$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: NNoXKre0kHXyaWOHokgBScEHeK/ylQN9z88gNBfUcTQ= Subject key identifier: CC:DC:27:D9:2F:54:8F:17:5A:76:CF:10:D8:DA:38:E1:EC:9C:6C:B0 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 024D Signing time: Sat 29 Mar 2025 02:04:38 +0000 Manifest this update: Sat 29 Mar 2025 02:04:38 +0000 Manifest next update: Sat 05 Apr 2025 02:04:38 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: g1KTDY5EAmu0Apw6ZIHKLBJWdiaN/gYwgGRQlPgFYL0=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: /RoBHSg+ngqFh2UJ3g0lpB7Yit0McfV7uuriZB6CNaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E Validity Not Before: Mar 29 02:04:38 2025 GMT Not After : Apr 5 02:04:38 2025 GMT Subject: CN=67e75536-865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:f1:f2:09:8d:e6:72:c2:34:37:9d:02:4c: a7:e2:86:4d:1d:e0:8a:0c:0d:e1:75:79:ab:60:ee: 77:e7:68:be:8c:eb:cf:90:f3:37:51:4e:b4:33:4c: 75:0e:d5:e6:c5:52:7d:4c:a9:4f:24:be:22:57:c2: 1d:87:e0:00:1f:98:0c:ab:35:11:75:4a:a2:2a:3d: 9a:52:e1:42:37:eb:22:93:02:69:4a:7c:f9:b5:ed: 58:5e:1d:0e:21:98:f2:9f:89:66:54:4d:37:c7:47: cb:57:9f:12:34:d6:f6:96:2d:5c:39:cf:54:6f:4b: f0:7f:a0:3a:46:ea:c7:eb:62:6b:6c:0b:92:2b:44: 2d:8a:85:93:98:f0:f8:34:2f:88:18:92:d6:3d:5d: c9:f2:34:26:b3:fc:01:3e:2a:0f:9a:9f:04:c9:25: 88:4f:77:27:0d:c3:3c:f5:dd:a5:53:ee:89:43:66: fd:9d:76:a1:a7:7a:f1:59:8d:00:7f:16:fb:9b:f3: 20:db:df:61:f1:58:8b:41:dc:cc:5f:35:bb:f3:78: a0:d2:da:a0:4a:ee:43:2c:ae:f2:47:fd:27:a5:f6: c0:5e:78:5d:60:f3:e7:e0:3a:2d:6f:7e:d5:bc:92: ff:7a:e6:f1:ae:c0:84:8b:4f:da:cd:74:81:25:dd: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:27:D9:2F:54:8F:17:5A:76:CF:10:D8:DA:38:E1:EC:9C:6C:B0 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8d:a6:21:6c:09:6f:30:0b:7c:79:9c:d3:de:69:5b:69:d8: ce:5a:c9:35:5b:51:29:3c:23:fd:ef:74:19:47:2d:2f:4e:9b: e8:3d:3c:9f:24:19:f3:d8:4e:97:8c:a5:79:2d:20:dd:6a:ac: 69:2e:10:c4:db:44:04:3b:56:4b:11:b3:7b:0c:d9:01:4e:f4: 0f:b1:0a:fb:94:53:44:1c:05:6b:3d:f9:0d:a7:d4:47:65:ac: d3:b3:4d:0b:3a:77:3c:ed:cb:95:ab:6b:ac:fe:2c:ea:27:5e: eb:54:82:de:45:e6:0f:f1:a8:b5:e8:3d:de:97:62:9d:c2:06: 84:7e:32:87:b0:4d:06:6c:c6:c6:c0:40:1e:dd:6c:16:1b:69: 93:6e:0d:76:60:e1:b5:06:0e:37:dc:d9:a8:31:d8:83:01:5f: b0:f2:e0:0f:d1:bf:75:4e:8a:af:f2:d0:ea:70:32:c0:21:8b: 4a:a7:c2:23:b8:6b:a9:14:c4:a5:4e:ad:ca:91:28:82:e2:48: 78:88:21:2b:ab:f5:57:1f:88:53:d9:a4:ee:57:22:e6:32:86: 28:55:e0:9a:52:e7:e2:8c:b7:32:16:c8:88:cb:d9:5c:51:63: 82:61:e8:1d:27:ae:9e:63:50:9e:07:8f:b5:89:a6:eb:fe:f7: 77:81:7c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjUwMzI5MDIwNDM4WhcNMjUwNDA1MDIwNDM4WjAYMRYwFAYD VQQDEw02N2U3NTUzNi04NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7Dx8gmN5nLCNDedAkyn4oZNHeCKDA3hdXmrYO5352i+jOvPkPM3UU60M0x1 DtXmxVJ9TKlPJL4iV8Idh+AAH5gMqzURdUqiKj2aUuFCN+sikwJpSnz5te1YXh0O IZjyn4lmVE03x0fLV58SNNb2li1cOc9Ub0vwf6A6RurH62JrbAuSK0QtioWTmPD4 NC+IGJLWPV3J8jQms/wBPioPmp8EySWIT3cnDcM89d2lU+6JQ2b9nXahp3rxWY0A fxb7m/Mg299h8ViLQdzMXzW783ig0tqgSu5DLK7yR/0npfbAXnhdYPPn4Dotb37V vJL/eubxrsCEi0/azXSBJd1CgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzcJ9kv VI8XWnbPENjaOOHsnGywMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0jaYhbAlvMAt8eZzT3mlbadjOWsk1W1EpPCP973QZRy0vTpvoPTyf JBnz2E6XjKV5LSDdaqxpLhDE20QEO1ZLEbN7DNkBTvQPsQr7lFNEHAVrPfkNp9RH ZazTs00LOnc87cuVq2us/izqJ17rVILeReYP8ai16D3el2KdwgaEfjKHsE0GbMbG wEAe3WwWG2mTbg12YOG1Bg433NmoMdiDAV+w8uAP0b91Toqv8tDqcDLAIYtKp8Ij uGupFMSlTq3KkSiC4kh4iCErq/VXH4hT2aTuVyLmMoYoVeCaUufijLcyFsiIy9lc UWOCYegdJ66eY1CeB4+1iabr/vd3gXzh -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:10 2025 by rpki-client