$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: WD3dOTSMwboEqNPQ4IEvGa0BCscQdOx8ZxgqGdqxpxE= Subject key identifier: A6:BF:B6:E6:71:1D:E3:22:03:52:96:D7:49:DD:65:74:B1:E1:72:9E Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1EF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1EE5 Signing time: Fri 04 Apr 2025 16:05:12 +0000 Manifest this update: Fri 04 Apr 2025 16:05:11 +0000 Manifest next update: Fri 11 Apr 2025 16:05:11 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: MnnBQrAEYrl+XEmRB7FbzFdH/12Aj8wHWsPXD52ZgIk=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: N8CiTad7+YCKPe2opBHwCiq7VtSImphL9JYd7EN47KQ=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7929 (0x1ef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB Validity Not Before: Apr 4 16:05:11 2025 GMT Not After : Apr 11 16:05:11 2025 GMT Subject: CN=67f00338-c1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:04:bc:0b:95:12:99:58:1e:41:27:43:ae: 45:a0:96:19:bd:b8:d5:fd:5f:57:e9:cd:41:96:2e: a6:49:a8:e9:25:07:6e:3a:74:a8:1c:8c:c4:b4:56: 7c:a0:ce:bb:46:1d:6e:c4:cb:d8:0c:ca:35:9d:c6: f7:ad:2a:88:bf:c4:c0:5d:79:d7:60:9a:b2:b7:ea: b4:87:48:99:5d:48:4e:27:23:03:db:a4:08:a1:7c: 5e:75:92:1d:d3:cc:4b:bf:07:3c:25:d7:cd:66:6f: 4b:e1:46:f2:d0:c0:74:f5:e8:d0:a5:83:9b:2a:bd: 82:06:a7:b8:b9:ab:43:54:10:02:98:69:9f:6b:03: 91:17:cb:fb:52:e5:0e:40:6c:9b:eb:68:98:b7:6a: c0:c9:e8:98:a3:93:fb:80:a1:a2:1b:b6:95:3a:58: 7e:d7:e5:5f:1f:52:dd:5d:09:f7:64:62:08:e3:8c: 74:81:5d:bd:10:6d:a2:00:4c:3f:46:59:01:99:bc: d9:a8:68:cb:62:5f:78:e6:77:98:58:ff:0f:72:73: 1b:c8:5b:96:0e:89:5b:de:04:c4:c6:67:d3:35:c9: b1:6f:62:e2:dc:a2:c6:fc:f6:d7:d1:1e:46:ad:c9: ac:49:af:6d:e3:18:40:2f:15:12:eb:6e:3e:7d:a3: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:B6:E6:71:1D:E3:22:03:52:96:D7:49:DD:65:74:B1:E1:72:9E X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:74:37:c8:5c:33:66:dc:07:a4:19:15:7d:05:ee:4f:a0:0f: a9:ff:67:83:d2:7c:14:e4:c6:b2:3b:55:a4:40:ec:f4:12:53: 2f:ed:65:16:67:9c:20:b0:37:dc:21:d4:d4:40:80:d9:42:52: 5e:03:a0:30:f2:91:f6:e5:6b:93:17:e7:a8:34:e7:0f:64:95: 41:ad:9d:ba:52:fc:d7:bf:87:63:ed:a3:2c:2b:c2:20:da:13: 84:2c:b3:59:79:45:00:2b:f5:12:f4:85:8c:11:1a:d7:7f:59: 78:4a:84:4c:db:34:4d:80:a7:7c:98:6c:68:e0:55:84:b3:f0: ce:bf:b2:9b:67:1b:5f:14:45:a7:70:16:07:0a:89:ac:0e:27: cf:05:a7:4f:6d:09:2e:c8:3c:04:26:15:54:29:ae:41:2e:9b: e9:f4:0e:79:64:3f:2e:2b:d0:6d:f2:ba:3b:ac:ae:4f:0f:ea: 5d:9e:c4:5a:0e:f6:d0:b2:7a:de:10:7f:85:a2:2a:10:2d:6e: 14:41:a0:fa:82:c2:6e:89:da:62:d5:11:5a:cc:60:6f:67:e8: e5:37:7b:a0:5a:dc:cf:04:a2:35:ed:f2:d5:9f:3b:33:5e:19: 7a:ed:00:9d:64:a9:cd:b7:4e:5d:f9:3b:3d:9b:f1:7a:5b:5c: 53:fd:63:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjUwNDA0MTYwNTExWhcNMjUwNDExMTYwNTExWjAYMRYwFAYD VQQDEw02N2YwMDMzOC1jMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fkEvAuVEplYHkEnQ65FoJYZvbjV/V9X6c1Bli6mSajpJQduOnSoHIzEtFZ8 oM67Rh1uxMvYDMo1ncb3rSqIv8TAXXnXYJqyt+q0h0iZXUhOJyMD26QIoXxedZId 08xLvwc8JdfNZm9L4Uby0MB09ejQpYObKr2CBqe4uatDVBACmGmfawORF8v7UuUO QGyb62iYt2rAyeiYo5P7gKGiG7aVOlh+1+VfH1LdXQn3ZGII44x0gV29EG2iAEw/ RlkBmbzZqGjLYl945neYWP8PcnMbyFuWDolb3gTExmfTNcmxb2Li3KLG/PbX0R5G rcmsSa9t4xhALxUS624+faMBSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa/tuZx HeMiA1KW10ndZXSx4XKeMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5dDfIXDNm3AekGRV9Be5PoA+p/2eD0nwU5MayO1WkQOz0ElMv7WUW Z5wgsDfcIdTUQIDZQlJeA6Aw8pH25WuTF+eoNOcPZJVBrZ26UvzXv4dj7aMsK8Ig 2hOELLNZeUUAK/US9IWMERrXf1l4SoRM2zRNgKd8mGxo4FWEs/DOv7KbZxtfFEWn cBYHComsDifPBadPbQkuyDwEJhVUKa5BLpvp9A55ZD8uK9Bt8ro7rK5PD+pdnsRa DvbQsnreEH+FoioQLW4UQaD6gsJuidpi1RFazGBvZ+jlN3ugWtzPBKI17fLVnzsz Xhl67QCdZKnNt05d+Ts9m/F6W1xT/WNO -----END CERTIFICATE-----Generated at Sun Apr 6 15:01:49 2025 by rpki-client