$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft File: GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json) Hash identifier: /43afiuK5o358O/bjaRWBEdnpdEVNS6R7NfYZJbfNXg= Subject key identifier: 34:6A:55:6F:08:82:BC:EC:2A:7F:DB:EA:2D:D1:C2:87:14:C2:66:2E Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA Certificate issuer: /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA Certificate serial: 14C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft Manifest number: 14BF Signing time: Fri 04 Apr 2025 16:55:51 +0000 Manifest this update: Fri 04 Apr 2025 16:55:50 +0000 Manifest next update: Fri 11 Apr 2025 16:55:50 +0000 Files and hashes: 1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: YoJ7sQDgypLl+kOMGfy+OnS9Gc5vQmiHcq5NOnEeuUI=) 2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: ts6CuXT017m+Eo1tnvA5GQ371D5wqgoVWLN1l6w+WmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5321 (0x14c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B83F Validity Not Before: Apr 4 16:55:50 2025 GMT Not After : Apr 11 16:55:50 2025 GMT Subject: CN=67f00f16-6a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:9e:8f:88:06:6d:53:79:91:9a:a8:e8:1e: 3b:5c:47:60:06:75:02:e9:53:75:41:e8:21:59:a4: 69:a6:0c:67:07:96:11:44:55:5f:78:67:6c:d6:38: 34:43:91:d0:a0:48:28:14:3b:f8:28:f6:e6:a9:7f: f8:9d:84:7a:8c:8b:78:88:d6:f3:8d:f8:aa:46:37: f7:76:b0:d7:ff:b9:8d:a9:17:1a:7a:29:58:c0:97: 43:c9:ce:82:e5:87:43:07:3c:89:9f:0f:b7:35:23: f6:5d:dc:83:22:ed:ed:06:ad:12:e0:ea:4e:e3:e2: b9:c8:97:b7:1b:86:39:d9:21:33:90:85:74:bc:43: 64:c2:bc:dc:c9:15:9e:ff:44:75:92:91:19:96:fb: a0:ca:8c:f2:de:79:9a:da:ca:28:cc:f5:37:92:20: ff:4f:f7:13:11:3b:72:a8:8b:be:5a:05:2e:33:aa: 28:de:e9:94:d3:35:4f:88:f1:23:fb:a0:c9:2c:e8: 8d:ad:c8:78:be:36:8f:5c:d9:cc:c7:e3:ef:bb:55: fc:fc:be:3f:6d:20:51:d8:c4:dc:7e:a7:60:72:7c: 29:7f:e2:7a:64:b3:a9:97:07:2b:64:8b:c2:a5:37: f2:0d:63:b9:7a:91:1e:78:e8:33:65:13:38:2a:48: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:55:6F:08:82:BC:EC:2A:7F:DB:EA:2D:D1:C2:87:14:C2:66:2E X509v3 Authority Key Identifier: keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:84:b7:86:97:a7:ec:8d:fb:fc:b7:ce:f2:83:d9:1a:a3:88: 54:6e:b0:13:a6:d1:0a:84:16:53:d1:cf:26:83:50:ee:7f:ae: ec:3d:5d:95:4d:83:d5:e4:67:94:71:1d:39:dc:f7:b0:79:63: 43:b6:ea:8c:7d:bb:c6:ad:a3:4f:58:bb:67:51:b7:18:e2:bd: a9:8b:72:a4:e1:1d:52:41:84:7c:41:08:27:dc:5c:35:16:09: 16:a1:00:de:a5:69:52:2f:00:04:bd:72:f8:3e:00:91:2a:54: a6:ce:c3:b1:48:16:e0:c5:5a:25:77:9c:cc:f3:55:5b:c2:19: 43:54:22:04:49:02:a9:21:f1:f8:68:e0:1f:ce:d4:cd:9a:b6: 62:dc:a0:e5:9e:42:44:20:20:d0:fe:ad:f4:99:77:79:69:82: be:2d:b1:a6:53:de:70:6c:f3:1b:37:8f:b9:07:25:c1:62:86: 32:dc:e7:9e:90:12:14:43:43:82:46:6a:6b:0d:56:bf:08:14: 98:ba:b7:46:0c:37:c0:6a:18:63:10:7f:49:1e:b0:d2:8e:09: d7:67:20:79:e9:a3:74:b9:6e:48:81:cb:ce:8d:3c:5b:c4:db: ce:fd:7e:e6:8d:82:e4:f1:88:f0:9c:ec:dd:4b:33:c9:5a:31: e3:0c:66:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I4M0YxMTAvBgNVBAUTKDE5ODAzNTUyOTlCNkMyMjM3QjQyMzUwMDBGNzIzNTk3 QkZFQjMzREEwHhcNMjUwNDA0MTY1NTUwWhcNMjUwNDExMTY1NTUwWjAYMRYwFAYD VQQDEw02N2YwMGYxNi02YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnP+ej4gGbVN5kZqo6B47XEdgBnUC6VN1QeghWaRppgxnB5YRRFVfeGds1jg0 Q5HQoEgoFDv4KPbmqX/4nYR6jIt4iNbzjfiqRjf3drDX/7mNqRcaeilYwJdDyc6C 5YdDBzyJnw+3NSP2XdyDIu3tBq0S4OpO4+K5yJe3G4Y52SEzkIV0vENkwrzcyRWe /0R1kpEZlvugyozy3nma2soozPU3kiD/T/cTETtyqIu+WgUuM6oo3umU0zVPiPEj +6DJLOiNrch4vjaPXNnMx+Pvu1X8/L4/bSBR2MTcfqdgcnwpf+J6ZLOplwcrZIvC pTfyDWO5epEeeOgzZRM4KkgsYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRqVW8I grzsKn/b6i3RwocUwmYuMB8GA1UdIwQYMBaAFBmANVKZtsIje0I1AA9yNZe/6zPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjgzRi8zREIzREJFQTU1 NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndpTjdRalVBRDNJMWw3X3JN OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dZQTFVcG0yd2lON1FqVUFEM0kxbDdfck05by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjgzRi8zREIzREJFQTU1NEYxMUU4OUJDMkU4NTdDNEY5QUUwMi9HWUExVXBtMndp TjdRalVBRDNJMWw3X3JNOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7hLeGl6fsjfv8t87yg9kao4hUbrATptEKhBZT0c8mg1Duf67sPV2V TYPV5GeUcR053PeweWNDtuqMfbvGraNPWLtnUbcY4r2pi3Kk4R1SQYR8QQgn3Fw1 FgkWoQDepWlSLwAEvXL4PgCRKlSmzsOxSBbgxVold5zM81VbwhlDVCIESQKpIfH4 aOAfztTNmrZi3KDlnkJEICDQ/q30mXd5aYK+LbGmU95wbPMbN4+5ByXBYoYy3Oee kBIUQ0OCRmprDVa/CBSYurdGDDfAahhjEH9JHrDSjgnXZyB56aN0uW5IgcvOjTxb xNvO/X7mjYLk8YjwnOzdSzPJWjHjDGYm -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:41 2025 by rpki-client