$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: d4j4/528bWsYo55yiKFOWQjkUN4fONhXHMd9WM6ZGvc= Subject key identifier: A4:82:2A:70:12:23:3B:0C:56:96:42:9A:F4:F7:26:3D:D9:02:50:E9 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 025B Signing time: Fri 25 Apr 2025 01:34:12 +0000 Manifest this update: Fri 25 Apr 2025 01:34:12 +0000 Manifest next update: Fri 02 May 2025 01:34:12 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: TuM+zHugNrxtEqQWBL8Eyc+thLfj6W0dyA5mRRbgD/0=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: AMI8B01oJYBvuALPO9a5072lSyPAKpdtjtQhc2T4uR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Apr 25 01:34:12 2025 GMT Not After : May 2 01:34:12 2025 GMT Subject: CN=680ae694-8cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:99:ee:7c:d5:ff:0b:e7:df:8c:61:59:cb: ef:87:17:7c:c0:0d:8e:11:17:8c:7b:b1:c8:05:28: 54:08:98:b6:16:54:f4:54:ff:95:90:ea:16:db:f3: 7b:0c:85:cc:c2:ee:99:17:74:b6:23:03:85:5a:01: 70:60:24:39:9d:be:94:e6:df:e0:48:11:31:a2:b5: d4:60:ea:99:db:18:cc:ff:db:b3:ba:52:91:fd:20: 72:22:1f:8d:12:0f:41:b9:b1:dc:2e:fd:c5:8b:b9: f6:a4:97:6e:f5:76:3d:85:64:08:53:17:87:61:4f: a0:41:25:f6:20:ea:ca:fd:93:c5:42:5d:46:f9:ff: 58:c5:06:63:58:30:d1:6f:c0:e8:f9:d9:64:89:72: 5d:61:44:10:d7:7e:09:df:43:6a:60:4f:39:cd:15: f0:2a:53:d0:16:11:52:98:e0:52:1f:22:1b:2b:66: 95:92:19:cc:91:6a:97:fc:4f:3e:65:38:cd:a3:2f: c9:f6:a5:af:fd:9e:86:d7:57:36:f2:63:ce:f7:dc: f6:67:be:ee:f2:4b:c6:56:fc:30:bf:35:95:c6:07: 25:99:cb:88:ac:da:7f:53:03:09:88:9f:95:13:6b: 17:a2:f0:58:7b:3a:13:6d:64:58:75:c2:85:bf:21: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:82:2A:70:12:23:3B:0C:56:96:42:9A:F4:F7:26:3D:D9:02:50:E9 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ca:83:f7:7f:2a:f6:13:ef:ac:7e:11:e1:8e:49:76:4b:6c: 03:db:9e:4d:af:ec:b3:63:fe:48:7a:1e:62:66:ec:67:04:ea: 66:c8:ef:d3:98:d1:82:f1:d1:d6:72:ca:b9:56:c2:85:0c:42: ae:f9:f2:83:1a:c7:5e:b6:f7:96:54:15:80:2b:ac:b4:05:ed: 30:8a:d3:1a:de:7b:37:fb:aa:f3:ea:85:a5:2e:6b:6e:a5:dd: 75:a5:a3:cc:a5:fa:ef:ad:28:dc:23:a4:26:ab:5b:c9:e3:85: 18:fc:f7:c6:ac:94:a6:63:aa:c4:32:92:4f:61:77:4a:4a:23: ec:9e:50:4c:da:32:2d:25:ec:b9:f8:bb:c4:d4:b6:1c:19:6b: 20:fc:3a:29:59:0f:5f:e4:1e:33:71:ba:6c:94:d7:e6:e9:03: ff:7a:5f:91:c7:44:6a:f0:ef:8b:e7:ac:12:63:26:75:0d:b2: 79:3f:0c:fb:ca:b3:ec:d5:ef:c6:e1:73:7a:b4:dc:57:6f:d6: ca:66:26:ae:4c:ae:cc:82:e2:7f:1f:3a:38:ac:32:5a:b4:9a: 0a:b3:fa:3d:07:0f:f8:bb:16:fa:b3:d9:98:30:69:72:29:09: 86:eb:55:0f:d5:96:7b:bd:9c:c6:87:24:0a:eb:e4:46:0e:37: 0d:9d:b3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUwNDI1MDEzNDEyWhcNMjUwNTAyMDEzNDEyWjAYMRYwFAYD VQQDEw02ODBhZTY5NC04Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo22Z7nzV/wvn34xhWcvvhxd8wA2OEReMe7HIBShUCJi2FlT0VP+VkOoW2/N7 DIXMwu6ZF3S2IwOFWgFwYCQ5nb6U5t/gSBExorXUYOqZ2xjM/9uzulKR/SByIh+N Eg9BubHcLv3Fi7n2pJdu9XY9hWQIUxeHYU+gQSX2IOrK/ZPFQl1G+f9YxQZjWDDR b8Do+dlkiXJdYUQQ134J30NqYE85zRXwKlPQFhFSmOBSHyIbK2aVkhnMkWqX/E8+ ZTjNoy/J9qWv/Z6G11c28mPO99z2Z77u8kvGVvwwvzWVxgclmcuIrNp/UwMJiJ+V E2sXovBYezoTbWRYdcKFvyE1AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSCKnAS IzsMVpZCmvT3Jj3ZAlDpMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3yoP3fyr2E++sfhHhjkl2S2wD255Nr+yzY/5Ieh5iZuxnBOpmyO/T mNGC8dHWcsq5VsKFDEKu+fKDGsdetveWVBWAK6y0Be0witMa3ns3+6rz6oWlLmtu pd11paPMpfrvrSjcI6Qmq1vJ44UY/PfGrJSmY6rEMpJPYXdKSiPsnlBM2jItJey5 +LvE1LYcGWsg/DopWQ9f5B4zcbpslNfm6QP/el+Rx0Rq8O+L56wSYyZ1DbJ5Pwz7 yrPs1e/G4XN6tNxXb9bKZiauTK7MguJ/Hzo4rDJatJoKs/o9Bw/4uxb6s9mYMGly KQmG61UP1ZZ7vZzGhyQK6+RGDjcNnbNY -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:08 2025 by rpki-client