$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: kqPoIZM+PnTYtMbUjAfw8V3atbY7U1QY56xII/b1XCM= Subject key identifier: 0F:76:0E:5B:E7:86:25:CC:D4:12:5B:E7:A3:32:EF:EE:29:FA:91:5C Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03B3 Signing time: Mon 09 Jun 2025 00:16:57 +0000 Manifest this update: Mon 09 Jun 2025 00:16:56 +0000 Manifest next update: Mon 16 Jun 2025 00:16:56 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: zcYGFPmVblb9/sJx25Dw5lNLa7XupwQPWthEpN0gQzw=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: Jun 9 00:16:56 2025 GMT Not After : Jun 16 00:16:56 2025 GMT Subject: CN=684627f9-d46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:82:c9:86:41:de:55:fc:41:eb:e5:5e:22: 9c:bd:fd:a7:f0:d3:be:26:3a:1b:fe:28:5e:74:6f: fa:cd:00:49:ad:b5:15:2e:ce:51:a0:8f:ab:40:7c: 60:fb:3e:bf:e3:aa:31:01:27:7b:36:ce:7d:e0:ec: a5:b1:fc:6c:c2:5b:36:15:76:ff:9c:29:2e:99:3e: 07:24:14:82:9a:73:64:90:bd:5b:39:b5:b8:79:37: ab:86:da:b8:b8:2a:56:af:2b:53:a3:e5:90:8f:18: 7a:93:40:b8:28:d1:07:17:b8:04:c9:b0:d9:7b:f1: 85:14:17:49:15:58:a4:05:00:95:80:a8:b8:72:22: f4:fd:db:08:58:c1:77:6d:6e:80:86:7a:76:17:db: 3a:01:1c:27:44:06:03:87:d7:74:cd:c9:ad:0f:c9: 53:d8:f3:2e:87:77:55:8a:aa:95:d9:6a:90:85:87: ec:18:16:45:82:d8:dd:a8:b0:b2:92:73:df:24:a0: 6d:5f:fd:a2:dc:b4:fe:f1:81:8e:a1:f0:49:e1:51: cf:b2:af:a3:31:f8:d3:88:30:a7:61:53:28:0b:5e: 89:58:3f:a8:55:cd:a5:c6:f2:38:cf:e1:83:e5:5c: 45:a8:ce:c4:94:e4:ff:ae:35:9f:31:7e:ed:6c:58: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:76:0E:5B:E7:86:25:CC:D4:12:5B:E7:A3:32:EF:EE:29:FA:91:5C X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8e:40:d7:14:59:5a:98:59:9b:84:2d:d9:d5:32:60:51:50: fc:39:8c:31:62:db:55:a2:d5:64:3a:08:03:a2:6e:49:fb:b8: 2e:7a:e7:69:1b:80:16:8f:41:60:44:49:75:2f:9a:da:a0:25: fc:fa:de:bb:7f:ad:98:87:b4:2c:f7:b6:89:b4:c3:9c:9c:77: 25:07:de:50:e4:e7:d3:49:64:3c:f3:f4:19:45:63:3e:7a:15: 5e:9b:1d:8b:08:ad:7c:dc:a3:fc:9a:fc:f3:fe:0a:d7:e3:2e: 12:be:3d:b9:da:23:a0:56:46:0e:2e:e0:e9:1a:01:62:5c:e7: 84:c3:e7:e3:88:36:e2:97:a9:60:05:99:ca:38:3c:96:ea:61: b1:c7:05:0d:cf:ce:7f:92:ae:eb:88:e9:12:17:48:d7:25:85: 86:f8:cc:56:67:21:0e:b7:36:4f:2a:22:9c:c2:6e:5b:42:11: d9:69:7e:69:af:93:2d:dd:9e:47:a3:92:1f:be:3c:1c:16:da: 43:89:01:9a:1a:44:49:86:d3:bb:26:50:a1:36:46:fb:be:20: de:96:8f:37:87:0c:72:5b:6f:c5:0e:c8:10:b5:48:d8:ae:ab: 4e:83:ed:27:96:63:91:d8:9e:3f:e4:f9:f6:a7:83:25:3f:00: ab:97:25:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwNjA5MDAxNjU2WhcNMjUwNjE2MDAxNjU2WjAYMRYwFAYD VQQDEw02ODQ2MjdmOS1kNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1siCyYZB3lX8QevlXiKcvf2n8NO+Jjob/ihedG/6zQBJrbUVLs5RoI+rQHxg +z6/46oxASd7Ns594Oylsfxswls2FXb/nCkumT4HJBSCmnNkkL1bObW4eTerhtq4 uCpWrytTo+WQjxh6k0C4KNEHF7gEybDZe/GFFBdJFVikBQCVgKi4ciL0/dsIWMF3 bW6Ahnp2F9s6ARwnRAYDh9d0zcmtD8lT2PMuh3dViqqV2WqQhYfsGBZFgtjdqLCy knPfJKBtX/2i3LT+8YGOofBJ4VHPsq+jMfjTiDCnYVMoC16JWD+oVc2lxvI4z+GD 5VxFqM7ElOT/rjWfMX7tbFhyKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA92Dlvn hiXM1BJb56My7+4p+pFcMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVjkDXFFlamFmbhC3Z1TJgUVD8OYwxYttVotVkOggDom5J+7gueudp G4AWj0FgREl1L5raoCX8+t67f62Yh7Qs97aJtMOcnHclB95Q5OfTSWQ88/QZRWM+ ehVemx2LCK183KP8mvzz/grX4y4Svj252iOgVkYOLuDpGgFiXOeEw+fjiDbil6lg BZnKODyW6mGxxwUNz85/kq7riOkSF0jXJYWG+MxWZyEOtzZPKiKcwm5bQhHZaX5p r5Mt3Z5Ho5IfvjwcFtpDiQGaGkRJhtO7JlChNkb7viDelo83hwxyW2/FDsgQtUjY rqtOg+0nlmOR2J4/5Pn2p4MlPwCrlyVJ -----END CERTIFICATE-----Generated at Mon Jun 9 12:37:04 2025 by rpki-client