$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: Nzv2/IG8BaD/5EHgossxSQAqH3C1gOgHigJ2hN2wRHY= Subject key identifier: 35:5A:E9:C4:7D:71:D7:AE:37:66:A2:0B:98:E7:73:AE:46:63:B8:14 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 01EB Signing time: Sat 31 May 2025 02:17:28 +0000 Manifest this update: Sat 31 May 2025 02:17:28 +0000 Manifest next update: Sat 07 Jun 2025 02:17:28 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: ttg7R38D5rhWCW+6jZhT7RDQLea/1A4bcdZX9uNu6bg=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: May 31 02:17:28 2025 GMT Not After : Jun 7 02:17:28 2025 GMT Subject: CN=683a66b8-2980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:43:9f:e3:7b:e8:9c:0b:bb:ec:92:21:a2:fe: 48:94:63:96:e2:7d:20:a4:0b:4d:92:a3:9c:24:d0: dc:d7:74:2b:84:ab:e5:5e:0f:63:2e:b6:5e:30:09: 0c:98:6e:8d:c8:66:91:60:4c:50:d4:24:a7:40:6d: 98:45:cc:27:d1:1a:d1:f9:c5:ed:f6:2a:b1:2c:bb: 24:0f:dc:b4:22:e9:66:ed:8e:d5:96:25:f9:cf:f4: 21:44:7e:97:8e:09:cf:e9:83:9c:36:34:a9:9b:56: 28:d5:93:e4:ca:64:45:b2:2c:53:10:86:73:8b:cf: 43:22:62:b6:64:0a:70:6f:bf:76:c1:86:dc:7d:89: 66:96:94:17:e6:95:2a:4c:00:0c:29:98:60:a9:9b: 7d:c4:b1:33:93:25:62:b6:a7:1a:51:08:39:5c:27: 9c:6b:aa:f5:f8:8c:8f:fd:84:df:c8:77:7c:0e:8e: 24:7b:31:d0:6f:a4:0c:2e:2a:38:36:e9:03:35:e5: ce:e3:a0:bc:ce:ee:3b:93:06:a0:94:11:ce:e8:94: f8:cd:7b:ee:46:5a:97:f0:ab:4a:ab:eb:77:89:d5: 57:c0:74:8e:dd:26:ab:96:7c:26:ff:cc:5d:cd:c5: 4c:4d:74:02:7e:35:6c:7b:a1:53:a4:fc:aa:d8:81: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:E9:C4:7D:71:D7:AE:37:66:A2:0B:98:E7:73:AE:46:63:B8:14 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:35:b8:c9:07:44:e2:b7:68:93:58:1b:8e:6a:0d:44:7c:3c: 96:c1:73:95:5d:7e:b2:0e:3f:8c:a0:2b:2f:0e:89:64:9c:96: fb:f1:90:77:19:d1:27:4e:25:86:da:91:f9:4e:23:fc:22:a6: f4:43:8b:44:26:81:6d:14:38:6f:b3:5b:ac:53:23:62:c5:44: a8:64:6f:e1:b9:26:d5:82:e1:e4:f0:91:32:12:9c:69:45:59: 79:16:1b:e3:f4:bc:25:56:00:35:64:25:ab:a4:cf:9f:6c:2a: a7:48:bb:f8:78:a9:e5:ae:eb:2d:b0:c2:2a:fa:f5:01:5b:ae: f7:a4:d3:14:20:88:dd:92:b5:29:d7:44:fe:a2:85:73:43:84: 8c:01:07:dd:c9:bf:89:3f:6d:09:19:74:ae:eb:c1:1f:04:4d: e4:b3:1c:ac:91:6d:bb:c1:19:1d:d3:5e:63:24:b3:c7:7d:8c: c4:22:f8:ca:83:9d:af:70:dc:ab:aa:e6:be:9a:2c:8c:f8:92: e2:70:94:b5:94:be:97:33:7a:1e:9e:69:a3:03:13:e7:f2:33: 79:70:b8:6e:a7:32:ae:a1:73:88:11:5b:a9:06:14:a7:b5:e5: ad:58:de:fb:7b:59:d0:97:a6:14:25:50:66:a0:38:84:c6:ca: e1:47:81:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwNTMxMDIxNzI4WhcNMjUwNjA3MDIxNzI4WjAYMRYwFAYD VQQDEw02ODNhNjZiOC0yOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kOf43vonAu77JIhov5IlGOW4n0gpAtNkqOcJNDc13QrhKvlXg9jLrZeMAkM mG6NyGaRYExQ1CSnQG2YRcwn0RrR+cXt9iqxLLskD9y0Iulm7Y7VliX5z/QhRH6X jgnP6YOcNjSpm1Yo1ZPkymRFsixTEIZzi89DImK2ZApwb792wYbcfYlmlpQX5pUq TAAMKZhgqZt9xLEzkyVitqcaUQg5XCeca6r1+IyP/YTfyHd8Do4kezHQb6QMLio4 NukDNeXO46C8zu47kwaglBHO6JT4zXvuRlqX8KtKq+t3idVXwHSO3Sarlnwm/8xd zcVMTXQCfjVse6FTpPyq2IFIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVa6cR9 cdeuN2aiC5jnc65GY7gUMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqNbjJB0Tit2iTWBuOag1EfDyWwXOVXX6yDj+MoCsvDolknJb78ZB3 GdEnTiWG2pH5TiP8Iqb0Q4tEJoFtFDhvs1usUyNixUSoZG/huSbVguHk8JEyEpxp RVl5Fhvj9LwlVgA1ZCWrpM+fbCqnSLv4eKnlrustsMIq+vUBW673pNMUIIjdkrUp 10T+ooVzQ4SMAQfdyb+JP20JGXSu68EfBE3ksxyskW27wRkd015jJLPHfYzEIvjK g52vcNyrqua+miyM+JLicJS1lL6XM3oenmmjAxPn8jN5cLhupzKuoXOIEVupBhSn teWtWN77e1nQl6YUJVBmoDiExsrhR4GY -----END CERTIFICATE-----Generated at Sat May 31 16:43:50 2025 by rpki-client