$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: z9sOn/spKR0+Fp5ysSdRMxmBRTKYIXv8Fk0wz0V4mKs= Subject key identifier: 4C:8A:3F:11:79:C1:4E:1C:69:30:3A:7C:BE:D2:C9:30:BB:B5:5E:A4 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 1B Signing time: Sat 29 Mar 2025 07:14:51 +0000 Manifest this update: Sat 29 Mar 2025 07:14:50 +0000 Manifest next update: Sat 05 Apr 2025 07:14:50 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: 7RRpJRRPk4dx0qVlTabBG3qcvQHy3jV8x95lDxiD4ds=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58 Validity Not Before: Mar 29 07:14:50 2025 GMT Not After : Apr 5 07:14:50 2025 GMT Subject: CN=67e79dea-d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:c3:6f:58:26:43:33:b2:c3:81:34:cf:f4: 5c:a0:b5:52:ed:c3:bd:f2:cc:b1:1a:4c:94:47:90: a6:50:c3:b8:9c:fc:0f:95:61:e7:1f:db:f3:08:8e: 53:56:ff:fb:b1:5a:85:2d:d1:39:a2:4e:df:6b:8c: 5e:a5:9e:e7:37:55:04:01:b9:97:36:2e:a2:64:58: 3d:a0:de:9d:56:41:a1:c6:97:00:eb:90:8b:df:d0: 25:06:e5:ad:e5:01:c5:4c:af:1d:b7:d4:1d:a0:af: 92:97:d4:f4:b7:e0:d6:2b:91:8e:82:ea:4d:b3:e3: 4e:70:20:02:7e:17:e9:25:db:3a:03:4e:02:6a:5b: 05:dc:1d:17:e6:64:b6:4c:db:c5:be:3a:f1:f2:83: c1:d7:91:30:7e:9d:7e:42:03:d6:ec:ea:22:af:b3: e2:e1:16:85:e9:31:19:10:25:13:6c:e3:04:c2:75: ab:3c:0a:6b:26:06:bc:52:08:8d:d0:35:dd:40:36: c9:12:ea:f3:fe:3a:81:02:30:6f:22:c9:de:a4:cc: 81:aa:ce:fb:b5:47:51:0e:6d:a6:06:3a:30:70:a1: 73:2a:6a:f3:54:32:e2:04:80:3c:be:e4:c3:17:da: 60:77:96:9c:b0:2a:53:5b:85:86:d4:aa:42:40:c6: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8A:3F:11:79:C1:4E:1C:69:30:3A:7C:BE:D2:C9:30:BB:B5:5E:A4 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d8:15:67:91:aa:59:c0:58:bc:14:47:35:0a:e2:61:76:92: 40:f5:f3:03:22:89:49:bc:66:54:f5:bb:7f:01:70:bb:d1:99: db:52:25:56:8f:96:44:55:1f:a8:03:d7:76:84:b4:5b:50:bd: 10:00:82:24:47:2c:91:cd:b5:5f:7a:79:d4:fa:11:e2:71:5d: 69:02:56:88:bb:8c:a3:02:0e:cb:a7:c6:b9:44:5e:29:11:f2: 78:eb:7d:6e:eb:bd:f3:90:d2:49:ad:57:3d:3f:21:4d:80:5e: ec:8f:ea:e3:bd:be:34:74:77:c9:db:8f:1c:3a:03:35:8f:74: f0:9d:8a:c6:b8:e0:d1:ba:2b:fe:fe:dc:00:ac:a4:f8:50:6e: 30:13:40:9c:ce:df:26:8c:94:5d:33:63:da:6a:12:c6:9f:20: 73:bd:96:38:5c:fe:67:33:96:9b:88:ca:8a:04:6c:cf:fe:bb: 63:aa:a4:9c:0b:24:81:0e:c5:87:79:62:81:16:ea:dd:3e:e0: 7a:2c:62:e1:a1:3c:5e:99:0a:ed:0b:35:ce:31:18:e1:f4:05: 16:d0:ca:b2:36:a2:47:8f:36:00:05:dd:6e:b3:b5:ed:58:b8: ae:06:23:7d:5e:7c:05:0e:e1:8f:f8:6f:13:39:af:9e:29:ab: bf:b1:aa:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTAzMjkwNzE0NTBaFw0yNTA0MDUwNzE0NTBaMBgxFjAUBgNV BAMTDTY3ZTc5ZGVhLWQzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK6sNvWCZDM7LDgTTP9FygtVLtw73yzLEaTJRHkKZQw7ic/A+VYecf2/MIjlNW //uxWoUt0TmiTt9rjF6lnuc3VQQBuZc2LqJkWD2g3p1WQaHGlwDrkIvf0CUG5a3l AcVMrx231B2gr5KX1PS34NYrkY6C6k2z405wIAJ+F+kl2zoDTgJqWwXcHRfmZLZM 28W+OvHyg8HXkTB+nX5CA9bs6iKvs+LhFoXpMRkQJRNs4wTCdas8CmsmBrxSCI3Q Nd1ANskS6vP+OoECMG8iyd6kzIGqzvu1R1EObaYGOjBwoXMqavNUMuIEgDy+5MMX 2mB3lpywKlNbhYbUqkJAxiv/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTIo/EXnB ThxpMDp8vtLJMLu1XqQwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJfYFWeRqlnAWLwURzUK4mF2kkD18wMiiUm8ZlT1u38BcLvRmdtSJVaP lkRVH6gD13aEtFtQvRAAgiRHLJHNtV96edT6EeJxXWkCVoi7jKMCDsunxrlEXikR 8njrfW7rvfOQ0kmtVz0/IU2AXuyP6uO9vjR0d8nbjxw6AzWPdPCdisa44NG6K/7+ 3ACspPhQbjATQJzO3yaMlF0zY9pqEsafIHO9ljhc/mczlpuIyooEbM/+u2OqpJwL JIEOxYd5YoEW6t0+4HosYuGhPF6ZCu0LNc4xGOH0BRbQyrI2okePNgAF3W6zte1Y uK4GI31efAUO4Y/4bxM5r54pq7+xqqE= -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:02 2025 by rpki-client