$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json) Hash identifier: RRcLP9n7mOER3cwQTPpK8ImLw1Ph66OXo+wNQTUXvoU= Subject key identifier: 30:BD:4D:FF:78:6C:CE:79:C3:22:A3:57:ED:15:C6:5B:0A:72:99:99 Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft Manifest number: 08E4 Signing time: Mon 14 Apr 2025 20:16:24 +0000 Manifest this update: Mon 14 Apr 2025 20:16:23 +0000 Manifest next update: Mon 21 Apr 2025 20:16:23 +0000 Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: vLaJ3u+oSwgRnAzQmg4OOVplnMTOUqJXn6ACNHZKiNI=) 2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: cT6sVy2cPkGv5IyoVyqlT1wpNogGAW7RrVuiP5uIBJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Apr 14 20:16:23 2025 GMT Not After : Apr 21 20:16:23 2025 GMT Subject: CN=67fd6d17-96fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:32:2e:1e:ba:ad:7e:50:34:49:76:eb:91: b2:64:f8:c4:6a:d3:b4:1f:73:bc:b6:f1:a3:cf:42: 3f:a0:4d:61:f6:5c:66:40:7f:1f:9f:4f:62:5f:fe: 3c:67:f0:b4:8e:ad:a2:15:0b:c3:9c:81:6b:af:84: 5a:71:f3:87:30:a3:92:3d:01:64:8c:06:75:8d:21: b4:32:16:86:9c:18:01:79:63:93:85:4a:1a:61:af: fb:a5:68:1f:19:5c:17:59:c5:7a:03:78:59:bf:75: a7:24:9c:84:a2:fc:8c:84:b9:cb:a7:33:69:1b:e1: 90:c4:e4:dd:b1:29:ed:eb:e9:c6:c5:03:c6:ee:15: a3:9f:f2:b4:f9:b6:fb:6b:76:9b:d8:71:35:48:c3: 2a:53:4d:4e:99:6a:66:97:56:59:e3:78:5d:8a:eb: a2:b1:c4:22:17:2f:dd:b4:ef:ad:81:e5:27:96:58: 8e:0f:67:d2:47:13:c0:be:15:12:32:03:92:38:c6: f4:d4:bd:5c:f1:5a:99:3c:50:ad:4e:d4:4c:5e:a2: e8:4b:86:55:8d:66:6c:22:14:a1:d4:11:9d:8f:17: 9f:db:59:4c:39:f9:b4:f2:06:7d:b6:6c:d4:16:23: ab:01:7f:9c:c2:e2:d0:83:55:58:ce:03:0b:29:d5: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BD:4D:FF:78:6C:CE:79:C3:22:A3:57:ED:15:C6:5B:0A:72:99:99 X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ee:5f:26:04:72:93:6e:39:40:52:f7:78:48:98:46:b4:92: ea:57:a3:5b:62:26:da:73:82:32:fc:48:08:1d:7c:e3:8a:52: 40:8c:4e:9a:cc:76:b6:01:ac:45:dd:56:db:88:61:b9:c7:cd: fe:15:41:88:0f:b0:c8:2c:fc:01:e8:0d:a6:3e:41:3b:4f:bd: 39:13:83:d7:91:0a:9a:ee:f8:17:37:ab:fc:f6:1b:84:88:f2: 3d:c8:d4:d6:27:ae:68:80:56:d7:1c:bc:93:7b:59:92:d2:83: 91:f2:00:ab:00:25:02:a2:c5:20:b5:3b:82:68:65:79:cd:e5: dc:c8:79:95:27:56:af:e5:94:ce:96:97:16:e6:91:54:5c:1b: 01:e4:2e:a1:8c:bb:c6:a1:49:6f:0c:66:9b:28:95:61:14:e2: 45:81:78:95:b5:74:5b:74:27:57:0f:6b:80:ee:b8:70:ac:9d: 6a:b6:a5:0c:30:fc:ce:4c:50:85:e4:5f:fe:87:1f:40:2e:e3: 34:c3:53:7d:06:f9:a2:7a:aa:6b:85:6a:3e:bc:98:61:78:96: 80:49:e1:f3:72:0d:dc:86:d3:f1:83:e3:1f:46:41:c2:ee:cc: e7:14:43:e4:28:7b:d8:43:e6:4a:05:6a:86:e8:90:c8:e3:81: 0d:6d:e1:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjUwNDE0MjAxNjIzWhcNMjUwNDIxMjAxNjIzWjAYMRYwFAYD VQQDEw02N2ZkNmQxNy05NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5cyLh66rX5QNEl265GyZPjEatO0H3O8tvGjz0I/oE1h9lxmQH8fn09iX/48 Z/C0jq2iFQvDnIFrr4RacfOHMKOSPQFkjAZ1jSG0MhaGnBgBeWOThUoaYa/7pWgf GVwXWcV6A3hZv3WnJJyEovyMhLnLpzNpG+GQxOTdsSnt6+nGxQPG7hWjn/K0+bb7 a3ab2HE1SMMqU01OmWpml1ZZ43hdiuuiscQiFy/dtO+tgeUnlliOD2fSRxPAvhUS MgOSOMb01L1c8VqZPFCtTtRMXqLoS4ZVjWZsIhSh1BGdjxef21lMOfm08gZ9tmzU FiOrAX+cwuLQg1VYzgMLKdWfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC9Tf94 bM55wyKjV+0VxlsKcpmZMB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzAwNS84Q0E2ODI3NkFBRTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9N ZjZmWHE1bUoyaU5EM3RMQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa7l8mBHKTbjlAUvd4SJhGtJLqV6NbYibac4Iy/EgIHXzjilJAjE6a zHa2AaxF3VbbiGG5x83+FUGID7DILPwB6A2mPkE7T705E4PXkQqa7vgXN6v89huE iPI9yNTWJ65ogFbXHLyTe1mS0oOR8gCrACUCosUgtTuCaGV5zeXcyHmVJ1av5ZTO lpcW5pFUXBsB5C6hjLvGoUlvDGabKJVhFOJFgXiVtXRbdCdXD2uA7rhwrJ1qtqUM MPzOTFCF5F/+hx9ALuM0w1N9BvmieqprhWo+vJhheJaASeHzcg3chtPxg+MfRkHC 7sznFEPkKHvYQ+ZKBWqG6JDI44ENbeEk -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:26 2025 by rpki-client