$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: FuqSx6PFDbgcdGuSuynVtk+M2CpDbFpl+SZk7gKI8G8= Subject key identifier: F4:4B:A6:9B:CE:83:B8:88:91:1C:63:57:22:57:44:AD:0A:37:5B:DA Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C05 Signing time: Thu 10 Apr 2025 18:37:23 +0000 Manifest this update: Thu 10 Apr 2025 18:37:22 +0000 Manifest next update: Thu 17 Apr 2025 18:37:22 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: diAdL2BrFUIclXhCv3ea4qQUwXxjPQZOc9XiKkOT+uk=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Apr 10 18:37:22 2025 GMT Not After : Apr 17 18:37:22 2025 GMT Subject: CN=67f80fe2-8b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:4e:e5:2f:94:f2:a8:86:78:e4:3e:36:f6: c2:e3:b2:4b:d6:de:73:77:e3:5e:1b:0b:0f:a6:dd: 14:41:50:df:41:bd:87:8d:1e:57:af:4b:fa:6a:93: 3d:43:1c:76:d1:e6:ca:52:d7:54:56:81:05:68:91: bf:7b:22:0d:8d:36:96:db:13:07:ab:24:47:7f:95: b1:7b:ea:e3:60:7a:00:ed:39:ad:f6:b1:16:6b:9a: 98:bc:8b:41:18:bd:c1:0a:0c:7d:3e:f7:84:62:f0: 43:1a:63:f0:0d:2f:d5:ab:04:18:95:16:07:63:f7: 15:77:f4:77:c7:5d:86:60:fb:98:ca:c6:55:70:05: 27:0f:7a:e2:20:cd:20:a9:69:69:e5:57:f3:89:a3: 56:ae:38:75:f7:45:c6:64:8b:13:e4:70:70:a2:3b: 46:fd:6f:94:ec:b2:01:0f:ca:21:a0:eb:e4:41:34: b2:5e:6a:7d:44:47:fd:47:d7:5b:63:0e:c8:d1:fa: 98:35:e8:c0:57:9d:66:f1:18:04:b8:c9:41:67:20: ce:21:20:8f:f8:f0:35:84:80:e5:32:54:cb:fd:e1: b7:33:b3:e8:0f:ed:a4:29:e5:bb:79:ee:f8:0d:be: 54:c4:97:93:dd:32:23:92:3f:da:fa:84:fd:ac:ab: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4B:A6:9B:CE:83:B8:88:91:1C:63:57:22:57:44:AD:0A:37:5B:DA X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e7:78:05:29:38:40:ed:40:ea:4e:19:2d:3e:8c:10:f5:84: 56:3f:43:fb:40:b4:ad:59:bc:d8:ce:f6:2a:21:dd:ac:64:13: f2:11:73:29:d2:71:98:23:17:f2:13:e5:fb:d8:40:41:c5:94: 28:2f:dd:41:d9:f8:5f:a6:db:09:cb:15:aa:19:0e:da:57:fb: 4e:21:36:91:6c:39:c6:31:a1:98:74:d5:86:e6:89:9f:4b:0d: fe:f3:89:1b:70:fd:92:0d:d7:52:af:44:09:85:35:56:09:b6: fe:80:58:7b:76:e4:b5:0a:64:d8:59:8b:04:07:2d:2d:3e:f6: df:9e:72:37:ec:96:bc:dd:7e:48:83:45:82:74:d2:35:77:8d: b0:5d:8a:bc:b4:be:f8:cc:05:6e:14:f0:9b:a4:a5:a5:97:30: c1:b8:80:ad:33:ba:4c:8a:b0:51:53:7d:a6:30:10:91:f4:d8: 3e:49:bf:f1:a5:1f:2a:b2:a5:34:33:8d:26:5b:4f:5c:27:03: 9f:dd:4c:8e:b7:ef:6d:91:0c:86:59:ab:df:b7:0d:f1:44:f4: aa:d2:28:b7:b7:3c:66:06:75:74:33:4f:f2:0f:83:7a:9a:83: 0b:f2:89:af:e6:bf:d4:66:b2:91:2c:b8:6b:80:35:c2:97:16: 71:81:42:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwNDEwMTgzNzIyWhcNMjUwNDE3MTgzNzIyWjAYMRYwFAYD VQQDEw02N2Y4MGZlMi04YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpBO5S+U8qiGeOQ+NvbC47JL1t5zd+NeGwsPpt0UQVDfQb2HjR5Xr0v6apM9 Qxx20ebKUtdUVoEFaJG/eyINjTaW2xMHqyRHf5Wxe+rjYHoA7Tmt9rEWa5qYvItB GL3BCgx9PveEYvBDGmPwDS/VqwQYlRYHY/cVd/R3x12GYPuYysZVcAUnD3riIM0g qWlp5VfziaNWrjh190XGZIsT5HBwojtG/W+U7LIBD8ohoOvkQTSyXmp9REf9R9db Yw7I0fqYNejAV51m8RgEuMlBZyDOISCP+PA1hIDlMlTL/eG3M7PoD+2kKeW7ee74 Db5UxJeT3TIjkj/a+oT9rKuT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRLppvO g7iIkRxjVyJXRK0KN1vaMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa53gFKThA7UDqThktPowQ9YRWP0P7QLStWbzYzvYqId2sZBPyEXMp 0nGYIxfyE+X72EBBxZQoL91B2fhfptsJyxWqGQ7aV/tOITaRbDnGMaGYdNWG5omf Sw3+84kbcP2SDddSr0QJhTVWCbb+gFh7duS1CmTYWYsEBy0tPvbfnnI37Ja83X5I g0WCdNI1d42wXYq8tL74zAVuFPCbpKWllzDBuICtM7pMirBRU32mMBCR9Ng+Sb/x pR8qsqU0M40mW09cJwOf3UyOt+9tkQyGWavftw3xRPSq0ii3tzxmBnV0M0/yD4N6 moML8omv5r/UZrKRLLhrgDXClxZxgUK0 -----END CERTIFICATE-----Generated at Sat Apr 12 17:50:25 2025 by rpki-client