$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: EdApiNmDiAUqq82xcgNRgZ5i4g/3KMi6qgrr5vcijxQ= Subject key identifier: 66:13:CF:BA:0A:17:33:C6:3D:AB:AD:4B:1F:49:A6:12:E1:59:99:7F Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 0412 Signing time: Sat 05 Apr 2025 00:32:42 +0000 Manifest this update: Sat 05 Apr 2025 00:32:41 +0000 Manifest next update: Sat 12 Apr 2025 00:32:41 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: VBtL/g0KALWegCB401R4/k89p57/w2Qo1UtiSRbOITM=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 7MtcxTQ2rMr9wRU4t+OZ5IgSjQo76u9up+VI67f9CpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30 Validity Not Before: Apr 5 00:32:41 2025 GMT Not After : Apr 12 00:32:41 2025 GMT Subject: CN=67f07a29-5c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:54:b2:8b:c4:31:2a:ef:21:67:18:5a:4b: 6f:3a:ef:39:05:5b:b4:d9:2d:1d:b9:48:df:6a:61: ba:d9:30:3b:dd:9d:e6:bb:b5:9c:c3:cd:41:20:dd: d6:2e:d6:28:d5:66:f6:05:ee:58:40:79:83:b4:9a: 5c:e1:2d:63:40:55:9b:12:46:59:84:25:5c:12:b7: d4:e0:83:ca:d3:b8:3c:e7:f2:c4:58:54:eb:9a:9e: f1:e2:24:88:db:65:fa:37:18:9a:43:11:53:ce:18: 25:33:98:0d:b6:60:b4:42:9c:98:ae:31:86:c9:3b: a6:c6:1b:98:ff:f6:fe:88:18:73:6d:d5:bf:0a:8e: 9f:b9:2c:59:2e:f4:6d:f0:4f:28:be:ba:14:66:4c: 08:33:3f:f6:3f:26:97:38:63:eb:45:61:df:1c:0d: 9b:a5:8f:bc:4a:61:22:05:51:84:84:b7:34:9b:32: 30:ff:fe:9d:89:98:40:bd:07:9a:e9:45:c5:b4:a6: 41:df:52:3c:ec:24:07:84:a7:fa:8b:69:95:67:5f: e4:e5:c4:88:ca:30:7f:18:96:96:98:50:fd:16:0e: 92:ce:9a:15:92:d7:b5:30:e3:cd:e1:39:c4:f4:e0: 22:b9:3c:2f:69:7d:6d:7f:74:2d:ed:ff:10:27:85: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:CF:BA:0A:17:33:C6:3D:AB:AD:4B:1F:49:A6:12:E1:59:99:7F X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:b1:8e:93:9c:f3:80:ef:66:fe:b1:f5:1a:f5:f1:35:54:62: 91:53:68:8a:4c:12:1a:ab:08:72:61:4b:ff:68:17:1b:85:46: 01:63:61:84:34:58:48:0a:7c:78:95:36:5f:31:68:16:c7:7c: fe:1f:0a:aa:45:b8:65:50:c6:99:bb:84:46:90:9d:f7:0b:f0: 79:20:32:aa:2e:ad:e6:cf:33:c6:24:b8:af:c4:b0:61:9a:55: 26:8e:61:7d:fe:67:56:0f:f9:4b:c4:71:6c:9d:fe:03:5e:87: 38:2e:cd:2f:46:63:fe:66:e1:e6:14:98:30:7f:e2:4f:fa:19: 2f:59:34:f2:3a:81:72:55:71:df:d3:e7:c2:f3:4e:7f:0e:cb: 09:a9:a1:1a:84:9e:6b:64:75:f6:b0:31:ba:bf:60:78:0b:4e: 1f:f3:f1:2a:7f:ed:6c:6c:4f:36:64:97:af:0c:bc:39:89:a1: c5:d2:1d:f0:8c:1a:18:65:e2:21:15:02:18:77:4c:92:07:c6: 75:0a:b5:33:1a:06:9a:89:84:22:eb:71:c2:e8:6c:86:b6:68: 03:ed:47:80:1f:6e:fd:7f:5d:89:70:1d:30:ea:3a:91:6b:0d: ab:38:cc:d7:c9:f1:42:72:60:0e:df:32:86:3f:f5:12:7b:23: fd:52:36:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNDA1MDAzMjQxWhcNMjUwNDEyMDAzMjQxWjAYMRYwFAYD VQQDEw02N2YwN2EyOS01YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQVUsovEMSrvIWcYWktvOu85BVu02S0duUjfamG62TA73Z3mu7Wcw81BIN3W LtYo1Wb2Be5YQHmDtJpc4S1jQFWbEkZZhCVcErfU4IPK07g85/LEWFTrmp7x4iSI 22X6NxiaQxFTzhglM5gNtmC0QpyYrjGGyTumxhuY//b+iBhzbdW/Co6fuSxZLvRt 8E8ovroUZkwIMz/2PyaXOGPrRWHfHA2bpY+8SmEiBVGEhLc0mzIw//6diZhAvQea 6UXFtKZB31I87CQHhKf6i2mVZ1/k5cSIyjB/GJaWmFD9Fg6SzpoVkte1MOPN4TnE 9OAiuTwvaX1tf3Qt7f8QJ4WxRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYTz7oK FzPGPautSx9JphLhWZl/MB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAosY6TnPOA72b+sfUa9fE1VGKRU2iKTBIaqwhyYUv/aBcbhUYBY2GE NFhICnx4lTZfMWgWx3z+HwqqRbhlUMaZu4RGkJ33C/B5IDKqLq3mzzPGJLivxLBh mlUmjmF9/mdWD/lLxHFsnf4DXoc4Ls0vRmP+ZuHmFJgwf+JP+hkvWTTyOoFyVXHf 0+fC805/DssJqaEahJ5rZHX2sDG6v2B4C04f8/Eqf+1sbE82ZJevDLw5iaHF0h3w jBoYZeIhFQIYd0ySB8Z1CrUzGgaaiYQi63HC6GyGtmgD7UeAH279f12JcB0w6jqR aw2rOMzXyfFCcmAO3zKGP/USeyP9UjYC -----END CERTIFICATE-----Generated at Sat Apr 5 13:32:26 2025 by rpki-client