$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft File: GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json) Hash identifier: kMxh4FNxqejHNU+0ZCGxwEfNMi92h9A1MBkOKqC9HX4= Subject key identifier: A5:24:38:FB:2A:F6:56:FE:F3:FC:8D:E8:38:E5:A3:A5:54:40:A4:73 Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft Manifest number: 05F2 Signing time: Sat 12 Apr 2025 22:35:17 +0000 Manifest this update: Sat 12 Apr 2025 22:35:17 +0000 Manifest next update: Sat 19 Apr 2025 22:35:17 +0000 Files and hashes: 1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: PuZeSOXcfrdNRUnsiezRk4My5VZAr8VvhTfoLm1ASK8=) 2: 6E6A801066CB11EFA513A684C4F9AE02.roa (hash: vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=) 3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Validity Not Before: Apr 12 22:35:17 2025 GMT Not After : Apr 19 22:35:17 2025 GMT Subject: CN=67faeaa5-cd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:c5:6c:c5:e5:91:ea:85:a7:26:07:e3:22: f9:9c:90:e4:ea:f9:10:a2:d5:6d:92:d9:f8:75:d6: ba:ab:65:75:ad:fe:d4:62:95:ae:f7:a7:9d:5a:00: 0e:58:b6:30:a5:0c:d5:3c:4a:a5:66:7b:0c:d4:48: 26:63:ea:26:d2:66:17:79:8b:03:64:c0:24:f8:52: 12:a0:4c:c2:fb:de:6a:26:7d:59:15:85:4c:da:3c: 0b:32:cb:c8:15:3a:bf:fc:b6:94:37:85:f6:35:4a: d5:fc:16:b8:aa:ad:a6:f2:f7:df:cb:de:12:d1:33: 62:98:99:64:cc:11:1b:49:f8:ea:6a:c5:9f:5b:92: 1d:97:72:f4:65:93:b2:70:b0:b8:09:cf:70:f4:95: 78:76:65:5a:3f:25:ed:47:65:39:4b:dc:fb:28:1e: 33:64:7b:78:d6:8c:92:3d:6c:00:aa:f4:96:3e:c3: 8c:90:ed:e8:89:92:06:2d:ac:45:f0:92:6e:9c:d7: 2d:46:72:c5:20:b4:62:87:78:b9:e4:bc:01:07:fc: 0f:b9:89:ba:36:7e:48:35:b3:a5:d6:9e:51:5e:2a: df:c8:c1:9b:b8:b1:e1:e1:cc:bc:42:24:97:dd:1c: 69:45:9c:3b:bd:94:05:59:64:ee:67:04:bd:dc:3e: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:24:38:FB:2A:F6:56:FE:F3:FC:8D:E8:38:E5:A3:A5:54:40:A4:73 X509v3 Authority Key Identifier: keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:05:31:cf:08:dc:fa:bd:a7:58:03:d7:6b:c0:d5:7c:15:91: d5:45:ad:bc:f9:42:d6:fe:f3:74:52:01:e4:c3:ab:a1:42:27: 57:70:53:48:5c:1e:60:03:56:dd:6b:f5:52:c4:73:55:eb:ec: fc:65:76:bb:74:d3:1c:c5:da:3c:97:67:dc:70:2e:17:71:61: 49:fa:ad:d2:f0:97:34:ec:20:8a:dc:24:65:cd:6a:14:39:d4: 29:c5:34:6f:70:52:83:01:c8:42:56:07:0c:d1:d1:75:06:00: a7:d6:ad:97:fa:ca:83:17:0b:71:cc:42:bf:5e:e8:7f:0f:5d: 18:4b:95:dc:45:7b:fd:1e:a5:70:dd:db:45:4f:c3:9f:75:97: 33:83:ea:d6:e8:4f:e4:65:41:ee:2b:f8:b4:62:04:10:83:c8: 10:d7:ab:06:f5:8f:8c:d8:fa:ea:a8:9f:b4:9d:c4:f2:5e:f6: d4:d6:d2:8e:ee:cd:59:2e:86:c6:54:4e:4f:b9:bc:b0:e5:fc: 5e:5d:41:d6:55:5c:2f:59:43:05:1b:ed:de:3d:d1:f9:3b:06: cc:54:46:03:62:04:27:d8:c4:23:39:31:fc:ef:fc:aa:be:33: 3b:92:15:05:bf:d5:0d:a9:5d:28:cb:7f:53:01:21:c2:d5:98: 7e:1a:a4:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz RDkyNUI2MzYwHhcNMjUwNDEyMjIzNTE3WhcNMjUwNDE5MjIzNTE3WjAYMRYwFAYD VQQDEw02N2ZhZWFhNS1jZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF3FbMXlkeqFpyYH4yL5nJDk6vkQotVtktn4dda6q2V1rf7UYpWu96edWgAO WLYwpQzVPEqlZnsM1EgmY+om0mYXeYsDZMAk+FISoEzC+95qJn1ZFYVM2jwLMsvI FTq//LaUN4X2NUrV/Ba4qq2m8vffy94S0TNimJlkzBEbSfjqasWfW5Idl3L0ZZOy cLC4Cc9w9JV4dmVaPyXtR2U5S9z7KB4zZHt41oySPWwAqvSWPsOMkO3oiZIGLaxF 8JJunNctRnLFILRih3i55LwBB/wPuYm6Nn5INbOl1p5RXirfyMGbuLHh4cy8QiSX 3RxpRZw7vZQFWWTuZwS93D7f0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUkOPsq 9lb+8/yN6Djlo6VUQKRzMB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2 NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwQy9DM0VDRDk2OEE2NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92 ZlFLMnZySXM0Vms5a2x0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeBTHPCNz6vadYA9drwNV8FZHVRa28+ULW/vN0UgHkw6uhQidXcFNI XB5gA1bda/VSxHNV6+z8ZXa7dNMcxdo8l2fccC4XcWFJ+q3S8Jc07CCK3CRlzWoU OdQpxTRvcFKDAchCVgcM0dF1BgCn1q2X+sqDFwtxzEK/Xuh/D10YS5XcRXv9HqVw 3dtFT8OfdZczg+rW6E/kZUHuK/i0YgQQg8gQ16sG9Y+M2PrqqJ+0ncTyXvbU1tKO 7s1ZLobGVE5Pubyw5fxeXUHWVVwvWUMFG+3ePdH5OwbMVEYDYgQn2MQjOTH87/yq vjM7khUFv9UNqV0oy39TASHC1Zh+GqQU -----END CERTIFICATE-----Generated at Sun Apr 13 05:38:47 2025 by rpki-client