$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft File: GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json) Hash identifier: zaR8JoJV85yJIFOIRULKDjyRU3kcO04qM8H9TzFXahI= Subject key identifier: E4:BC:2F:56:1C:AC:76:F6:53:FC:DC:8E:25:35:25:E2:36:B7:FA:8E Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 Certificate issuer: /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft Manifest number: 05A4 Signing time: Fri 04 Apr 2025 23:17:48 +0000 Manifest this update: Fri 04 Apr 2025 23:17:47 +0000 Manifest next update: Fri 11 Apr 2025 23:17:47 +0000 Files and hashes: 1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: GTMVOykf/JQRlXA/EqnxXDSzxsxGbmJAVzX3sKwYjAA=) 2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: D44y8yK3PslKu95mSqGBAiOz2/DAxOx2GOp0kxbojB8=) 3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: dxA+FsX+z/6QO39P8vpv3U7r3ZQVusg7yiQAQgF0Kjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FA7 Validity Not Before: Apr 4 23:17:47 2025 GMT Not After : Apr 11 23:17:47 2025 GMT Subject: CN=67f0689c-22e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:c2:93:07:a2:37:62:67:8e:bc:70:2e:bc: d4:c1:66:35:d7:95:a7:22:9b:7f:c7:d3:10:12:a2: 8c:21:1d:13:f7:e7:11:9e:49:d0:b6:c2:d2:c1:b1: c4:c3:ae:69:39:ea:20:f8:1b:0e:bb:df:25:d0:f3: 95:65:bf:7a:c6:13:28:78:19:12:24:58:a3:ea:5a: 63:23:f2:dd:0d:7f:f6:03:8a:f1:98:28:08:9f:f5: 84:58:6c:11:09:41:f0:d2:d5:08:ea:d1:74:6a:99: a8:c1:9f:0c:e6:1a:65:e2:1c:83:52:8d:1b:c1:81: 98:27:b4:ca:74:ce:02:c4:12:9a:47:ea:22:fc:c5: 74:a5:94:15:ec:3e:ee:d9:44:5f:dd:f9:74:c7:85: 93:10:34:2d:21:88:4b:8a:2b:df:0a:ac:f2:0a:49: fd:e2:73:04:44:6f:76:f5:12:16:e5:62:7f:4e:b4: 28:fb:87:98:7f:ce:4f:0c:40:5b:9a:7a:36:aa:4c: 3c:c4:7f:4a:c3:f1:06:d2:2e:b3:cb:db:5a:12:70: 9a:aa:f5:96:25:f1:6d:56:11:60:a2:49:f9:29:37: 3f:db:88:28:3f:99:04:6b:d2:c9:d8:64:ff:be:6f: 9d:15:71:13:fd:d3:79:f8:49:dd:c1:6a:6d:df:43: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BC:2F:56:1C:AC:76:F6:53:FC:DC:8E:25:35:25:E2:36:B7:FA:8E X509v3 Authority Key Identifier: keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:51:a5:c1:bd:1b:9f:6f:c7:a0:2a:2c:e6:ae:2c:f8:84:ca: f4:57:a1:75:ca:db:28:31:d0:a5:8f:dc:cf:38:a1:7e:cf:a8: 7b:c8:0e:0e:06:53:54:80:3b:cf:c9:46:a2:7f:df:77:4f:3e: df:2b:6e:ae:14:2e:ad:bd:35:f8:26:6f:cb:eb:c6:31:60:44: 7a:ba:5e:15:18:e0:ad:b8:4d:f6:cf:62:37:d8:2e:7d:d7:a4: c2:6a:3d:a9:05:12:a1:0f:22:92:11:48:7f:8f:a2:5f:9c:0f: 7e:60:60:42:32:6f:18:9b:7d:be:a2:d8:b4:fb:e6:b7:1f:ca: 22:bb:00:d8:7c:d8:7c:56:e7:eb:3b:0e:fc:81:5a:93:1e:ac: 2d:2e:33:a2:b5:8f:6a:85:47:00:a3:5a:89:25:d0:a3:f9:b2: 56:17:d1:e0:20:bc:88:1d:53:6b:87:31:71:c2:86:77:5c:f4: 08:f2:72:61:f5:e5:b8:4e:bb:91:7d:fe:2d:ea:89:ad:07:92: 76:df:c8:04:43:7d:86:91:db:51:7a:0d:25:41:b1:18:20:18: db:bb:4e:8b:a1:75:8f:73:86:18:ea:8d:63:fd:a1:57:e3:fd: 87:01:51:92:0f:68:57:a3:4d:ac:ff:c6:6b:19:eb:ba:1b:be: b3:1c:24:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez RUUzRjM3NDMwHhcNMjUwNDA0MjMxNzQ3WhcNMjUwNDExMjMxNzQ3WjAYMRYwFAYD VQQDEw02N2YwNjg5Yy0yMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTrCkweiN2JnjrxwLrzUwWY115WnIpt/x9MQEqKMIR0T9+cRnknQtsLSwbHE w65pOeog+BsOu98l0POVZb96xhMoeBkSJFij6lpjI/LdDX/2A4rxmCgIn/WEWGwR CUHw0tUI6tF0apmowZ8M5hpl4hyDUo0bwYGYJ7TKdM4CxBKaR+oi/MV0pZQV7D7u 2URf3fl0x4WTEDQtIYhLiivfCqzyCkn94nMERG929RIW5WJ/TrQo+4eYf85PDEBb mno2qkw8xH9Kw/EG0i6zy9taEnCaqvWWJfFtVhFgokn5KTc/24goP5kEa9LJ2GT/ vm+dFXET/dN5+EndwWpt30OWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS8L1Yc rHb2U/zcjiU1JeI2t/qOMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZBNy9BN0ZBRDRGNkMyQjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsy THFlYmVZSnJJY28tNF9OME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClUaXBvRufb8egKizmriz4hMr0V6F1ytsoMdClj9zPOKF+z6h7yA4O BlNUgDvPyUaif993Tz7fK26uFC6tvTX4Jm/L68YxYER6ul4VGOCtuE32z2I32C59 16TCaj2pBRKhDyKSEUh/j6JfnA9+YGBCMm8Ym32+oti0++a3H8oiuwDYfNh8Vufr Ow78gVqTHqwtLjOitY9qhUcAo1qJJdCj+bJWF9HgILyIHVNrhzFxwoZ3XPQI8nJh 9eW4TruRff4t6omtB5J238gEQ32GkdtReg0lQbEYIBjbu06LoXWPc4YY6o1j/aFX 4/2HAVGSD2hXo02s/8ZrGeu6G76zHCTo -----END CERTIFICATE-----Generated at Sat Apr 5 11:44:41 2025 by rpki-client