$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: K9YdzrtaFQefhXF8QGk5fUizqNKZ1SAmNWRr4kngT0o= Subject key identifier: 33:46:E6:DD:67:80:73:C3:72:6D:E6:06:EE:FE:CC:2D:35:E7:77:79 Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0B2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0B1A Signing time: Thu 24 Apr 2025 19:08:31 +0000 Manifest this update: Thu 24 Apr 2025 19:08:31 +0000 Manifest next update: Thu 01 May 2025 19:08:31 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: 2Ul/AkwVX1RD3Y1o2who9QtdfAO02cSW1uckA0GjrgQ=) 2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=) 3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Apr 24 19:08:31 2025 GMT Not After : May 1 19:08:31 2025 GMT Subject: CN=680a8c2f-5ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:6f:6f:8e:f9:6f:46:1f:a0:80:0b:e4:3f: ae:8f:b0:8a:46:5f:d1:40:df:52:9d:28:b6:07:58: 5d:dd:6c:31:f4:24:fb:8a:09:c4:6f:74:fb:5e:27: 03:06:36:af:48:c2:70:0a:f7:2e:66:4b:78:93:f1: 51:6b:c4:dd:37:56:df:86:f6:82:1e:da:3c:7d:3f: 6e:2c:a0:bd:f9:f1:ff:29:c3:6d:2e:51:bb:81:f3: cb:26:dc:7f:1c:e7:d9:48:a7:fe:f2:99:93:ec:8e: e9:30:6c:25:51:d8:85:d1:42:aa:3c:ae:bd:5d:7d: 93:38:92:b3:dc:b7:17:16:12:3a:3d:cb:8f:d8:86: ea:33:b8:9e:aa:53:ab:30:38:af:22:17:7a:7b:9a: 85:96:5d:1e:29:8d:ce:02:2d:e6:76:81:3e:85:d8: ea:2e:78:22:26:68:a8:f3:09:44:de:1f:36:bc:67: 12:bf:97:ba:5b:bb:08:c7:13:9a:16:5c:10:37:36: 32:de:5b:9a:e4:80:ec:e9:d4:fa:3b:ab:be:27:bd: bc:9e:b6:49:b1:da:b7:8c:d1:85:e7:44:dd:d1:43: 88:e9:fe:44:b1:b9:2c:01:ee:6a:88:b5:e0:da:e2: 0c:2b:6b:6b:b4:82:7d:ec:f4:fe:1b:74:cf:9e:5a: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:46:E6:DD:67:80:73:C3:72:6D:E6:06:EE:FE:CC:2D:35:E7:77:79 X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:11:b1:98:c5:15:f7:f8:d9:90:2b:a2:ec:a7:ee:dc:63:d7: 1d:25:dc:c1:ca:00:6f:7e:cb:14:ed:70:45:2f:02:7d:dd:c4: da:10:7e:2d:b6:d0:85:00:a5:3e:fe:02:34:cb:e0:24:5e:2a: 6e:eb:70:90:ad:96:80:94:18:68:f3:fb:07:d6:3e:13:07:b8: c7:1e:50:0d:35:d9:c3:24:96:21:9c:01:b8:e8:75:71:51:cd: a5:c7:d6:fc:5f:d3:53:47:55:2d:0d:07:62:1d:73:aa:5a:ad: 49:41:e3:72:a8:1e:a6:8e:dc:ae:fd:f5:91:8e:cf:b5:ae:c5: 85:74:0b:df:10:7b:7b:a2:54:b6:c5:3d:7d:5b:e0:ed:b6:54: 67:ed:ad:20:84:4d:2b:00:72:26:9c:2d:b5:01:db:d9:76:61: 1f:fd:90:d4:68:8e:e0:16:47:bd:5e:36:25:1e:8d:a6:5e:60: cc:74:3c:75:3e:f6:e1:a2:10:95:d7:75:06:82:be:83:b7:a4: 2c:b6:ff:f9:b2:69:d8:85:5a:0d:16:29:31:02:84:db:84:ac: c8:31:80:fb:1a:17:f6:f3:45:9c:4e:34:1e:92:09:19:d3:7f: 1a:86:dc:e5:55:8a:9e:42:77:8e:a9:ad:11:04:4e:be:bb:43: df:55:b3:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjUwNDI0MTkwODMxWhcNMjUwNTAxMTkwODMxWjAYMRYwFAYD VQQDEw02ODBhOGMyZi01ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK9vb475b0YfoIAL5D+uj7CKRl/RQN9SnSi2B1hd3Wwx9CT7ignEb3T7XicD BjavSMJwCvcuZkt4k/FRa8TdN1bfhvaCHto8fT9uLKC9+fH/KcNtLlG7gfPLJtx/ HOfZSKf+8pmT7I7pMGwlUdiF0UKqPK69XX2TOJKz3LcXFhI6PcuP2IbqM7ieqlOr MDivIhd6e5qFll0eKY3OAi3mdoE+hdjqLngiJmio8wlE3h82vGcSv5e6W7sIxxOa FlwQNzYy3lua5IDs6dT6O6u+J728nrZJsdq3jNGF50Td0UOI6f5EsbksAe5qiLXg 2uIMK2trtIJ97PT+G3TPnlobwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNG5t1n gHPDcm3mBu7+zC0153d5MB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChEbGYxRX3+NmQK6Lsp+7cY9cdJdzBygBvfssU7XBFLwJ93cTaEH4t ttCFAKU+/gI0y+AkXipu63CQrZaAlBho8/sH1j4TB7jHHlANNdnDJJYhnAG46HVx Uc2lx9b8X9NTR1UtDQdiHXOqWq1JQeNyqB6mjtyu/fWRjs+1rsWFdAvfEHt7olS2 xT19W+DttlRn7a0ghE0rAHImnC21AdvZdmEf/ZDUaI7gFke9XjYlHo2mXmDMdDx1 PvbhohCV13UGgr6Dt6Qstv/5smnYhVoNFikxAoTbhKzIMYD7Ghf280WcTjQekgkZ 038ahtzlVYqeQneOqa0RBE6+u0PfVbM1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:58 2025 by rpki-client