$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: aKvzCdqfA9Klg7V6xw3QzbYtQwPScOsFS8cM8gDwUmQ= Subject key identifier: 58:79:13:3D:A7:09:25:19:53:F8:BE:9E:5D:CA:F5:06:01:F3:70:2B Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0CEB Signing time: Fri 04 Apr 2025 18:13:34 +0000 Manifest this update: Fri 04 Apr 2025 18:13:33 +0000 Manifest next update: Fri 11 Apr 2025 18:13:33 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: 1rPlOxkRfINfwlAI6G2rraY0kf3xEvLB+nV3Xe8VZAQ=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: A3euC+JMbFaWVx5aIIYMhJy2o8x3eQCdnzPijIO/OPI=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: /lCYyr/ggNz4m2hSHph8iFrUwvAmVOifZgcsV4MIeXY=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: dYlMryTZgDYlMwbzeqzaAmjgFNBL4klqki3/QbfzqsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B Validity Not Before: Apr 4 18:13:33 2025 GMT Not After : Apr 11 18:13:33 2025 GMT Subject: CN=67f0214e-60da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3f:9c:b1:e6:95:03:e2:0d:40:fe:1d:d8:56: 88:dd:93:88:ad:ba:11:d8:40:89:ff:e4:6f:a3:a5: a1:cb:c9:7b:23:49:2f:8e:55:50:99:fb:64:88:c7: 4f:ba:07:5f:3b:21:10:e4:1f:db:0f:c0:a8:06:0a: 9e:3f:c4:af:a7:c4:9d:71:ee:0c:ed:4b:96:2a:ce: ce:e2:cf:14:03:5b:88:7f:75:08:62:6c:f8:01:2e: 15:33:a9:52:d9:c4:fd:45:5e:ea:6d:07:40:56:e3: ea:29:1c:7e:05:b7:a9:34:2b:87:45:2b:d3:81:6f: df:2e:37:d9:03:89:10:4a:a3:bd:41:85:6e:05:2a: 0d:64:3c:df:1e:9f:a5:bd:db:1f:2a:b6:15:6f:98: d8:1c:1c:f0:d4:02:1e:58:fe:7f:a4:9b:2b:0a:bc: bc:c7:61:35:45:e8:e9:fe:bf:a2:1f:a1:39:47:19: 15:55:bf:e5:43:54:9d:8d:1e:92:9e:71:aa:e1:01: ad:50:fd:61:e8:45:52:d2:0c:36:a6:dd:2c:b9:d4: 84:f1:20:11:45:cf:19:9c:64:f3:d7:b6:e6:52:c9: c4:11:dc:63:42:d4:bf:a0:7f:83:23:c6:5e:6d:d6: 90:42:ba:e6:18:40:df:9f:c3:60:40:db:c4:4e:3a: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:13:3D:A7:09:25:19:53:F8:BE:9E:5D:CA:F5:06:01:F3:70:2B X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d4:51:4d:04:54:44:3d:94:e2:9d:03:de:74:fb:83:ac:c9: 9d:8a:09:e4:36:1f:08:64:f3:b6:4d:88:8c:a9:e8:20:2d:fa: d8:91:a0:79:81:39:2f:d3:42:4b:f5:68:b9:ba:70:0c:65:71: ba:f5:66:01:ae:e5:ce:2d:fb:7e:cb:00:27:f8:24:b8:39:50: f9:ef:06:01:e1:44:b1:74:87:61:85:90:e9:df:36:57:12:1b: 90:19:c3:7d:7f:0a:d5:75:43:f2:08:cb:14:cc:26:07:d4:cd: 95:74:c9:44:a0:c3:24:13:19:a9:33:33:e5:14:14:55:79:3a: 65:74:0e:32:6b:6b:ec:5c:dd:fb:11:f9:aa:9d:7c:b0:9b:6e: 6c:d3:9e:be:d5:c8:89:c5:de:c4:e9:97:4e:b3:a7:11:b9:9e: b3:bf:d9:65:47:ce:6d:8b:62:5c:44:57:69:1f:0d:cf:a7:26: a3:3c:15:7f:9c:d4:02:6d:a1:af:a6:62:f3:97:62:20:93:e9: 83:fc:03:3b:fe:6d:61:e0:32:58:aa:28:46:16:39:03:b9:cc: 33:7f:fd:a2:54:87:5e:03:c7:99:51:c5:c7:cc:c6:a9:24:24: ea:9f:38:73:08:01:10:65:70:ef:49:ae:77:50:e4:76:f6:7f: d5:fe:ec:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNDA0MTgxMzMzWhcNMjUwNDExMTgxMzMzWjAYMRYwFAYD VQQDEw02N2YwMjE0ZS02MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6z+cseaVA+INQP4d2FaI3ZOIrboR2ECJ/+Rvo6Why8l7I0kvjlVQmftkiMdP ugdfOyEQ5B/bD8CoBgqeP8Svp8Sdce4M7UuWKs7O4s8UA1uIf3UIYmz4AS4VM6lS 2cT9RV7qbQdAVuPqKRx+BbepNCuHRSvTgW/fLjfZA4kQSqO9QYVuBSoNZDzfHp+l vdsfKrYVb5jYHBzw1AIeWP5/pJsrCry8x2E1Rejp/r+iH6E5RxkVVb/lQ1SdjR6S nnGq4QGtUP1h6EVS0gw2pt0sudSE8SARRc8ZnGTz17bmUsnEEdxjQtS/oH+DI8Ze bdaQQrrmGEDfn8NgQNvETjr+vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh5Ez2n CSUZU/i+nl3K9QYB83ArMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1FFNBFREPZTinQPedPuDrMmdignkNh8IZPO2TYiMqeggLfrYkaB5 gTkv00JL9Wi5unAMZXG69WYBruXOLft+ywAn+CS4OVD57wYB4USxdIdhhZDp3zZX EhuQGcN9fwrVdUPyCMsUzCYH1M2VdMlEoMMkExmpMzPlFBRVeTpldA4ya2vsXN37 EfmqnXywm25s056+1ciJxd7E6ZdOs6cRuZ6zv9llR85ti2JcRFdpHw3PpyajPBV/ nNQCbaGvpmLzl2Igk+mD/AM7/m1h4DJYqihGFjkDucwzf/2iVIdeA8eZUcXHzMap JCTqnzhzCAEQZXDvSa53UOR29n/V/uzs -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:04 2025 by rpki-client