$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: hwO+YsBreH1i3pnSzfX4YVjcdTaBsl8nJnr//EDmpEM= Subject key identifier: 63:52:83:E5:F5:CA:2A:4B:0C:F4:96:8F:4A:F6:39:41:C7:1D:22:FE Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 2E Signing time: Thu 03 Apr 2025 06:55:41 +0000 Manifest this update: Thu 03 Apr 2025 06:55:40 +0000 Manifest next update: Thu 10 Apr 2025 06:55:40 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: d2DZY5kLKQu9G/Nay+xb1onlWwZ30bt0TTkhf9D4ftA=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222 Validity Not Before: Apr 3 06:55:40 2025 GMT Not After : Apr 10 06:55:40 2025 GMT Subject: CN=67ee30ec-8d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:f5:c2:91:41:79:03:af:c5:f5:ea:ff:47: 43:98:71:c0:25:e1:09:53:d6:6f:2f:d8:b2:66:c5: f7:ce:d2:eb:85:30:ff:bf:6b:5c:4d:3e:34:81:b1: ce:ed:ba:f9:24:50:c1:62:af:84:78:e5:aa:e9:18: 06:2e:fd:bc:68:86:21:26:32:dd:0f:44:55:5e:2c: 37:68:eb:b4:cd:8b:52:ca:8c:7e:e3:76:16:c2:f9: e3:38:a7:38:02:4d:6d:a2:05:0a:bd:a0:86:3c:68: 27:61:76:1b:5c:d9:0a:3f:a4:c6:87:3c:05:81:e5: 8e:8f:8d:5d:a3:d6:f3:8f:12:4b:3f:fd:d0:fd:b4: b2:ad:10:ba:6f:60:11:bc:60:30:a6:24:c6:b4:4e: 8a:09:7e:a6:5f:8e:90:c4:a2:09:0e:ea:b3:a3:5b: 5b:c0:dd:10:6f:7b:01:9c:c2:ae:84:80:f8:19:06: 8d:13:df:6a:54:cc:dd:9c:42:2c:eb:f6:4f:f1:33: a6:c6:ce:45:69:be:22:42:cd:f9:ae:47:16:9d:f9: e5:98:11:48:27:9a:93:30:1a:8f:5a:0a:8f:53:11: 07:14:d7:7b:e7:a1:17:74:fd:a3:47:fb:d1:99:b5: 5a:ec:5b:32:58:90:6c:a3:80:c2:05:83:aa:f3:b1: 28:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:52:83:E5:F5:CA:2A:4B:0C:F4:96:8F:4A:F6:39:41:C7:1D:22:FE X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ef:16:e0:12:64:6a:40:08:a6:43:7d:3b:74:da:ae:0b:fa: 41:95:6b:50:8d:28:83:58:b9:d6:2c:a8:ee:b7:9f:18:64:14: 30:e0:55:ad:a3:bd:9e:5f:89:26:34:7b:4b:9e:88:7e:a2:9a: fb:09:20:1c:39:47:74:2f:f4:39:46:84:25:76:db:26:ba:af: f5:ff:67:a8:93:ba:dc:e6:18:fd:61:e9:3f:6e:44:23:3c:9b: e1:52:dc:05:99:3a:3c:72:39:bb:6b:25:a9:7e:c9:50:9f:87: 0f:5e:94:63:e6:11:1d:66:e5:57:2c:23:c7:88:e6:ba:f1:4d: 75:5d:33:06:bd:18:42:18:19:bf:a2:9f:77:ca:c1:95:fc:28: 04:b7:88:48:8d:b0:77:14:eb:c5:e4:6a:cc:4e:ea:cf:e5:cf: e7:dd:42:dc:38:2a:2c:65:76:85:89:62:79:b8:17:a6:6f:18: 52:b4:b2:3a:2d:a4:99:4c:b7:52:ec:d5:5f:78:f7:d0:f0:1f: dd:dd:6a:a0:2a:a0:3d:a9:55:37:80:c4:eb:ca:6f:4c:3e:35: 1d:ac:89:a4:15:e7:3c:53:de:a9:9a:7f:89:0b:f2:f6:d0:23: a8:e8:17:52:11:c9:a2:0b:39:eb:2b:15:43:6e:58:fd:c1:68: 7b:e6:d0:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDIyMjExMC8GA1UEBRMoODIwNUU5Nzk2RUM2OUEwQzczREMzQjVCM0NFMTJDNDgx OTJCNDU3NzAeFw0yNTA0MDMwNjU1NDBaFw0yNTA0MTAwNjU1NDBaMBgxFjAUBgNV BAMTDTY3ZWUzMGVjLThkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDELPXCkUF5A6/F9er/R0OYccAl4QlT1m8v2LJmxffO0uuFMP+/a1xNPjSBsc7t uvkkUMFir4R45arpGAYu/bxohiEmMt0PRFVeLDdo67TNi1LKjH7jdhbC+eM4pzgC TW2iBQq9oIY8aCdhdhtc2Qo/pMaHPAWB5Y6PjV2j1vOPEks//dD9tLKtELpvYBG8 YDCmJMa0TooJfqZfjpDEogkO6rOjW1vA3RBvewGcwq6EgPgZBo0T32pUzN2cQizr 9k/xM6bGzkVpviJCzfmuRxad+eWYEUgnmpMwGo9aCo9TEQcU13vnoRd0/aNH+9GZ tVrsWzJYkGyjgMIFg6rzsSjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY1KD5fXK KksM9JaPSvY5QccdIv4wHwYDVR0jBBgwFoAUggXpeW7Gmgxz3DtbPOEsSBkrRXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMjIyLzg3NjQ0ODlDQ0Q3 RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2dYcGVXN0dtZ3h6M0R0YlBPRXNTQmtyUlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4 ejNEdGJQT0VzU0JrclJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3vFuASZGpACKZDfTt02q4L+kGVa1CNKINYudYsqO63nxhkFDDgVa2j vZ5fiSY0e0ueiH6imvsJIBw5R3Qv9DlGhCV22ya6r/X/Z6iTutzmGP1h6T9uRCM8 m+FS3AWZOjxyObtrJal+yVCfhw9elGPmER1m5VcsI8eI5rrxTXVdMwa9GEIYGb+i n3fKwZX8KAS3iEiNsHcU68XkasxO6s/lz+fdQtw4KixldoWJYnm4F6ZvGFK0sjot pJlMt1Ls1V9499DwH93daqAqoD2pVTeAxOvKb0w+NR2siaQV5zxT3qmaf4kL8vbQ I6joF1IRyaILOesrFUNuWP3BaHvm0EA= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:47 2025 by rpki-client