$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: fUoEtFPiSQRNl0huUlmbpFLfGHxktVpNRXAZjYkoRFk= Subject key identifier: 52:8E:89:9D:5A:2C:CA:27:3E:24:3D:E0:57:CB:D7:49:B6:7E:2E:59 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 3462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 3462 Signing time: Fri 04 Apr 2025 15:21:27 +0000 Manifest this update: Fri 04 Apr 2025 15:21:26 +0000 Manifest next update: Fri 11 Apr 2025 15:21:26 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: jAjyJpkotoVzmLQaGfgN93n142n+FIK6ULoRH/7E5GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13410 (0x3462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C Validity Not Before: Apr 4 15:21:26 2025 GMT Not After : Apr 11 15:21:26 2025 GMT Subject: CN=67eff8f7-caa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:21:06:e3:c5:35:2d:6d:1b:68:9b:db:0c: fd:8f:f1:e5:53:e6:d3:44:a6:24:a1:8a:67:ae:ef: b6:c3:08:07:78:54:c4:1d:fb:38:d9:fb:ae:01:2b: 47:9c:b8:43:7c:c1:cd:7d:60:ac:71:69:e3:9d:a6: 29:f2:a8:f6:c1:f8:f2:26:5f:ea:24:5a:dd:2d:0f: 02:e0:fe:60:b7:9c:8c:ba:4e:19:a8:ef:8a:fc:30: 06:ee:8a:9d:34:52:aa:ed:df:35:ba:81:3b:52:d7: 9f:e1:45:4f:ea:2c:eb:5b:64:6f:8f:86:a7:4a:6e: 73:3f:9f:3e:02:13:01:11:9b:f8:2e:99:98:19:7e: de:8c:6e:48:db:b6:cd:38:63:63:d4:0a:38:19:f5: 48:eb:56:04:5d:83:2c:79:70:75:c7:70:83:04:4b: de:b7:bb:da:da:e6:b1:ac:89:25:83:2b:0f:04:52: 82:3c:b6:02:02:ac:d5:1c:4a:69:0b:03:82:13:d5: 66:10:27:6f:1c:d7:25:2d:b3:d0:89:15:a4:86:88: 45:54:50:f5:cf:6b:cb:ea:13:1b:3b:3e:2d:28:9a: 63:01:68:b0:bf:17:9e:56:52:9f:e2:25:14:90:b1: cc:8e:8b:34:34:3b:51:b6:86:4b:ac:7c:32:c6:60: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8E:89:9D:5A:2C:CA:27:3E:24:3D:E0:57:CB:D7:49:B6:7E:2E:59 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:60:76:10:cb:fd:be:e9:cd:37:c7:f4:9a:b2:dd:60:de:32: 98:e6:6b:0a:99:c5:8f:35:77:46:d8:cf:f9:1c:59:0c:3e:71: b4:83:fc:21:b9:8f:9b:ed:35:69:d5:fa:14:52:9b:ce:56:dc: 8c:f5:31:38:6f:79:a6:e4:2c:e1:8f:4f:e8:fd:2f:ff:40:bb: 76:4e:0d:36:cc:9b:d7:10:2f:8b:8f:88:e4:fa:44:ed:9b:e8: 13:59:8e:3c:57:09:05:87:a2:81:d1:a9:ff:8d:9b:bd:ee:07: 39:04:5b:a7:ba:12:1c:b6:64:25:12:73:3b:8d:d0:eb:a2:5c: 71:2c:d3:d8:65:3d:4e:53:e4:f1:ec:4e:9c:01:0f:f4:36:cf: e1:40:de:dc:6a:2b:f1:5f:8a:24:b5:21:85:44:e4:10:b5:6f: e7:93:83:86:7e:fd:bc:ba:1b:fe:ec:3b:c9:b9:42:43:79:dc: fa:96:8a:a3:e6:ae:ec:37:86:e0:d7:6f:d1:72:e7:c5:e3:d7: 0f:16:3c:90:ae:02:3c:cb:67:b5:a3:34:68:d7:43:63:ef:95: 70:8a:c8:e4:41:3d:f2:4b:75:29:14:3e:c9:17:c5:de:83:3e: 09:e9:95:5d:4b:e4:95:cf:8d:3a:73:80:ea:56:c1:e8:1a:0b: b0:53:b5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjUwNDA0MTUyMTI2WhcNMjUwNDExMTUyMTI2WjAYMRYwFAYD VQQDEw02N2VmZjhmNy1jYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+0hBuPFNS1tG2ib2wz9j/HlU+bTRKYkoYpnru+2wwgHeFTEHfs42fuuAStH nLhDfMHNfWCscWnjnaYp8qj2wfjyJl/qJFrdLQ8C4P5gt5yMuk4ZqO+K/DAG7oqd NFKq7d81uoE7Utef4UVP6izrW2Rvj4anSm5zP58+AhMBEZv4LpmYGX7ejG5I27bN OGNj1Ao4GfVI61YEXYMseXB1x3CDBEvet7va2uaxrIklgysPBFKCPLYCAqzVHEpp CwOCE9VmECdvHNclLbPQiRWkhohFVFD1z2vL6hMbOz4tKJpjAWiwvxeeVlKf4iUU kLHMjos0NDtRtoZLrHwyxmDgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKOiZ1a LMonPiQ94FfL10m2fi5ZMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGYHYQy/2+6c03x/Sast1g3jKY5msKmcWPNXdG2M/5HFkMPnG0g/wh uY+b7TVp1foUUpvOVtyM9TE4b3mm5Czhj0/o/S//QLt2Tg02zJvXEC+Lj4jk+kTt m+gTWY48VwkFh6KB0an/jZu97gc5BFunuhIctmQlEnM7jdDrolxxLNPYZT1OU+Tx 7E6cAQ/0Ns/hQN7caivxX4oktSGFROQQtW/nk4OGfv28uhv+7DvJuUJDedz6loqj 5q7sN4bg12/RcufF49cPFjyQrgI8y2e1ozRo10Nj75VwisjkQT3yS3UpFD7JF8Xe gz4J6ZVdS+SVz406c4DqVsHoGguwU7XK -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:58 2025 by rpki-client