$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: 3RBW5JbuLS57Vbtk2X8do+IfAGSdq68cotClfCFWYKQ= Subject key identifier: 01:FE:03:F0:A6:67:22:A8:CD:B5:60:6A:41:DF:8A:FB:CA:97:DE:D0 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 094C Signing time: Sun 06 Apr 2025 19:58:54 +0000 Manifest this update: Sun 06 Apr 2025 19:58:54 +0000 Manifest next update: Sun 13 Apr 2025 19:58:54 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: fSmbBPlgJneKFvsSfsMGP3j+FUth6L5UtNtSSG9/1Ew=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC Validity Not Before: Apr 6 19:58:54 2025 GMT Not After : Apr 13 19:58:54 2025 GMT Subject: CN=67f2dcfe-1ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:65:b8:4f:c3:a5:0a:17:0b:6e:68:18:40:50: c9:b6:2c:8c:05:6d:8a:13:30:72:ee:f1:f4:da:5b: a2:27:4d:7a:2c:bd:15:12:15:03:e6:ff:b3:da:1c: 5a:de:a3:26:8f:bf:ea:b8:4b:9f:60:47:9b:12:d2: 63:63:fd:b6:e0:ec:41:69:66:50:9f:20:d7:81:60: a9:6a:42:d0:c6:5a:30:bc:13:55:5c:64:72:67:13: 09:e4:f4:ee:b0:77:90:ac:ed:3e:f1:a4:8f:3a:5b: 96:af:44:93:d9:e5:b0:13:33:65:d7:78:a4:b6:43: e2:2d:db:18:15:25:96:15:08:fd:3d:49:dd:7e:b9: a7:c5:85:fd:cd:6b:41:e5:5e:f5:1e:c6:d7:b7:65: a1:40:62:e1:55:fc:d9:6c:18:c0:a3:f2:82:08:72: a3:6b:7c:41:5f:30:90:65:46:23:a3:70:9f:7b:f6: 83:8a:c2:ba:61:6b:6c:b3:60:ca:b0:66:bf:cd:cc: a8:3e:f2:ab:c6:5a:26:06:ef:fb:1e:02:51:55:b6: 0e:71:a5:8a:33:4b:a8:60:60:55:a5:c7:aa:56:82: 5b:f9:46:bd:cd:40:dc:43:a4:b5:b7:06:5b:74:4b: ca:2d:c4:ff:98:2c:7e:7e:8a:dc:b7:f1:8e:5c:54: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:03:F0:A6:67:22:A8:CD:B5:60:6A:41:DF:8A:FB:CA:97:DE:D0 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fc:34:b4:7d:b3:94:c1:ab:29:b3:c0:1c:2c:e9:c6:ff:e4: 42:8e:26:68:97:cf:6c:a2:f5:5c:f0:32:9f:91:85:5a:23:cc: b6:cd:a6:62:1a:eb:3d:74:50:5d:c7:df:ce:d7:d6:4f:27:aa: 95:eb:46:fb:6b:cc:13:f8:d8:b4:47:45:db:b7:80:c1:85:8d: 49:c4:a3:12:50:c8:61:72:55:5e:a7:2b:7f:13:5b:30:d4:4d: ea:8a:7e:60:d7:55:82:1a:41:ba:5a:8b:bf:c1:52:a3:33:e8: 67:2c:56:b3:17:58:b9:92:07:73:1b:1b:cf:dc:db:95:c3:22: ab:83:a9:24:c9:04:f5:c9:82:dd:fb:16:e7:77:c4:d5:7e:56: 9b:1b:31:23:19:27:57:5f:68:f4:b5:58:91:ca:9a:6d:1f:81: 4a:a6:a9:d0:d8:39:e1:ef:aa:93:c6:cd:2d:5c:a5:0c:72:1b: 4e:a2:6d:68:d0:e3:4a:5f:af:3a:d5:e5:b4:0e:b7:5a:d0:f2: 2b:8c:6d:f1:95:1d:9e:a5:40:44:c0:a9:1a:5b:d0:14:47:e7: 04:32:6c:bb:72:30:1f:a6:af:4c:7d:c8:ed:8e:84:4e:69:76: 5e:85:86:79:6b:5d:65:c8:a5:d4:cf:87:63:17:df:7d:79:f7: d7:8d:5d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwNDA2MTk1ODU0WhcNMjUwNDEzMTk1ODU0WjAYMRYwFAYD VQQDEw02N2YyZGNmZS0xYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWW4T8OlChcLbmgYQFDJtiyMBW2KEzBy7vH02luiJ016LL0VEhUD5v+z2hxa 3qMmj7/quEufYEebEtJjY/224OxBaWZQnyDXgWCpakLQxlowvBNVXGRyZxMJ5PTu sHeQrO0+8aSPOluWr0ST2eWwEzNl13iktkPiLdsYFSWWFQj9PUndfrmnxYX9zWtB 5V71HsbXt2WhQGLhVfzZbBjAo/KCCHKja3xBXzCQZUYjo3Cfe/aDisK6YWtss2DK sGa/zcyoPvKrxlomBu/7HgJRVbYOcaWKM0uoYGBVpceqVoJb+Ua9zUDcQ6S1twZb dEvKLcT/mCx+forct/GOXFTNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH+A/Cm ZyKozbVgakHfivvKl97QMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg/DS0fbOUwasps8AcLOnG/+RCjiZol89sovVc8DKfkYVaI8y2zaZi Gus9dFBdx9/O19ZPJ6qV60b7a8wT+Ni0R0Xbt4DBhY1JxKMSUMhhclVepyt/E1sw 1E3qin5g11WCGkG6Wou/wVKjM+hnLFazF1i5kgdzGxvP3NuVwyKrg6kkyQT1yYLd +xbnd8TVflabGzEjGSdXX2j0tViRypptH4FKpqnQ2Dnh76qTxs0tXKUMchtOom1o 0ONKX6861eW0Drda0PIrjG3xlR2epUBEwKkaW9AUR+cEMmy7cjAfpq9MfcjtjoRO aXZehYZ5a11lyKXUz4djF999effXjV2x -----END CERTIFICATE-----Generated at Mon Apr 7 10:12:49 2025 by rpki-client