$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft File: gyMz5kxMiwtYbe-Te7liSCG4wd8.mft (raw, json) Hash identifier: 0hiEIrOOf1hO9lvuOAst/SAHD46ZLimKnF4xRLFwhhs= Subject key identifier: 3D:33:24:3C:73:10:F2:77:BF:9D:B4:3D:42:A1:17:0C:CB:A1:38:F3 Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF Certificate issuer: /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft Manifest number: 0843 Signing time: Wed 02 Apr 2025 20:46:47 +0000 Manifest this update: Wed 02 Apr 2025 20:46:46 +0000 Manifest next update: Wed 09 Apr 2025 20:46:46 +0000 Files and hashes: 1: gyMz5kxMiwtYbe-Te7liSCG4wd8.crl (hash: kfW2XUhqSwJvuJ1bY1txr0HFzVmDD1NwatcSuTeLcIk=) 2: 8479151EC72011EA8062547CC4F9AE02.roa (hash: a8T2tDSruvMY8XhGVCjDtKcaR5fee/wuPWX28KfJWEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB55 Validity Not Before: Apr 2 20:46:46 2025 GMT Not After : Apr 9 20:46:46 2025 GMT Subject: CN=67eda236-ca74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:55:55:29:0c:d5:2a:9d:90:ed:f7:f0:03: cc:ae:dc:e0:b9:01:8b:c8:c5:89:a3:4c:09:60:a6: 1a:e8:d7:77:67:c3:cd:44:20:7c:91:e3:4a:36:82: 8e:0c:a2:81:23:f1:68:cd:2e:f1:b0:0c:17:a8:e1: b9:7e:b7:83:54:5e:8e:49:de:e8:b0:c3:08:17:a2: a0:bd:2d:e3:76:58:fe:37:2b:44:b2:9f:9f:81:18: df:0c:30:43:c0:8a:8e:59:60:31:1d:96:18:bb:4d: 0b:55:d1:d9:f4:9d:3b:7f:e9:55:b2:cc:84:60:70: 91:61:4a:75:cc:ec:34:cf:c4:fd:eb:e8:4f:cf:26: e5:dc:c8:56:0c:1a:5e:7e:07:a9:4d:0f:0c:08:a2: aa:07:44:ac:91:5a:35:18:40:e6:ca:1e:2e:0c:8c: 09:3b:ad:54:d1:2f:97:89:61:b2:dd:dc:fb:3d:9f: 26:d2:67:ad:b8:61:ff:65:38:85:3a:09:1c:1b:01: db:07:ad:bc:6b:3c:52:26:2d:88:61:89:c9:20:58: d9:8b:a7:19:05:67:43:2d:d3:35:40:0c:d8:fa:63: 42:de:61:c1:cf:5b:ea:7f:3f:dc:f9:41:13:de:dd: b1:c4:2b:05:ae:0b:9e:60:57:e3:6a:b2:63:19:73: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:24:3C:73:10:F2:77:BF:9D:B4:3D:42:A1:17:0C:CB:A1:38:F3 X509v3 Authority Key Identifier: keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d7:d8:da:38:b3:07:8a:c1:20:0d:19:71:9a:b3:9b:7a:55: 19:3f:6f:55:e8:51:fc:ff:65:f7:65:2a:90:8c:19:c8:3a:1c: 4e:a4:1f:60:8f:bb:9c:6a:b6:7e:01:ac:bf:28:e3:4e:87:35: fb:ba:a8:ed:3e:0e:c7:9a:8b:da:cd:81:a2:47:1b:96:64:0d: fe:d3:cd:77:a2:db:18:58:9e:11:2d:27:2f:92:0f:79:75:05: 6c:c6:97:1c:42:17:cd:42:e3:d9:a9:3f:2e:ec:c6:c8:b2:ce: f5:97:86:13:79:fe:67:e7:bd:e7:41:54:53:e4:50:fd:cc:a7: d0:55:10:8a:04:ce:42:21:c6:34:71:01:70:9a:ce:32:79:e8: d2:6f:e5:5e:59:a5:7b:1f:68:6b:c2:ac:5a:f1:25:0f:57:7f: 4e:35:07:b2:3b:eb:9c:7a:a3:0e:51:bb:90:83:e4:78:c0:ab: ea:83:c7:71:84:66:f4:3b:c4:45:c8:03:55:a9:67:a3:1e:9e: 7d:9d:e5:fd:6b:44:a0:6a:f3:0e:08:9d:bb:fe:95:be:1c:1c: d7:fe:be:fb:f0:b2:c6:d5:fb:b7:2b:90:6e:d7:34:17:b6:dc: 43:79:c3:17:7a:4e:32:47:e3:67:63:12:b4:1e:2c:b5:c7:9e: 7f:24:5b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCNTUxMTAvBgNVBAUTKDgzMjMzM0U2NEM0QzhCMEI1ODZERUY5MzdCQjk2MjQ4 MjFCOEMxREYwHhcNMjUwNDAyMjA0NjQ2WhcNMjUwNDA5MjA0NjQ2WjAYMRYwFAYD VQQDEw02N2VkYTIzNi1jYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo69VVSkM1SqdkO338APMrtzguQGLyMWJo0wJYKYa6Nd3Z8PNRCB8keNKNoKO DKKBI/FozS7xsAwXqOG5freDVF6OSd7osMMIF6KgvS3jdlj+NytEsp+fgRjfDDBD wIqOWWAxHZYYu00LVdHZ9J07f+lVssyEYHCRYUp1zOw0z8T96+hPzybl3MhWDBpe fgepTQ8MCKKqB0SskVo1GEDmyh4uDIwJO61U0S+XiWGy3dz7PZ8m0metuGH/ZTiF OgkcGwHbB628azxSJi2IYYnJIFjZi6cZBWdDLdM1QAzY+mNC3mHBz1vqfz/c+UET 3t2xxCsFrgueYFfjarJjGXNNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0zJDxz EPJ3v520PUKhFwzLoTjzMB8GA1UdIwQYMBaAFIMjM+ZMTIsLWG3vk3u5YkghuMHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS81QUFGRDdFNkM3 MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3dFliZS1UZTdsaVNDRzR3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TXo1a3hNaXd0WWJlLVRlN2xpU0NHNHdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI1NS81QUFGRDdFNkM3MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3 dFliZS1UZTdsaVNDRzR3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+19jaOLMHisEgDRlxmrObelUZP29V6FH8/2X3ZSqQjBnIOhxOpB9g j7ucarZ+Aay/KONOhzX7uqjtPg7HmovazYGiRxuWZA3+0813otsYWJ4RLScvkg95 dQVsxpccQhfNQuPZqT8u7MbIss71l4YTef5n573nQVRT5FD9zKfQVRCKBM5CIcY0 cQFwms4yeejSb+VeWaV7H2hrwqxa8SUPV39ONQeyO+uceqMOUbuQg+R4wKvqg8dx hGb0O8RFyANVqWejHp59neX9a0SgavMOCJ27/pW+HBzX/r778LLG1fu3K5Bu1zQX ttxDecMXek4yR+NnYxK0Hiy1x55/JFsV -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:41 2025 by rpki-client