$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: uMRhI+QO7hHKNCaz2qOhbknKUwWgTfyAC8fyRmgOApE= Subject key identifier: D0:BA:BD:14:A0:7C:42:BD:06:67:88:20:8F:C9:4D:37:E1:B9:89:96 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: DB Signing time: Sat 31 May 2025 05:11:36 +0000 Manifest this update: Sat 31 May 2025 05:11:36 +0000 Manifest next update: Sat 07 Jun 2025 05:11:36 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: cTgI5kMfJgx33BGnLX8KVkKu3XIVy7k0H9FK4wWUrgk=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: May 31 05:11:36 2025 GMT Not After : Jun 7 05:11:36 2025 GMT Subject: CN=683a8f88-46f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:af:d6:3b:54:d6:c6:fa:83:ff:15:d1:fe: da:55:01:ca:b0:ac:98:43:05:e7:9e:23:98:02:d6: d0:2b:26:ae:10:61:05:17:82:e6:eb:8b:26:4e:bd: 36:d4:32:51:69:69:ad:36:29:b8:f1:33:41:c8:dc: 78:88:d3:94:60:93:78:39:0c:5e:b3:fc:b5:16:5f: 6b:8d:db:3b:a3:9e:9b:5e:31:26:56:7d:3f:85:de: ed:84:ec:ad:ba:82:63:b4:7a:bd:e9:e0:c3:94:db: 87:99:d4:25:03:a6:07:0d:6f:51:f2:a7:63:4d:56: 7b:fc:4a:5c:63:71:fc:f3:39:87:5c:56:b6:6d:5d: c8:15:36:3e:7d:83:2c:fc:70:33:51:20:5f:34:00: d1:49:e8:00:98:ea:04:db:bb:d8:8c:32:1d:90:6e: 75:32:13:3d:c7:df:33:c4:fe:58:ee:82:5a:2e:9a: 31:57:8a:34:4f:2a:11:4c:93:f5:1f:78:6f:ea:b2: 58:0d:d7:09:e7:1e:e2:b1:e3:7a:45:fb:8c:a5:cd: 7f:bd:d2:33:69:00:ec:58:58:6e:51:fd:be:61:4f: 92:5d:c8:38:6a:97:fc:98:dc:79:cc:ae:6a:de:0c: b0:c3:f7:49:e1:8a:a7:b9:8d:7e:85:ac:88:53:5d: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:BD:14:A0:7C:42:BD:06:67:88:20:8F:C9:4D:37:E1:B9:89:96 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:e1:9f:bf:f8:2b:b4:8d:3c:1b:c3:80:d8:a0:33:cc:20:fc: 1e:33:9d:46:b6:3f:0d:16:57:ef:ca:a6:9c:e7:e9:de:71:f8: e7:5a:c4:f5:50:e7:ea:7a:1f:a9:9a:7e:88:1b:28:c1:ec:0d: fd:09:b8:c3:6e:d7:cd:a1:76:a5:0e:fa:88:84:52:af:06:99: 59:17:2d:33:81:5b:56:be:2c:38:59:64:dc:b2:7d:a9:11:e5: 5b:05:6f:16:50:c5:96:8a:5e:6f:9c:fb:ed:a8:cd:84:db:55: f3:ef:3d:9b:03:e5:5d:a6:5b:f8:25:fc:cc:5c:3f:cd:ce:08: ee:c4:f7:9d:19:2b:b8:4f:47:24:54:ac:cd:2e:77:10:19:97: 8b:7b:6b:2f:e9:31:d5:08:43:97:55:c9:8d:de:70:7f:a9:9a: 64:88:2d:b7:f6:ad:63:3d:36:6b:77:2a:e4:b2:71:60:cd:43: 23:ff:d7:06:74:f0:ac:c1:fc:75:cf:97:23:db:fa:1d:7b:dd: d8:52:fa:7a:8a:c1:ce:f6:f1:04:30:2c:ac:56:0f:61:86:a9: 77:22:7f:95:6f:a6:45:ef:9d:07:49:eb:ee:65:ea:e0:4b:02: 08:be:d0:b8:47:5b:e2:28:f0:ed:44:06:52:85:a4:ad:6e:ca: 43:b7:60:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwNTMxMDUxMTM2WhcNMjUwNjA3MDUxMTM2WjAYMRYwFAYD VQQDEw02ODNhOGY4OC00NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqCv1jtU1sb6g/8V0f7aVQHKsKyYQwXnniOYAtbQKyauEGEFF4Lm64smTr02 1DJRaWmtNim48TNByNx4iNOUYJN4OQxes/y1Fl9rjds7o56bXjEmVn0/hd7thOyt uoJjtHq96eDDlNuHmdQlA6YHDW9R8qdjTVZ7/EpcY3H88zmHXFa2bV3IFTY+fYMs /HAzUSBfNADRSegAmOoE27vYjDIdkG51MhM9x98zxP5Y7oJaLpoxV4o0TyoRTJP1 H3hv6rJYDdcJ5x7iseN6RfuMpc1/vdIzaQDsWFhuUf2+YU+SXcg4apf8mNx5zK5q 3gyww/dJ4YqnuY1+hayIU11hNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC6vRSg fEK9BmeIII/JTTfhuYmWMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO4Z+/+Cu0jTwbw4DYoDPMIPweM51Gtj8NFlfvyqac5+necfjnWsT1 UOfqeh+pmn6IGyjB7A39CbjDbtfNoXalDvqIhFKvBplZFy0zgVtWviw4WWTcsn2p EeVbBW8WUMWWil5vnPvtqM2E21Xz7z2bA+Vdplv4JfzMXD/NzgjuxPedGSu4T0ck VKzNLncQGZeLe2sv6THVCEOXVcmN3nB/qZpkiC239q1jPTZrdyrksnFgzUMj/9cG dPCswfx1z5cj2/ode93YUvp6isHO9vEEMCysVg9hhql3In+Vb6ZF750HSevuZerg SwIIvtC4R1viKPDtRAZShaStbspDt2Ag -----END CERTIFICATE-----Generated at Sat May 31 17:00:21 2025 by rpki-client