$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: K0oIMOJ8yz+eiF0EAl4/oz+tZIxpfYO6VFRHWSdTh5Y= Subject key identifier: E4:D4:A5:6C:57:DA:1B:3E:58:25:2D:D2:4A:D9:A2:A2:05:38:AD:7F Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 0398 Signing time: Sat 19 Apr 2025 00:43:46 +0000 Manifest this update: Sat 19 Apr 2025 00:43:46 +0000 Manifest next update: Sat 26 Apr 2025 00:43:46 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: Xc/gLfdSQwk6Fyr++81j1mnBDix/butgjkcWo7fQjB0=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: lfHIywQz4YgqCkW/d8PSzpBeHa1aTAqSamGmUbb/c3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Apr 19 00:43:46 2025 GMT Not After : Apr 26 00:43:46 2025 GMT Subject: CN=6802f1c2-af7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:61:5f:a4:58:eb:f3:17:38:01:03:13:9d:22: 7f:61:04:12:c6:3b:d1:1a:3e:38:6a:f7:d4:1c:ef: e5:af:0d:b5:39:d9:1c:2d:0b:cc:aa:2a:59:dc:8f: 00:77:13:c4:5b:d2:11:47:bf:80:e3:15:ec:7d:b2: 29:29:03:f2:5a:41:12:ba:1f:e6:fa:0f:bc:17:07: 2c:cf:e1:47:c2:5f:53:95:35:2b:2a:ce:ce:b2:8f: cb:cb:9c:44:cf:84:c8:ec:af:10:57:67:f2:1d:a9: 32:0e:c0:13:9a:04:3c:57:e9:62:ce:e8:2c:d7:32: e1:63:f3:fd:e0:e7:4e:4b:2a:a7:28:a9:9f:95:d1: 4f:a0:7f:22:8a:d4:3b:b9:34:4a:e7:eb:f7:f1:11: c0:3b:55:59:1e:d7:cd:54:b0:52:b4:f8:29:8c:30: d8:36:51:51:31:f8:d3:cf:36:74:8e:30:e6:f0:ae: fe:fe:66:d6:37:09:68:5c:6c:f2:b3:32:36:d7:89: f1:3b:80:88:10:0e:c6:d0:e4:16:62:d0:ce:e4:6a: ff:65:ac:de:4e:a8:23:bb:c6:85:e2:fb:0c:9f:02: c9:1d:a8:53:2c:f1:54:60:43:f0:2b:42:c2:1b:3b: 70:58:cc:aa:7a:16:b3:5c:c4:55:f8:41:e7:e6:e7: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:A5:6C:57:DA:1B:3E:58:25:2D:D2:4A:D9:A2:A2:05:38:AD:7F X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0c:df:c8:a1:2b:bd:95:d2:5c:e9:a4:3d:e1:b9:b2:94:89: 15:0c:40:4c:37:28:7e:39:25:72:8b:2f:0c:28:44:5e:be:ad: 83:5f:2e:a9:13:4d:7d:8c:47:cc:7b:4c:95:c1:52:d2:3d:e0: 88:f6:cc:71:90:b4:8a:d0:df:00:93:68:6e:c6:88:71:ad:bc: f3:e0:d2:5f:53:68:1e:d5:7a:4b:6f:d7:2f:ca:15:64:98:30: 20:fb:6b:46:8e:52:b6:df:cb:e0:a8:9a:0e:a6:70:23:26:8d: 4a:cf:8f:64:ae:1e:12:14:1b:6b:28:46:15:b4:b8:50:62:f3: 69:b8:69:6e:c9:9d:13:49:d7:d5:47:68:ce:cc:c7:c4:2f:6c: ca:f0:98:d7:ff:7c:2a:93:3d:24:08:d6:89:02:52:b2:05:80: 94:f7:0d:c7:43:03:35:d8:3d:34:fa:7f:7a:f1:12:0a:88:bc: 3e:f5:83:4d:11:e4:3c:e0:20:9c:47:8b:2e:ed:66:5a:71:02: fc:21:d6:c3:ca:5d:22:ac:c2:20:3f:ea:d4:f0:2e:8f:6e:78: 41:da:14:f8:92:8f:70:5f:74:80:0b:61:f9:79:fd:67:e3:7d: e2:38:a4:33:ca:33:e4:23:69:de:1f:38:5c:46:36:92:71:12: 00:7e:d7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwNDE5MDA0MzQ2WhcNMjUwNDI2MDA0MzQ2WjAYMRYwFAYD VQQDEw02ODAyZjFjMi1hZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+2FfpFjr8xc4AQMTnSJ/YQQSxjvRGj44avfUHO/lrw21OdkcLQvMqipZ3I8A dxPEW9IRR7+A4xXsfbIpKQPyWkESuh/m+g+8Fwcsz+FHwl9TlTUrKs7Oso/Ly5xE z4TI7K8QV2fyHakyDsATmgQ8V+lizugs1zLhY/P94OdOSyqnKKmfldFPoH8iitQ7 uTRK5+v38RHAO1VZHtfNVLBStPgpjDDYNlFRMfjTzzZ0jjDm8K7+/mbWNwloXGzy szI214nxO4CIEA7G0OQWYtDO5Gr/ZazeTqgju8aF4vsMnwLJHahTLPFUYEPwK0LC GztwWMyqehazXMRV+EHn5ueJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTUpWxX 2hs+WCUt0krZoqIFOK1/MB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuDN/IoSu9ldJc6aQ94bmylIkVDEBMNyh+OSVyiy8MKERevq2DXy6p E019jEfMe0yVwVLSPeCI9sxxkLSK0N8Ak2huxohxrbzz4NJfU2ge1XpLb9cvyhVk mDAg+2tGjlK238vgqJoOpnAjJo1Kz49krh4SFBtrKEYVtLhQYvNpuGluyZ0TSdfV R2jOzMfEL2zK8JjX/3wqkz0kCNaJAlKyBYCU9w3HQwM12D00+n968RIKiLw+9YNN EeQ84CCcR4su7WZacQL8IdbDyl0irMIgP+rU8C6PbnhB2hT4ko9wX3SAC2H5ef1n 433iOKQzyjPkI2neHzhcRjaScRIAftdh -----END CERTIFICATE-----Generated at Sat Apr 19 03:41:01 2025 by rpki-client