$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: isNmrQKQR1lpha+5rYomMhASJTyGWPUtPz30PxgDv9Y= Subject key identifier: B1:1D:DF:0A:E4:B2:5F:18:5F:F4:83:A6:46:7F:60:81:DF:2D:BD:38 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 03C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 03BD Signing time: Wed 09 Apr 2025 00:23:24 +0000 Manifest this update: Wed 09 Apr 2025 00:23:23 +0000 Manifest next update: Wed 16 Apr 2025 00:23:23 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: w1AWOoC8jFT+68Ea6+u4I9wIF/4ijI+tOWAVICruj7s=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9 Validity Not Before: Apr 9 00:23:23 2025 GMT Not After : Apr 16 00:23:23 2025 GMT Subject: CN=67f5bdfb-3dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:72:84:5f:2a:d4:53:c8:40:89:d4:80:06: bb:d2:af:dc:0b:d3:4e:58:a5:65:c8:a1:89:d7:62: 2b:6b:8c:85:ca:9d:74:8d:ae:1d:45:7c:bc:68:03: f1:10:7a:c5:9a:f5:5a:ae:88:4f:f4:63:e5:3c:00: 6b:52:e5:34:fe:be:77:81:46:a4:96:59:79:29:7e: ab:97:93:57:6a:24:25:e9:fb:4a:a0:39:44:af:71: 79:1e:8a:1b:90:38:0c:e4:47:8c:91:ac:26:44:94: 8a:ac:eb:e2:61:68:30:92:ce:d8:f0:5e:30:19:98: 5e:0b:fb:2f:65:d3:be:fc:00:07:01:38:9f:3d:88: 9b:26:1e:fb:fb:b6:fe:59:91:60:20:38:2c:ae:fa: f1:c6:47:a9:07:5a:22:4d:ab:df:59:fd:09:d9:4a: c1:a1:71:6e:1b:33:d1:45:9e:08:c8:d6:01:a4:00: 64:5b:1b:03:60:14:5f:4c:e2:34:8e:74:d7:8c:68: 65:7f:2b:a8:bc:8a:59:ae:4e:8f:7b:6a:d8:bb:6a: bf:c9:4d:36:69:0e:93:38:96:01:56:40:f3:67:0c: 51:48:e0:46:14:59:ba:e6:02:79:4a:58:49:b2:e5: 6e:11:09:35:ec:3b:e7:8f:69:ce:89:b2:4c:fe:c1: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:DF:0A:E4:B2:5F:18:5F:F4:83:A6:46:7F:60:81:DF:2D:BD:38 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:dc:01:6f:e5:3d:f3:a5:d1:c6:24:5d:ac:0c:a3:01:c1:01: 12:e6:15:d8:70:40:6a:2c:6f:db:10:ba:7f:63:4e:af:3e:e8: 2e:ee:15:8a:bb:6c:20:cd:b9:26:0d:7c:0e:9e:5b:10:fb:91: 6f:f8:aa:06:85:98:f3:2d:6f:cc:5f:2a:96:6b:12:fa:27:65: bb:26:5b:1d:9f:75:15:ae:05:59:45:61:c0:cc:bb:30:50:ad: 05:cc:58:14:34:5e:dc:af:d9:91:40:34:bb:fc:cf:01:14:c7: 2b:b8:81:e8:94:c1:1b:38:53:7d:df:dc:07:99:43:60:c6:5f: f0:a9:8e:ae:7a:01:e7:6d:2f:3b:4d:81:de:73:e9:f4:81:64: b2:57:26:25:ad:45:df:73:60:39:c3:c2:b5:f1:0a:8f:a7:33: 62:65:48:6a:9f:7d:54:6f:b7:80:81:1e:32:01:0a:a5:3a:ff: bf:51:66:92:5d:ac:8d:5a:15:e7:87:1e:06:67:d4:24:7a:64: a7:bc:4c:d1:62:77:45:a8:bf:ad:32:91:7a:62:bf:fb:a1:fb: 72:53:42:ba:98:33:1e:d2:4d:40:cd:23:72:3b:81:67:f1:c3: 87:32:c0:47:12:35:56:79:35:5c:80:bc:3d:28:57:f9:07:b9: 87:84:cd:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUwNDA5MDAyMzIzWhcNMjUwNDE2MDAyMzIzWjAYMRYwFAYD VQQDEw02N2Y1YmRmYi0zZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZxyhF8q1FPIQInUgAa70q/cC9NOWKVlyKGJ12Ira4yFyp10ja4dRXy8aAPx EHrFmvVarohP9GPlPABrUuU0/r53gUaklll5KX6rl5NXaiQl6ftKoDlEr3F5Hoob kDgM5EeMkawmRJSKrOviYWgwks7Y8F4wGZheC/svZdO+/AAHATifPYibJh77+7b+ WZFgIDgsrvrxxkepB1oiTavfWf0J2UrBoXFuGzPRRZ4IyNYBpABkWxsDYBRfTOI0 jnTXjGhlfyuovIpZrk6Pe2rYu2q/yU02aQ6TOJYBVkDzZwxRSOBGFFm65gJ5SlhJ suVuEQk17Dvnj2nOibJM/sHqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEd3wrk sl8YX/SDpkZ/YIHfLb04MB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA93AFv5T3zpdHGJF2sDKMBwQES5hXYcEBqLG/bELp/Y06vPugu7hWK u2wgzbkmDXwOnlsQ+5Fv+KoGhZjzLW/MXyqWaxL6J2W7Jlsdn3UVrgVZRWHAzLsw UK0FzFgUNF7cr9mRQDS7/M8BFMcruIHolMEbOFN939wHmUNgxl/wqY6uegHnbS87 TYHec+n0gWSyVyYlrUXfc2A5w8K18QqPpzNiZUhqn31Ub7eAgR4yAQqlOv+/UWaS XayNWhXnhx4GZ9QkemSnvEzRYndFqL+tMpF6Yr/7oftyU0K6mDMe0k1AzSNyO4Fn 8cOHMsBHEjVWeTVcgLw9KFf5B7mHhM38 -----END CERTIFICATE-----Generated at Fri Apr 11 15:55:25 2025 by rpki-client