$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft File: GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json) Hash identifier: 78l0fb5EiGl7WSPfrgtiY7kV8YWkEcxSWyIAuWcjNGU= Subject key identifier: 0F:B3:9F:2C:11:B6:70:07:2C:18:18:BC:A6:75:69:A4:CB:CE:E6:6F Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 Certificate issuer: /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft Manifest number: 33 Signing time: Sat 31 May 2025 07:12:20 +0000 Manifest this update: Sat 31 May 2025 07:12:19 +0000 Manifest next update: Sat 07 Jun 2025 07:12:19 +0000 Files and hashes: 1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: zVINdRj2xHUou5JVki7Wf+DD6AGhlrL1h7KIT6yHWrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877 Validity Not Before: May 31 07:12:19 2025 GMT Not After : Jun 7 07:12:19 2025 GMT Subject: CN=683aabd4-f5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:1d:d9:da:95:40:8b:42:84:b1:14:39:99: be:2a:04:3f:f1:c2:06:92:30:c4:35:55:55:0e:c6: fb:65:8c:ab:05:f8:32:35:d1:9d:3c:85:5c:19:da: 14:85:93:08:5a:22:44:82:39:ac:8a:76:ce:72:e6: d2:a5:4f:6a:4a:c4:47:df:70:e6:02:68:16:d4:73: 18:1e:4d:fd:bd:87:bf:38:02:29:f2:fa:0f:48:d7: f5:d9:66:cc:d5:6f:b0:57:3a:cb:46:81:84:13:ef: f3:07:96:08:68:50:f1:3f:55:a1:fa:11:42:44:71: 73:97:81:91:6b:67:50:bc:5e:8e:cc:bf:ab:96:85: 57:4c:ad:1d:57:03:2d:ee:2c:94:0b:05:f2:4c:c4: 6e:06:6d:68:a9:0b:37:e6:f7:1a:78:fd:ec:6b:68: 97:7b:7b:3e:de:dd:84:b7:00:1a:8f:79:1f:e4:ab: 25:a2:33:a4:f6:88:1f:ff:7d:9a:f4:8e:7b:c7:5e: 05:35:df:ce:12:77:dc:05:6d:f3:45:bd:4e:0f:1f: 4e:37:a7:d3:3f:e9:49:69:5e:a5:52:e4:c7:20:53: b2:66:83:e9:d0:1e:ed:5c:5d:eb:25:1b:05:89:9c: db:3a:9d:31:a4:a3:0e:33:bc:9d:dd:33:38:e0:c7: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B3:9F:2C:11:B6:70:07:2C:18:18:BC:A6:75:69:A4:CB:CE:E6:6F X509v3 Authority Key Identifier: keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:29:15:cb:1d:c8:f6:e3:54:50:95:ef:aa:3a:6e:f3:65: f4:d8:43:2c:dc:69:44:72:50:b4:47:3b:ba:6b:0c:01:a2:09: 63:07:17:01:38:a1:9d:94:93:2b:73:31:9b:54:9a:35:2f:f2: e7:6c:0a:b8:d6:6e:72:74:7f:c0:2c:3a:c1:0c:f8:aa:96:2b: 5a:18:0b:0c:ee:28:20:e4:3f:73:16:19:97:c7:fe:43:54:b0: ac:b9:22:3c:ba:0e:7b:36:bc:27:93:52:93:9f:74:4a:ca:8c: 57:c2:f8:f4:ce:22:35:6a:9e:ba:2a:79:e6:45:1a:ca:4b:30: 1f:79:10:7c:30:50:23:d1:72:25:8b:31:b0:68:83:a6:b7:26: 34:0c:02:32:91:16:27:de:71:49:0a:39:0c:f1:83:9f:ac:d8: 86:fb:b3:42:91:b3:f2:e6:44:53:8a:91:d7:2e:dc:62:42:4e: f4:3a:3d:ef:76:ea:db:66:94:b7:2c:6e:bb:ad:cd:ac:68:6f: 27:b8:b4:f1:d2:92:d4:22:37:9a:ef:8b:4a:64:1e:51:89:67: 1e:07:c8:9f:eb:bd:a4:7c:f9:96:9b:52:f7:07:70:03:39:3d: 58:b9:41:66:fb:ab:63:94:3d:4b:47:7b:3f:d8:f0:c6:f6:d6: ed:3e:1a:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4 Qzg2ODg3NzAeFw0yNTA1MzEwNzEyMTlaFw0yNTA2MDcwNzEyMTlaMBgxFjAUBgNV BAMTDTY4M2FhYmQ0LWY1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDytR3Z2pVAi0KEsRQ5mb4qBD/xwgaSMMQ1VVUOxvtljKsF+DI10Z08hVwZ2hSF kwhaIkSCOayKds5y5tKlT2pKxEffcOYCaBbUcxgeTf29h784Ainy+g9I1/XZZszV b7BXOstGgYQT7/MHlghoUPE/VaH6EUJEcXOXgZFrZ1C8Xo7Mv6uWhVdMrR1XAy3u LJQLBfJMxG4GbWipCzfm9xp4/exraJd7ez7e3YS3ABqPeR/kqyWiM6T2iB//fZr0 jnvHXgU1384Sd9wFbfNFvU4PH043p9M/6UlpXqVS5McgU7Jmg+nQHu1cXeslGwWJ nNs6nTGkow4zvJ3dMzjgx17VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD7OfLBG2 cAcsGBi8pnVppMvO5m8wHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBZKRXLHcj241RQle+qOm7zZfTYQyzcaURyULRHO7prDAGiCWMHFwE4 oZ2UkytzMZtUmjUv8udsCrjWbnJ0f8AsOsEM+KqWK1oYCwzuKCDkP3MWGZfH/kNU sKy5Ijy6Dns2vCeTUpOfdErKjFfC+PTOIjVqnroqeeZFGspLMB95EHwwUCPRciWL MbBog6a3JjQMAjKRFifecUkKOQzxg5+s2Ib7s0KRs/LmRFOKkdcu3GJCTvQ6Pe92 6ttmlLcsbrutzaxobye4tPHSktQiN5rvi0pkHlGJZx4HyJ/rvaR8+ZabUvcHcAM5 PVi5QWb7q2OUPUtHez/Y8Mb21u0+Gg8= -----END CERTIFICATE-----Generated at Sat May 31 17:57:46 2025 by rpki-client