$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: qn4X2XUHVvo6CMWChrZQO59Biappoqjukf4k5vwDOo8= Subject key identifier: 2F:F4:CD:25:3E:8B:FB:F5:C5:CE:D8:94:7C:31:D3:A6:24:F5:C4:47 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 3462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 54F1 Signing time: Fri 04 Apr 2025 14:54:08 +0000 Manifest this update: Fri 04 Apr 2025 14:54:07 +0000 Manifest next update: Fri 11 Apr 2025 14:54:07 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: 6IKBePkQdSw81bHCmLTeymGigBLFAYTE1tZBInghpZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13410 (0x3462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885 Validity Not Before: Apr 4 14:54:07 2025 GMT Not After : Apr 11 14:54:07 2025 GMT Subject: CN=67eff28f-bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:9c:39:6b:02:8d:cc:2d:32:c2:1f:9c:0f: 37:6e:de:6a:3e:ac:18:b9:5a:86:fc:f8:74:f8:7b: 65:75:db:3b:7f:53:46:98:fd:b3:ba:56:ec:a8:18: fc:ba:4e:78:32:7f:42:29:41:aa:f2:7a:c4:9a:53: 69:b6:aa:0a:18:1e:5f:df:14:60:7c:f9:c6:a8:c5: 98:c2:4e:6b:22:6c:e8:92:37:79:22:b4:16:72:9c: 9b:c0:9e:ec:4a:c6:ab:23:65:51:b7:94:45:a1:b1: b4:0a:26:ff:17:c4:95:5e:9d:83:98:b1:ac:46:71: 6c:9b:ce:e9:da:00:86:54:d3:ea:35:23:7c:49:74: 71:0d:00:d4:c5:51:31:dd:c5:60:bd:e6:e9:07:f2: cf:a3:e9:74:29:dd:e2:e2:72:ee:6e:1f:16:63:3c: 73:11:19:55:a8:a5:60:36:6c:65:df:53:04:50:47: eb:99:8c:52:87:fb:01:98:23:30:0d:a5:91:c0:21: 0b:0b:15:77:e5:75:e7:b7:9f:ab:86:c7:9b:d8:ec: 14:75:ea:ba:8a:91:61:75:03:67:b5:fb:1b:6f:49: 4f:42:9b:89:37:78:03:d9:39:6e:4c:73:13:cd:55: e9:72:b8:54:16:b7:96:09:ba:73:6e:34:69:52:ba: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:CD:25:3E:8B:FB:F5:C5:CE:D8:94:7C:31:D3:A6:24:F5:C4:47 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:63:fc:d6:36:13:68:42:2a:34:a1:96:57:82:8d:cb:d0:16: 9f:7e:da:70:2a:2a:0f:12:6c:9e:a1:d2:0d:28:ee:41:de:92: e6:59:f9:50:f6:93:5d:0b:47:53:99:90:f4:c8:93:be:db:07: f0:50:cc:5f:3d:07:59:10:ba:40:99:48:64:cf:05:37:08:b2: f7:67:44:d1:ac:4b:97:0f:11:41:e4:6f:e4:10:8d:00:d7:f1: c6:60:2a:d7:00:31:26:3e:af:41:9f:38:b1:07:b1:96:c0:03: 68:01:1d:d4:da:3e:38:45:20:24:36:fe:81:cb:18:e3:41:e7: a3:51:05:d0:e6:26:41:31:0f:1f:3a:5b:3d:ff:10:3a:5a:0e: bf:9e:e2:7d:5c:da:75:f5:0e:84:53:0e:11:ab:39:6a:f3:6d: 25:43:60:c3:98:18:d3:c9:dc:aa:6a:00:fa:95:c0:f6:6e:48: 77:c6:d9:58:7b:e8:8a:e0:a0:09:9e:58:bc:85:ef:92:ca:e9: 0f:e0:bf:a8:ad:a8:88:b5:d6:91:51:2c:3d:47:7c:56:c0:12: 9e:a3:40:22:8c:3a:cb:63:1f:06:89:97:b0:91:5c:07:4e:1e: 18:84:d3:1a:3e:75:c1:1a:4f:0e:84:9a:7f:6b:e8:3e:7c:13: b9:c5:83:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUwNDA0MTQ1NDA3WhcNMjUwNDExMTQ1NDA3WjAYMRYwFAYD VQQDEw02N2VmZjI4Zi1iZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaScOWsCjcwtMsIfnA83bt5qPqwYuVqG/Ph0+Htldds7f1NGmP2zulbsqBj8 uk54Mn9CKUGq8nrEmlNptqoKGB5f3xRgfPnGqMWYwk5rImzokjd5IrQWcpybwJ7s SsarI2VRt5RFobG0Cib/F8SVXp2DmLGsRnFsm87p2gCGVNPqNSN8SXRxDQDUxVEx 3cVgvebpB/LPo+l0Kd3i4nLubh8WYzxzERlVqKVgNmxl31MEUEfrmYxSh/sBmCMw DaWRwCELCxV35XXnt5+rhseb2OwUdeq6ipFhdQNntfsbb0lPQpuJN3gD2TluTHMT zVXpcrhUFreWCbpzbjRpUrp++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/0zSU+ i/v1xc7YlHwx06Yk9cRHMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfY/zWNhNoQio0oZZXgo3L0BafftpwKioPEmyeodINKO5B3pLmWflQ 9pNdC0dTmZD0yJO+2wfwUMxfPQdZELpAmUhkzwU3CLL3Z0TRrEuXDxFB5G/kEI0A 1/HGYCrXADEmPq9BnzixB7GWwANoAR3U2j44RSAkNv6ByxjjQeejUQXQ5iZBMQ8f Ols9/xA6Wg6/nuJ9XNp19Q6EUw4Rqzlq820lQ2DDmBjTydyqagD6lcD2bkh3xtlY e+iK4KAJnli8he+SyukP4L+oraiItdaRUSw9R3xWwBKeo0AijDrLYx8GiZewkVwH Th4YhNMaPnXBGk8OhJp/a+g+fBO5xYNN -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:08 2025 by rpki-client