$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: 9G6yoO+4cxASlTyJnDuyTZPqdk//pkbqSBhEjnn3xmw= Subject key identifier: E9:B3:1C:84:E0:A9:EC:2A:6C:BA:0B:DE:C2:1B:29:FE:42:6A:28:4E Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 037F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 036D Signing time: Sat 29 Mar 2025 01:12:39 +0000 Manifest this update: Sat 29 Mar 2025 01:12:39 +0000 Manifest next update: Sat 05 Apr 2025 01:12:39 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: hFFtETYHdGauykBkNIUZM8pcFxSRn6l9xOiccU7TPBU=) 2: 888790B6CD3A11EF87D85012C4F9AE02.roa (hash: AvFxWnXdXVRW4gSsV2SM184h5qE1FtXhjp3kh4Swn5U=) 3: 38E23C8AACAE11EEAD36566EC4F9AE02.roa (hash: WV0++0ZN/bagS69tHu4GzxXJWra/B4BQBtuEVcU79xQ=) 4: 39B38CD6ACAE11EEAD36566EC4F9AE02.roa (hash: CVz2Xf9+JNVQc+OnMj39alF6Xn/77a8odRw6ivgbb84=) 5: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (hash: PSuOk5hKLAcVmpB6whliDPWrfFKAhRcAnnfVLoCffRg=) 6: 8CA353C4EF5E11EF9E61950EC4F9AE02.roa (hash: 5Blz9K5XE6h6oYg/gQUJxXMDOjmAua+CLgWpZB5MaIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A Validity Not Before: Mar 29 01:12:39 2025 GMT Not After : Apr 5 01:12:39 2025 GMT Subject: CN=67e74907-81bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:e0:80:2b:cd:07:f3:64:92:2c:26:b2:e2: 20:43:75:ed:48:86:89:05:67:47:4b:90:77:10:8f: 7c:aa:97:6b:c6:e8:ff:7f:3c:99:f8:c1:af:31:b0: f5:03:b3:da:7e:0b:10:74:ac:dc:80:2e:11:2a:c4: 0d:c5:69:9e:2e:2f:56:96:ad:ef:3e:df:35:44:b6: 1f:12:08:68:c9:97:a8:27:10:3e:cd:02:02:df:d3: c8:87:9a:7d:5c:a4:db:c8:25:32:be:05:c9:f3:6f: 7c:6e:7d:97:0b:50:7e:c2:0f:9a:b0:46:1c:bc:28: d8:71:f7:70:45:76:60:29:28:b3:a1:d8:a5:9d:57: b1:f4:bb:89:54:c8:79:ec:a7:aa:17:49:cd:a8:44: cf:ec:2e:e2:84:2b:b4:e1:12:15:11:56:84:b7:55: 00:af:1e:80:80:a5:9f:36:82:7e:da:d1:ed:64:de: 44:bb:b3:53:88:99:0a:4d:e8:f0:50:3d:16:b8:6d: 7a:9d:46:8e:9c:4f:5e:8b:24:cb:4b:2b:34:8e:ad: c9:17:b0:ec:60:2b:40:09:68:fb:b6:16:af:1a:6a: 5e:f1:db:b4:c1:62:66:d0:49:24:be:eb:a8:5c:dd: 84:86:08:c4:68:0d:71:b0:78:a5:ca:be:7e:6d:9e: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B3:1C:84:E0:A9:EC:2A:6C:BA:0B:DE:C2:1B:29:FE:42:6A:28:4E X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0e:ea:53:11:78:d6:bb:98:c8:ac:02:b3:dd:f5:a6:80:e6: 35:30:4c:54:4a:a8:f2:29:37:ec:63:c1:ae:36:5d:26:45:31: 2c:93:ac:48:68:ce:9e:77:07:60:9e:ee:1a:10:9f:54:00:ee: d6:3a:cf:bc:36:56:88:25:7a:3f:4d:a7:bc:2f:4c:63:bc:44: b3:63:0f:09:fb:e6:64:fe:8b:ee:28:0a:91:63:2c:5a:0a:36: 85:39:1a:8a:9d:a7:94:db:28:db:15:c1:41:b4:aa:52:f2:b3: f0:b6:61:d3:fd:25:e9:22:e1:4f:ec:a7:24:24:9c:a4:4f:ad: a2:f1:13:16:9b:ed:65:58:e1:79:0d:18:0d:0c:91:b9:de:21: ce:08:1a:5f:8b:1a:72:ac:49:80:d9:c1:f6:5d:2c:a2:d2:5f: 2e:6b:64:52:da:3b:2b:68:73:54:5a:f1:87:f3:d7:75:02:3a: a9:a6:db:f1:ab:5d:96:95:9a:fc:76:0c:b1:a9:78:80:ff:87: 06:5e:4b:02:c4:ae:53:51:84:31:65:4b:14:75:51:8d:d2:38: 2c:20:00:5e:87:f1:57:c3:86:a1:5a:b7:55:37:1c:92:44:ae: 06:48:97:82:9e:6a:9b:a1:a2:1c:92:10:18:41:d8:61:26:4a: ec:9d:04:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwMzI5MDExMjM5WhcNMjUwNDA1MDExMjM5WjAYMRYwFAYD VQQDEw02N2U3NDkwNy04MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYvggCvNB/NkkiwmsuIgQ3XtSIaJBWdHS5B3EI98qpdrxuj/fzyZ+MGvMbD1 A7PafgsQdKzcgC4RKsQNxWmeLi9Wlq3vPt81RLYfEghoyZeoJxA+zQIC39PIh5p9 XKTbyCUyvgXJ8298bn2XC1B+wg+asEYcvCjYcfdwRXZgKSizodilnVex9LuJVMh5 7KeqF0nNqETP7C7ihCu04RIVEVaEt1UArx6AgKWfNoJ+2tHtZN5Eu7NTiJkKTejw UD0WuG16nUaOnE9eiyTLSys0jq3JF7DsYCtACWj7thavGmpe8du0wWJm0Ekkvuuo XN2EhgjEaA1xsHilyr5+bZ7N7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmzHITg qewqbLoL3sIbKf5CaihOMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALDupTEXjWu5jIrAKz3fWmgOY1MExUSqjyKTfsY8GuNl0mRTEsk6xI aM6edwdgnu4aEJ9UAO7WOs+8NlaIJXo/Tae8L0xjvESzYw8J++Zk/ovuKAqRYyxa CjaFORqKnaeU2yjbFcFBtKpS8rPwtmHT/SXpIuFP7KckJJykT62i8RMWm+1lWOF5 DRgNDJG53iHOCBpfixpyrEmA2cH2XSyi0l8ua2RS2jsraHNUWvGH89d1Ajqpptvx q12WlZr8dgyxqXiA/4cGXksCxK5TUYQxZUsUdVGN0jgsIABeh/FXw4ahWrdVNxyS RK4GSJeCnmqboaIckhAYQdhhJkrsnQTq -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:58 2025 by rpki-client