU76JLP8KeoLTLTB3WyDxp+tk8SF4bMo=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Apr 25 06:31:58 2025 GMT Not After : May 2 06:31:58 2025 GMT Subject: CN=680b2c5e-caaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:13:39:5d:fe:f2:24:0b:00:dd:88:26:64: 0d:3c:c5:0c:0f:c6:87:8a:bf:54:2a:94:6c:1a:5d: 7f:fe:d6:33:31:5b:ce:41:1e:c5:2f:19:b2:27:e0: 81:3d:3f:80:5c:05:b5:f1:b7:9d:8a:bb:b9:e3:73: ce:e6:f6:b0:5a:20:14:d5:c9:c0:e1:c1:d7:29:d8: 86:9b:c3:e6:94:23:fc:a9:f8:31:9d:5c:05:9f:77: 93:a1:d2:ed:7f:fa:ee:0b:31:88:fb:1d:01:ee:61: 40:d8:4a:97:68:64:da:ca:d8:92:a7:48:cf:05:e0: 92:e0:39:16:bb:65:7a:7a:1d:04:6e:f0:88:58:4c: 93:aa:62:99:39:8b:a7:c3:be:cf:7d:79:3a:ee:bf: 9e:b9:d4:d4:42:f9:10:b8:8e:86:88:33:f4:fc:1f: 08:53:04:d6:5a:6d:0a:58:98:12:0c:b5:31:36:8d: 1d:d6:e0:0c:01:a8:a9:11:cb:10:4c:db:c0:46:71: 9a:1b:d4:cb:bc:ce:d2:2a:7d:59:b9:47:00:bf:f4: 54:18:59:e1:d6:c9:7b:8f:44:c5:00:ff:31:b3:b1: 6a:e5:7e:01:51:95:28:a6:39:e9:4e:a8:36:e5:0b: fb:22:8c:bd:cd:b5:18:90:f9:9b:68:b0:91:74:ae: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:30:76:B0:7F:75:6D:BD:91:A4:9A:7B:14:99:9D:EA:C0:0C:6D:B4 X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:a5:84:5d:92:17:e3:46:b5:a7:99:ac:d4:6b:ec:e9:2d: fe:f5:f4:82:3b:70:33:87:c3:25:df:7b:9e:c5:77:d2:d4:3c: 7c:0c:cd:d0:70:bf:e2:64:d0:4c:3d:cb:77:bb:fe:f4:2a:97: bc:f7:a7:c0:aa:9a:7b:e7:45:92:99:77:17:c4:07:c0:a6:15: 13:df:79:16:7b:e8:fb:39:a9:52:d8:24:4b:0a:6f:d7:33:52: a7:df:f4:e3:13:73:eb:bd:c9:89:5f:97:0e:a8:80:d9:22:39: 9e:65:2e:88:71:23:99:e1:66:ed:6b:77:b5:f7:f4:65:1f:c8: f7:5b:18:57:83:3e:74:bc:52:ae:e9:ba:a3:22:a5:2d:a0:12: bb:c3:55:4d:9b:9f:e8:6d:b1:e9:8a:46:00:f4:e2:74:db:6a: 07:4c:e0:53:ae:17:e3:57:b9:c0:d1:9a:de:9f:05:a3:d1:5f: 30:fe:9c:7a:d2:28:2f:b0:73:bd:c4:4b:9b:d8:be:29:5e:17: 3f:6b:95:2c:44:e3:21:6c:be:1d:8f:28:10:30:b0:04:20:57: 26:0d:eb:fa:e7:2d:dd:91:3e:4e:7d:ce:7d:ab:6d:9a:60:d8: f4:90:1a:d8:a4:0e:1f:9c:76:44:a1:bd:7c:48:f4:fb:a5:a8: d3:db:26:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDIyMjExMC8GA1UEBRMoODIwNUU5Nzk2RUM2OUEwQzczREMzQjVCM0NFMTJDNDgx OTJCNDU3NzAeFw0yNTA0MjUwNjMxNThaFw0yNTA1MDIwNjMxNThaMBgxFjAUBgNV BAMTDTY4MGIyYzVlLWNhYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtWhM5Xf7yJAsA3YgmZA08xQwPxoeKv1QqlGwaXX/+1jMxW85BHsUvGbIn4IE9 P4BcBbXxt52Ku7njc87m9rBaIBTVycDhwdcp2Iabw+aUI/yp+DGdXAWfd5Oh0u1/ +u4LMYj7HQHuYUDYSpdoZNrK2JKnSM8F4JLgORa7ZXp6HQRu8IhYTJOqYpk5i6fD vs99eTruv5651NRC+RC4joaIM/T8HwhTBNZabQpYmBIMtTE2jR3W4AwBqKkRyxBM 28BGcZob1Mu8ztIqfVm5RwC/9FQYWeHWyXuPRMUA/zGzsWrlfgFRlSimOelOqDbl C/sijL3NtRiQ+ZtosJF0riy9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbzB2sH91 bb2RpJp7FJmd6sAMbbQwHwYDVR0jBBgwFoAUggXpeW7Gmgxz3DtbPOEsSBkrRXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMjIyLzg3NjQ0ODlDQ0Q3 RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2dYcGVXN0dtZ3h6M0R0YlBPRXNTQmtyUlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4 ejNEdGJQT0VzU0JrclJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHWpYRdkhfjRrWnmazUa+zpLf719II7cDOHwyXfe57Fd9LUPHwMzdBw v+Jk0Ew9y3e7/vQql7z3p8CqmnvnRZKZdxfEB8CmFRPfeRZ76Ps5qVLYJEsKb9cz Uqff9OMTc+u9yYlflw6ogNkiOZ5lLohxI5nhZu1rd7X39GUfyPdbGFeDPnS8Uq7p uqMipS2gErvDVU2bn+htsemKRgD04nTbagdM4FOuF+NXucDRmt6fBaPRXzD+nHrS KC+wc73ES5vYvileFz9rlSxE4yFsvh2PKBAwsAQgVyYN6/rnLd2RPk59zn2rbZpg 2PSQGtikDh+cdkShvXxI9PulqNPbJpo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:14 2025 by rpki-client