$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: k8Yt+nfNxw5u4sY2j1o6OI2TtUTFaZ0aLGc1V+01kg0= Subject key identifier: DE:AC:11:61:ED:6E:E3:6E:C2:54:16:55:F8:5F:3E:47:E8:8E:1D:E5 Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 0393 Signing time: Sat 05 Apr 2025 00:53:46 +0000 Manifest this update: Sat 05 Apr 2025 00:53:46 +0000 Manifest next update: Sat 12 Apr 2025 00:53:46 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: Jp6coUzdOVp/BqrFMjDeAV/Nlz6bJStusv+LT2321PE=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99 Validity Not Before: Apr 5 00:53:46 2025 GMT Not After : Apr 12 00:53:46 2025 GMT Subject: CN=67f07f1a-e86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:82:0b:c5:c5:b1:1a:03:23:1b:04:02:7e: a2:fe:e4:ae:a1:1b:48:d5:64:eb:77:3d:55:82:53: 46:23:19:29:c7:f0:e3:77:7f:7f:a3:7c:15:ce:8d: 6c:a5:0d:08:9d:6c:96:fa:fd:be:39:1c:2c:db:62: f0:e3:87:29:f7:62:1d:3f:0a:ba:2a:66:69:44:fe: cc:af:45:1b:2f:0a:0f:21:81:7a:72:e0:90:92:b3: 9a:fe:14:bd:e2:d2:45:cf:9d:66:1b:dc:42:9c:61: ec:32:b6:e6:32:d2:f4:42:03:e9:9e:20:c2:f3:f0: 67:ee:05:ba:7f:03:a6:4d:c3:12:37:f5:64:b5:55: cc:1a:a3:31:ef:b6:c2:52:88:20:f8:62:dc:21:1b: d0:4d:ec:b7:96:a0:58:2c:66:5c:15:37:bf:29:f4: 6b:d3:68:7e:a2:39:aa:a7:b2:9c:70:12:ce:50:6f: 67:b9:7d:ac:52:75:77:ed:29:9b:cc:2a:bb:96:28: 80:bc:4e:ff:9d:d3:fa:c2:4b:9c:5c:d0:75:79:2a: 9b:31:e4:fd:97:52:f6:b6:24:0b:bc:1e:28:0a:91: 25:76:52:cb:6f:90:bc:c8:c2:6e:6f:f0:06:ca:bc: 55:eb:ad:f8:2f:02:be:ac:62:fb:4c:c8:1d:6c:5e: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AC:11:61:ED:6E:E3:6E:C2:54:16:55:F8:5F:3E:47:E8:8E:1D:E5 X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:05:65:6d:7d:25:02:61:de:af:88:b3:61:9a:6e:c6:bc: 3f:60:cc:c4:01:fd:80:09:69:06:2b:24:45:6f:1e:ed:32:25: 83:31:33:9e:90:73:99:75:2d:d9:d7:07:ac:f2:d7:9d:45:ea: 8a:e0:3b:60:cd:c6:89:63:9e:ee:21:12:f7:c5:62:a6:41:c4: 48:d7:fe:75:c9:ca:0a:40:e2:91:20:7d:73:44:f4:19:13:a1: f3:3e:96:a9:3d:a3:05:8d:6d:87:48:54:32:99:7e:b0:a6:96: 53:fa:36:46:ae:13:5c:72:83:d3:07:1c:25:ee:52:00:b0:67: 0c:b7:be:cb:a7:b1:67:dd:ab:84:4b:c4:25:13:de:85:9a:46: db:2d:c4:90:c6:2e:2b:2d:30:0f:b0:24:65:8c:26:b3:04:96: 5a:2f:b5:c5:8a:7f:1f:1b:44:ea:f5:43:e3:f4:0b:ab:d2:da: b6:57:1d:93:a4:02:e0:0d:b8:e5:4a:69:e5:e1:6f:28:78:f2: f6:f1:b4:64:9b:69:ef:39:8e:6f:c2:7f:1f:7b:bd:22:0d:cc: c5:37:a1:29:0b:61:79:e5:99:d3:3e:49:21:fc:43:dc:97:68: 50:a6:49:23:d8:be:a0:bb:d1:80:2e:a8:3c:b1:ef:0e:0c:35: 91:40:e5:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjUwNDA1MDA1MzQ2WhcNMjUwNDEyMDA1MzQ2WjAYMRYwFAYD VQQDEw02N2YwN2YxYS1lODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxWCC8XFsRoDIxsEAn6i/uSuoRtI1WTrdz1VglNGIxkpx/Djd39/o3wVzo1s pQ0InWyW+v2+ORws22Lw44cp92IdPwq6KmZpRP7Mr0UbLwoPIYF6cuCQkrOa/hS9 4tJFz51mG9xCnGHsMrbmMtL0QgPpniDC8/Bn7gW6fwOmTcMSN/VktVXMGqMx77bC Uogg+GLcIRvQTey3lqBYLGZcFTe/KfRr02h+ojmqp7KccBLOUG9nuX2sUnV37Smb zCq7liiAvE7/ndP6wkucXNB1eSqbMeT9l1L2tiQLvB4oCpEldlLLb5C8yMJub/AG yrxV6634LwK+rGL7TMgdbF6quwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6sEWHt buNuwlQWVfhfPkfojh3lMB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+iAVlbX0lAmHer4izYZpuxrw/YMzEAf2ACWkGKyRFbx7tMiWDMTOe kHOZdS3Z1wes8tedReqK4DtgzcaJY57uIRL3xWKmQcRI1/51ycoKQOKRIH1zRPQZ E6HzPpapPaMFjW2HSFQymX6wppZT+jZGrhNccoPTBxwl7lIAsGcMt77Lp7Fn3auE S8QlE96FmkbbLcSQxi4rLTAPsCRljCazBJZaL7XFin8fG0Tq9UPj9Aur0tq2Vx2T pALgDbjlSmnl4W8oePL28bRkm2nvOY5vwn8fe70iDczFN6EpC2F55ZnTPkkh/EPc l2hQpkkj2L6gu9GALqg8se8ODDWRQOWs -----END CERTIFICATE-----Generated at Sat Apr 5 23:47:02 2025 by rpki-client