$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: xhnEJI0h2dgTgPdk+4C7KGQBRUeUHJaJjimJBYb5ATs= Subject key identifier: 7F:DA:A5:E5:12:BD:30:15:7B:54:AF:93:D4:7C:44:5D:AE:9C:D7:34 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 0657 Signing time: Fri 30 May 2025 22:42:35 +0000 Manifest this update: Fri 30 May 2025 22:42:34 +0000 Manifest next update: Fri 06 Jun 2025 22:42:34 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: qmKxRfb7wymTMyoyXxb4hBLjJMOPdb1JvWG+wIYBQ7c=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: HJ5B1NeUHZuSr0dNR5r03BZuHl4ib3IbNLeDtkm6M04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: May 30 22:42:34 2025 GMT Not After : Jun 6 22:42:34 2025 GMT Subject: CN=683a345b-4575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:6d:72:ce:55:8c:49:9d:83:78:6d:24:a8: f1:ae:9c:17:33:a9:46:b3:58:74:76:a5:ae:a6:fc: d5:6a:92:d3:64:a5:ab:ad:0c:b6:b2:27:c2:10:51: 3e:6c:a4:31:8e:bd:98:59:4c:2a:39:28:01:9b:fd: 33:14:ea:65:dd:1c:bb:05:a4:41:a3:65:83:35:81: 02:75:6a:81:7e:98:b7:ab:6b:66:66:75:b4:2a:28: 69:22:f2:e1:71:d6:b3:d7:37:bc:1d:31:0a:c3:4e: ed:b0:da:fe:06:09:31:01:30:7b:05:8b:ef:9a:00: 45:85:90:74:5e:01:2a:19:f3:21:87:52:91:41:c7: 45:13:1d:1e:97:d9:5c:bb:60:06:c3:55:04:10:53: b6:eb:f7:76:d8:1a:49:dc:23:a8:ce:d1:70:f6:3f: 0b:2f:e5:0c:71:48:02:ca:21:3e:91:b2:8e:32:3c: 34:62:2b:8f:c2:35:f4:3f:8f:c0:b6:c1:14:4d:c7: 27:bc:56:3f:2f:25:66:5a:86:99:ac:0b:24:df:42: 60:44:83:c0:30:d2:98:09:6f:01:96:da:f2:26:48: 59:00:e8:ee:42:70:5d:b3:83:d4:13:ac:fb:e9:86: 26:ab:6a:48:92:c5:8f:68:cf:d2:9a:cf:87:1d:c8: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:A5:E5:12:BD:30:15:7B:54:AF:93:D4:7C:44:5D:AE:9C:D7:34 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1e:98:cb:59:7b:60:43:87:cf:e2:ef:96:c7:66:b6:4d:6b: 94:3a:34:d5:ef:9c:12:76:7b:a1:24:08:c4:8c:92:6d:da:15: ee:35:db:57:ee:c4:0d:89:0b:a0:b4:00:69:52:9b:b8:2c:ac: bb:db:05:81:11:a5:95:29:a9:96:7e:9d:b8:ec:d2:78:19:4f: 59:2b:3c:3e:5a:d1:0c:f9:83:ac:0d:d8:a1:27:ea:74:8a:b3: c0:a7:d6:3b:db:31:0d:f0:52:b2:13:78:ca:b4:90:30:c4:d0: a3:03:f0:d9:9e:97:1c:36:27:4c:73:8c:dd:43:3e:cc:a2:99: 52:6b:c7:11:2b:72:13:10:6e:d1:1b:3d:e2:a7:d2:29:a5:0f: a9:6b:d3:b8:30:a9:06:2c:9a:60:51:b7:8b:24:b4:23:5f:7b: 5e:fc:3a:18:36:86:9c:06:41:d6:68:45:2c:8b:f9:81:61:19: 6d:00:d1:f0:b5:97:b7:37:9a:a2:60:08:b6:e8:06:f0:b5:06: a5:b3:16:66:f5:6e:df:cb:89:1e:ae:84:bc:34:4e:6f:06:c6: 94:b3:88:ae:8f:29:92:10:f9:1f:ed:e0:fe:9b:2c:c6:1f:76: d7:2e:3f:5c:55:82:63:c8:07:0c:2a:1a:c3:c1:cc:1a:23:ef: cd:e9:9c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUwNTMwMjI0MjM0WhcNMjUwNjA2MjI0MjM0WjAYMRYwFAYD VQQDEw02ODNhMzQ1Yi00NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlZtcs5VjEmdg3htJKjxrpwXM6lGs1h0dqWupvzVapLTZKWrrQy2sifCEFE+ bKQxjr2YWUwqOSgBm/0zFOpl3Ry7BaRBo2WDNYECdWqBfpi3q2tmZnW0KihpIvLh cdaz1ze8HTEKw07tsNr+BgkxATB7BYvvmgBFhZB0XgEqGfMhh1KRQcdFEx0el9lc u2AGw1UEEFO26/d22BpJ3COoztFw9j8LL+UMcUgCyiE+kbKOMjw0YiuPwjX0P4/A tsEUTccnvFY/LyVmWoaZrAsk30JgRIPAMNKYCW8BltryJkhZAOjuQnBds4PUE6z7 6YYmq2pIksWPaM/Sms+HHcjiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/apeUS vTAVe1Svk9R8RF2unNc0MB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxHpjLWXtgQ4fP4u+Wx2a2TWuUOjTV75wSdnuhJAjEjJJt2hXuNdtX 7sQNiQugtABpUpu4LKy72wWBEaWVKamWfp247NJ4GU9ZKzw+WtEM+YOsDdihJ+p0 irPAp9Y72zEN8FKyE3jKtJAwxNCjA/DZnpccNidMc4zdQz7MoplSa8cRK3ITEG7R Gz3ip9IppQ+pa9O4MKkGLJpgUbeLJLQjX3te/DoYNoacBkHWaEUsi/mBYRltANHw tZe3N5qiYAi26AbwtQalsxZm9W7fy4keroS8NE5vBsaUs4iujymSEPkf7eD+myzG H3bXLj9cVYJjyAcMKhrDwcwaI+/N6ZyN -----END CERTIFICATE-----Generated at Sat May 31 16:34:03 2025 by rpki-client