$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: /PRz4EU5WfwGfYAnMhKqjCrlnW66BoK8x0xp2UAs1TE= Subject key identifier: 8C:F9:1B:E3:78:93:1A:BB:82:01:29:75:78:95:F9:E5:DB:01:11:85 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 01F4 Signing time: Sat 31 May 2025 02:14:48 +0000 Manifest this update: Sat 31 May 2025 02:14:47 +0000 Manifest next update: Sat 07 Jun 2025 02:14:47 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: 5IebokDrui0/4bgw/YvPeNlrKSNJmxemSPVuNWlSXIs=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: May 31 02:14:47 2025 GMT Not After : Jun 7 02:14:47 2025 GMT Subject: CN=683a6617-9728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:a0:e5:32:a7:19:e5:67:5f:f4:18:49:8b: 8a:e1:c2:95:4a:88:fc:99:62:98:d5:2c:a6:cf:2d: e5:4c:df:98:50:3b:11:fa:71:30:bb:39:fc:f6:04: 7a:de:68:91:fe:fc:9b:b0:2c:a9:a1:1c:28:2a:3c: 58:7e:96:17:85:7d:c3:8d:20:c1:c4:db:a4:0c:b6: ed:e3:80:8b:e6:a7:cb:fd:ec:8a:1d:86:6d:39:0b: b8:34:d4:5b:1e:4b:d1:7c:fb:c0:ed:15:81:24:50: 59:93:d9:b6:87:3d:06:cc:d2:76:c1:76:14:e7:aa: 93:c2:71:ec:3c:ca:1d:af:01:11:71:29:09:3c:59: bf:25:06:5f:b3:4f:2e:78:25:13:54:13:4f:a3:89: 37:15:53:43:0d:cc:c7:cd:cb:84:28:70:e0:5a:ea: 62:b1:45:13:a1:92:27:45:e5:7f:bb:3d:b2:21:b5: a0:9d:dc:cf:8f:12:c7:57:ce:06:7d:01:b3:bd:d7: c5:92:94:7e:d1:3a:f3:a0:ea:fd:12:f6:8b:ff:fa: e3:32:28:de:ba:56:a4:e6:68:10:fb:a8:45:39:4a: 62:b8:8d:ea:08:d7:4f:c0:45:84:a7:d3:d3:e4:cd: 25:32:c0:04:0b:38:cf:f6:6b:09:81:09:26:24:1a: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:1B:E3:78:93:1A:BB:82:01:29:75:78:95:F9:E5:DB:01:11:85 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:21:06:f4:2b:e4:0c:92:57:ec:07:d9:15:04:01:0e:14: 6e:e6:bb:d4:d6:ac:27:d0:b9:d0:7b:b2:29:e9:6e:70:f1:47: 38:5b:46:1c:da:56:3b:27:3e:ef:df:21:65:c9:77:e9:41:d1: 38:f6:bd:fc:00:1f:0f:bc:34:9a:82:f4:47:1f:3c:11:65:c1: f6:3f:8a:ce:82:55:9b:45:1a:f5:12:31:d1:00:c6:bc:1c:d4: 3e:1f:b5:3a:ae:55:c5:33:f7:e2:4d:23:78:b6:d6:cd:b9:2f: f6:a7:e7:22:00:3b:4b:39:8a:df:1e:d9:41:7c:14:7d:35:31: 78:cf:ca:5c:98:b2:cc:85:f5:8a:8d:70:37:ea:b7:b9:10:75: 2f:19:da:1e:72:21:be:fa:83:11:f7:5d:41:d9:b2:dd:0e:38: 22:55:7c:f7:17:ef:b2:e8:8a:52:03:6c:d2:d0:7a:db:75:b8: b4:e7:3e:c9:30:c5:75:07:5c:a6:e6:b4:f1:77:f7:db:f5:2c: e0:dd:b1:a7:ae:f6:29:3d:f5:f2:62:1b:0e:d1:01:16:5c:9a: 0f:ae:a3:d0:50:db:32:97:c4:0a:2b:8d:8c:cf:53:b9:98:37: 18:94:58:aa:33:88:d1:49:5e:3c:53:5e:3b:ce:91:f2:18:70: 63:9a:15:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwNTMxMDIxNDQ3WhcNMjUwNjA3MDIxNDQ3WjAYMRYwFAYD VQQDEw02ODNhNjYxNy05NzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArveg5TKnGeVnX/QYSYuK4cKVSoj8mWKY1Symzy3lTN+YUDsR+nEwuzn89gR6 3miR/vybsCypoRwoKjxYfpYXhX3DjSDBxNukDLbt44CL5qfL/eyKHYZtOQu4NNRb HkvRfPvA7RWBJFBZk9m2hz0GzNJ2wXYU56qTwnHsPModrwERcSkJPFm/JQZfs08u eCUTVBNPo4k3FVNDDczHzcuEKHDgWupisUUToZInReV/uz2yIbWgndzPjxLHV84G fQGzvdfFkpR+0TrzoOr9EvaL//rjMijeulak5mgQ+6hFOUpiuI3qCNdPwEWEp9PT 5M0lMsAECzjP9msJgQkmJBpvUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz5G+N4 kxq7ggEpdXiV+eXbARGFMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhYSEG9CvkDJJX7AfZFQQBDhRu5rvU1qwn0LnQe7Ip6W5w8Uc4W0Yc 2lY7Jz7v3yFlyXfpQdE49r38AB8PvDSagvRHHzwRZcH2P4rOglWbRRr1EjHRAMa8 HNQ+H7U6rlXFM/fiTSN4ttbNuS/2p+ciADtLOYrfHtlBfBR9NTF4z8pcmLLMhfWK jXA36re5EHUvGdoeciG++oMR911B2bLdDjgiVXz3F++y6IpSA2zS0Hrbdbi05z7J MMV1B1ym5rTxd/fb9Szg3bGnrvYpPfXyYhsO0QEWXJoPrqPQUNsyl8QKK42Mz1O5 mDcYlFiqM4jRSV48U147zpHyGHBjmhXG -----END CERTIFICATE-----Generated at Sat May 31 17:06:33 2025 by rpki-client