$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft File: G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json) Hash identifier: rVj9oMgK7WxoXm+rLqsN1ApINlmcI60lGX20dxbb8zM= Subject key identifier: 0E:0F:60:09:BE:CA:87:21:A9:3C:BB:DD:0A:6A:06:A2:96:11:CD:07 Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Certificate serial: 2258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft Manifest number: 224F Signing time: Wed 16 Apr 2025 15:54:12 +0000 Manifest this update: Wed 16 Apr 2025 15:54:11 +0000 Manifest next update: Wed 23 Apr 2025 15:54:11 +0000 Files and hashes: 1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: C4oyaNZaHCZgp8iy+4Ob+Qj4OmVJCUZhZUI/xrMqDBI=) 2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=) 3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=) 4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 15:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8792 (0x2258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D Validity Not Before: Apr 16 15:54:11 2025 GMT Not After : Apr 23 15:54:11 2025 GMT Subject: CN=67ffd2a3-626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:6d:e4:7e:40:85:ed:46:a6:e5:d9:99:ee: a3:f0:96:f2:41:db:a8:48:70:1e:46:14:00:57:7e: b8:61:75:d1:8e:dc:f7:a7:6b:55:1a:ab:dd:4e:aa: f5:88:2c:1a:8b:0c:06:e6:18:b4:b3:50:89:ef:e0: 18:a4:0e:a9:d7:a1:4d:d6:a1:77:14:84:42:99:8e: 4b:b1:c6:54:19:1f:18:43:e6:4f:f9:2d:81:5e:95: b7:2c:c9:99:73:de:1b:bd:72:9a:b8:d9:0e:fa:ab: 4a:03:b6:b3:b5:b9:da:c1:2a:d8:ea:bc:64:e7:9f: 15:6d:b6:bd:1f:ee:9a:69:20:31:c7:ab:43:dc:ed: 79:25:01:b9:56:8a:8d:c1:f8:3b:f1:95:17:c0:5e: 23:de:07:2c:db:62:79:bb:5b:44:01:60:d2:61:a7: a0:bf:03:5e:80:75:7d:11:3d:3e:c0:b6:d0:34:2b: 60:b6:a2:ba:4a:f5:fa:21:7e:c7:e7:a5:27:76:ca: 6f:07:37:29:e3:ec:29:9c:08:aa:3b:b1:eb:f2:47: 0a:4e:56:30:4a:00:10:da:b6:46:6d:04:8f:80:26: 3c:cf:8f:04:46:84:ff:90:0b:cc:18:74:c9:be:a4: 7d:e8:70:95:c0:fa:02:fc:d8:0c:7b:84:7d:60:f6: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:60:09:BE:CA:87:21:A9:3C:BB:DD:0A:6A:06:A2:96:11:CD:07 X509v3 Authority Key Identifier: keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c8:67:bb:ae:43:39:a7:6b:19:0e:1a:19:85:c2:08:69:d6: aa:b6:0f:32:b2:cf:ef:f3:56:a0:3f:fc:a7:e2:5d:12:d6:39: 52:c4:60:e0:20:50:be:9d:02:bd:63:75:bd:ed:3c:b0:12:5a: b2:d4:2a:96:3c:0e:59:93:d6:3d:9f:85:03:f4:f6:5a:70:eb: 75:20:86:47:c4:e6:25:e4:4e:c2:37:42:0f:c1:78:3f:21:55: 8c:9f:4b:f4:f3:b0:6e:a3:22:72:94:a1:0c:b1:11:74:97:a6: 83:c4:47:e5:aa:52:8b:48:79:c6:ae:98:37:66:c2:ea:80:df: 47:8a:a5:7f:06:d7:42:60:da:d2:e2:97:c8:c8:ee:d5:74:51: 6a:ff:77:8c:b0:ee:28:0d:a4:8b:12:13:fd:9b:13:ba:6c:02: 77:d4:0c:eb:3e:34:a2:07:9e:d6:b6:a2:d5:df:f4:07:36:4e: 25:54:4b:1a:67:13:e8:6c:68:61:5b:10:a9:12:23:f7:1e:b8: c9:72:88:2b:ae:0e:8a:da:8b:78:c7:67:36:52:a1:1c:cd:ba: 09:ba:23:c2:d7:c6:ae:01:7e:53:7f:1c:bb:2a:39:bc:3d:02: 64:39:c6:5b:b8:cb:20:9c:2c:37:fd:05:a4:d9:c7:7e:1b:68: 93:2f:58:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0 QTFGOUI1MUQwHhcNMjUwNDE2MTU1NDExWhcNMjUwNDIzMTU1NDExWjAYMRYwFAYD VQQDEw02N2ZmZDJhMy02MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7Vt5H5Ahe1GpuXZme6j8JbyQduoSHAeRhQAV364YXXRjtz3p2tVGqvdTqr1 iCwaiwwG5hi0s1CJ7+AYpA6p16FN1qF3FIRCmY5LscZUGR8YQ+ZP+S2BXpW3LMmZ c94bvXKauNkO+qtKA7aztbnawSrY6rxk558Vbba9H+6aaSAxx6tD3O15JQG5VoqN wfg78ZUXwF4j3gcs22J5u1tEAWDSYaegvwNegHV9ET0+wLbQNCtgtqK6SvX6IX7H 56UndspvBzcp4+wpnAiqO7Hr8kcKTlYwSgAQ2rZGbQSPgCY8z48ERoT/kAvMGHTJ vqR96HCVwPoC/NgMe4R9YPYxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4PYAm+ yochqTy73QpqBqKWEc0HMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00 LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyGe7rkM5p2sZDhoZhcIIadaqtg8yss/v81agP/yn4l0S1jlSxGDg IFC+nQK9Y3W97TywElqy1CqWPA5Zk9Y9n4UD9PZacOt1IIZHxOYl5E7CN0IPwXg/ IVWMn0v087BuoyJylKEMsRF0l6aDxEflqlKLSHnGrpg3ZsLqgN9HiqV/BtdCYNrS 4pfIyO7VdFFq/3eMsO4oDaSLEhP9mxO6bAJ31AzrPjSiB57WtqLV3/QHNk4lVEsa ZxPobGhhWxCpEiP3HrjJcogrrg6K2ot4x2c2UqEczboJuiPC18auAX5Tfxy7Kjm8 PQJkOcZbuMsgnCw3/QWk2cd+G2iTL1jg -----END CERTIFICATE-----Generated at Fri Apr 18 00:40:23 2025 by rpki-client