$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: lZfMK9qGPGgcvY7eV8N6BPgexL3ruEPzogqLdNFPMAo= Subject key identifier: BC:4B:A2:76:45:1D:A5:4C:EC:8F:25:55:D4:EB:F5:F7:A0:CC:28:D4 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1DF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1DEC Signing time: Tue 08 Apr 2025 16:06:46 +0000 Manifest this update: Tue 08 Apr 2025 16:06:46 +0000 Manifest next update: Tue 15 Apr 2025 16:06:46 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: tX0aN9ck8ZBC8AnmD+3wzGL0UJx59zdEpYOnfHaYncw=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: aU2YJVr1JgNSnSBDLACjKPXwpUH3eD6D3PqoxsGGeXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7672 (0x1df8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F Validity Not Before: Apr 8 16:06:46 2025 GMT Not After : Apr 15 16:06:46 2025 GMT Subject: CN=67f54996-1f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:cd:24:4c:53:f6:e8:26:26:36:c6:a6:5d: 55:f5:ac:78:4c:4e:9b:89:ce:fb:85:da:58:ad:ff: 2d:b6:e9:3c:24:48:6e:4e:99:2e:e9:c9:1c:a7:82: 62:62:b7:fe:45:df:bf:ec:b7:26:c8:1d:a2:ae:a4: ce:60:bd:17:4b:df:0e:84:bf:d4:0c:b5:42:3a:1d: 4b:88:33:46:c1:d9:3a:ee:56:d5:50:b0:82:8d:5d: b1:42:d9:dd:6f:4f:92:87:09:86:a9:f7:07:39:d4: 99:87:1b:9c:20:dd:d0:d2:7c:61:79:e4:c3:80:18: d4:f3:3b:ce:c4:51:47:d0:a8:e5:bc:80:cf:72:37: 07:4e:ac:89:cf:dc:ff:fa:40:7a:a0:6a:a3:f6:ec: 0f:c9:d0:ae:be:09:e5:07:84:22:49:34:04:f7:0f: 98:57:fe:41:f5:9e:7a:57:14:1b:ac:72:94:1d:f3: dd:78:93:f1:bf:cf:78:36:c4:97:93:74:0c:db:6d: 01:f5:86:38:b8:ea:6f:00:8c:37:b6:b7:fe:d7:93: 93:55:35:7b:fb:1b:ad:b2:dd:43:14:56:d3:fd:4a: 90:2d:f7:53:72:91:10:07:80:65:b4:e4:2d:df:07: 32:76:4b:1e:07:77:95:9e:2f:a8:60:b8:74:05:56: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4B:A2:76:45:1D:A5:4C:EC:8F:25:55:D4:EB:F5:F7:A0:CC:28:D4 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fb:d4:89:fa:a8:3d:cd:fb:d4:0d:bb:2d:5f:44:b8:3c:e0: 0d:04:44:05:fb:4e:02:34:43:a6:80:04:09:7b:5f:d7:93:a6: ec:b7:0c:3d:46:5c:06:fe:8d:90:ed:be:17:d7:f5:c6:1e:ca: 14:be:6e:a4:c0:a6:64:b0:58:d8:22:78:2e:d5:dc:0a:c8:8d: cd:4a:77:fd:98:f8:8e:ca:89:c4:0d:db:80:7c:68:d2:54:2b: d6:a9:8f:36:30:1d:24:80:e9:74:7b:fd:3d:4a:5f:23:b4:12: 46:41:32:47:6f:20:43:23:3c:4b:c1:9d:b7:a1:f4:55:20:0a: 3f:83:b0:4c:3a:49:27:95:d6:bd:18:fa:1a:1e:ab:f7:0c:e4: f7:ff:b8:49:30:27:6a:70:0d:7c:21:bf:5c:d1:6e:21:d1:e1: 31:62:95:7e:f8:14:9d:2f:69:50:94:d8:9c:54:c2:3c:c1:8e: ac:43:76:ce:ac:1a:64:20:f7:6b:f4:3e:91:39:ea:4d:9d:d2: 79:79:fe:ab:f6:97:d7:7e:01:39:7a:ee:94:b6:0e:be:d9:bd: 2f:dd:4a:48:1f:34:fa:ae:bf:1d:72:19:9b:7b:e4:26:f7:1e: c8:8c:a8:d3:1d:aa:ca:66:38:a9:3b:ff:04:8a:ed:a3:af:ce: d0:8f:60:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUwNDA4MTYwNjQ2WhcNMjUwNDE1MTYwNjQ2WjAYMRYwFAYD VQQDEw02N2Y1NDk5Ni0xZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylTNJExT9ugmJjbGpl1V9ax4TE6bic77hdpYrf8ttuk8JEhuTpku6ckcp4Ji Yrf+Rd+/7LcmyB2irqTOYL0XS98OhL/UDLVCOh1LiDNGwdk67lbVULCCjV2xQtnd b0+ShwmGqfcHOdSZhxucIN3Q0nxheeTDgBjU8zvOxFFH0KjlvIDPcjcHTqyJz9z/ +kB6oGqj9uwPydCuvgnlB4QiSTQE9w+YV/5B9Z56VxQbrHKUHfPdeJPxv894NsSX k3QM220B9YY4uOpvAIw3trf+15OTVTV7+xutst1DFFbT/UqQLfdTcpEQB4BltOQt 3wcydkseB3eVni+oYLh0BVYOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxLonZF HaVM7I8lVdTr9fegzCjUMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+9SJ+qg9zfvUDbstX0S4POANBEQF+04CNEOmgAQJe1/Xk6bstww9 RlwG/o2Q7b4X1/XGHsoUvm6kwKZksFjYIngu1dwKyI3NSnf9mPiOyonEDduAfGjS VCvWqY82MB0kgOl0e/09Sl8jtBJGQTJHbyBDIzxLwZ23ofRVIAo/g7BMOkknlda9 GPoaHqv3DOT3/7hJMCdqcA18Ib9c0W4h0eExYpV++BSdL2lQlNicVMI8wY6sQ3bO rBpkIPdr9D6ROepNndJ5ef6r9pfXfgE5eu6Utg6+2b0v3UpIHzT6rr8dchmbe+Qm 9x7IjKjTHarKZjipO/8Eiu2jr87Qj2BG -----END CERTIFICATE-----Generated at Fri Apr 11 10:32:38 2025 by rpki-client