$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: zBSiKylDsU9UxHk0Wu4xnzatk8wWueUQlPcTpFM2/6Y= Subject key identifier: A5:77:FA:E2:CE:2C:23:8E:7F:35:00:62:88:13:95:41:70:4D:AA:E7 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 0623 Signing time: Fri 14 Feb 2025 23:50:39 +0000 Manifest this update: Fri 14 Feb 2025 23:50:38 +0000 Manifest next update: Fri 21 Feb 2025 23:50:38 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: lNxAjRg2aDxsA2T2lEHTfWInmLRBp1jeWyCxGJ92u+U=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: HJ5B1NeUHZuSr0dNR5r03BZuHl4ib3IbNLeDtkm6M04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B Validity Not Before: Feb 14 23:50:38 2025 GMT Not After : Feb 21 23:50:38 2025 GMT Subject: CN=67afd6ce-2681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:19:2b:bf:31:17:07:97:b1:bb:7f:0d:08:13: 49:02:be:78:3a:eb:44:1b:00:89:a9:60:6d:3f:6d: 5a:f3:bb:4c:6c:5a:60:e6:17:bc:f3:ae:8e:21:38: e8:84:59:9f:46:82:54:5a:a4:0e:35:d1:1d:e2:84: 70:e3:7a:28:d1:ab:9b:dc:44:53:8c:6e:c8:de:47: de:2a:66:36:55:37:c7:98:39:ec:55:1f:f7:dd:d0: 4e:85:30:ce:04:f6:d1:86:90:86:cc:48:d3:dc:8d: 4d:cd:fa:c5:a0:00:b0:f2:30:bc:f6:60:53:a3:29: 30:80:33:37:03:d1:c9:8f:03:52:09:f4:c5:4e:7c: 03:5d:7c:c9:bf:6f:b4:85:c7:6a:af:8a:69:95:e0: a3:32:65:05:26:b5:29:12:59:ca:e6:23:f0:bf:70: ad:a2:32:80:6e:83:e4:09:d7:68:33:10:a6:cd:90: ed:94:c5:5a:7a:e2:6a:ee:cf:c8:e3:35:cd:87:0a: 80:45:1a:5b:25:fc:62:59:ab:77:52:f2:4e:5d:a5: 35:65:64:f2:69:48:86:77:61:6e:63:3f:c6:5f:93: 5f:d4:bb:8d:ed:4f:b2:21:a8:cc:1f:ae:ec:59:9f: cc:f9:78:55:e6:cc:9c:6d:0c:81:d5:bd:cc:07:f5: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:FA:E2:CE:2C:23:8E:7F:35:00:62:88:13:95:41:70:4D:AA:E7 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a2:49:ee:d0:bc:b8:53:84:86:e5:f0:54:be:c3:96:c9:fa: 31:8c:c9:8e:a0:97:51:11:8d:d6:d6:1e:9c:4d:3c:d9:64:c9: 1e:6a:19:96:84:5f:ed:1a:7b:89:30:0d:92:3b:dc:4c:87:2d: 29:53:1b:a9:31:cf:35:f6:35:e5:a3:61:d1:fa:9d:43:31:31: eb:35:1e:e8:70:cf:0a:69:05:a2:fd:02:72:32:de:a9:52:37: 19:97:82:26:7f:24:9d:c5:76:0e:7a:2f:f9:29:14:36:ec:07: 0d:c6:9a:d3:a9:8d:cc:f8:3b:6f:85:12:75:a9:4a:fe:a4:6c: 25:3b:cd:99:f9:d7:9b:64:15:a9:e9:1d:db:37:98:4d:0e:fa: e7:f6:9d:d9:3f:c4:4f:b9:fa:0b:b1:e4:5d:29:43:d9:ab:4f: 76:0a:f8:f2:a6:cb:43:1b:83:48:df:40:1d:9a:61:3f:49:7d: f5:2f:91:69:1a:95:e0:88:12:11:61:09:73:1e:5e:1e:39:a1: bb:67:bb:b8:bc:d7:73:da:3e:99:f4:37:12:50:95:e1:c0:2e: 31:22:14:13:1b:ce:b5:25:8f:a2:2c:44:f1:a6:fc:47:29:16: 4d:0e:14:c8:d1:46:1a:1d:2b:ee:b2:a8:dc:de:60:f0:3f:30: bb:7c:38:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUwMjE0MjM1MDM4WhcNMjUwMjIxMjM1MDM4WjAYMRYwFAYD VQQDEw02N2FmZDZjZS0yNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RkrvzEXB5exu38NCBNJAr54OutEGwCJqWBtP21a87tMbFpg5he8866OITjo hFmfRoJUWqQONdEd4oRw43oo0aub3ERTjG7I3kfeKmY2VTfHmDnsVR/33dBOhTDO BPbRhpCGzEjT3I1NzfrFoACw8jC89mBToykwgDM3A9HJjwNSCfTFTnwDXXzJv2+0 hcdqr4ppleCjMmUFJrUpElnK5iPwv3CtojKAboPkCddoMxCmzZDtlMVaeuJq7s/I 4zXNhwqARRpbJfxiWat3UvJOXaU1ZWTyaUiGd2FuYz/GX5Nf1LuN7U+yIajMH67s WZ/M+XhV5sycbQyB1b3MB/V6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV3+uLO LCOOfzUAYogTlUFwTarnMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/oknu0Ly4U4SG5fBUvsOWyfoxjMmOoJdREY3W1h6cTTzZZMkeahmW hF/tGnuJMA2SO9xMhy0pUxupMc819jXlo2HR+p1DMTHrNR7ocM8KaQWi/QJyMt6p UjcZl4ImfySdxXYOei/5KRQ27AcNxprTqY3M+DtvhRJ1qUr+pGwlO82Z+debZBWp 6R3bN5hNDvrn9p3ZP8RPufoLseRdKUPZq092CvjypstDG4NI30AdmmE/SX31L5Fp GpXgiBIRYQlzHl4eOaG7Z7u4vNdz2j6Z9DcSUJXhwC4xIhQTG861JY+iLETxpvxH KRZNDhTI0UYaHSvusqjc3mDwPzC7fDjn -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:56 2025 by rpki-client