$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: f0SikzRGeRESnZyvRxAAZbfXxMiGs2Pb+DIA+TUHOtE= Subject key identifier: 5B:12:B6:7E:E2:7C:0B:D8:82:46:1B:34:B7:2E:DE:4C:D3:53:0F:4D Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0968 Signing time: Fri 30 May 2025 21:00:15 +0000 Manifest this update: Fri 30 May 2025 21:00:15 +0000 Manifest next update: Fri 06 Jun 2025 21:00:15 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: 1XPLSikQCjzBiObuOmKRxTHmhoEnzJc38NAc6Qx1fYk=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 30 21:00:15 2025 GMT Not After : Jun 6 21:00:15 2025 GMT Subject: CN=683a1c5f-8374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:1c:d0:98:72:68:a8:ba:2b:11:b9:cb:1e: bf:26:75:20:03:8c:04:23:18:19:c7:25:79:af:8e: a1:86:1d:09:c4:5f:9a:06:3b:62:d8:d5:14:8a:05: 47:b2:69:12:7c:db:6e:72:6a:6e:22:8b:da:e2:bb: e3:a3:f4:42:7f:d5:89:9e:15:25:e5:13:97:76:a0: 83:98:3a:e6:4e:24:86:38:b8:64:41:57:c0:ee:03: d3:ec:e7:84:f6:62:cf:f9:55:4f:e8:1d:4b:f4:02: 21:37:fc:e7:0d:23:58:1a:7c:2b:a8:fd:22:c6:00: 0d:fd:e1:cb:6c:16:dc:13:b0:9c:f5:80:0f:43:ce: ee:6f:86:5c:f6:18:b3:3b:a7:76:64:e0:5d:7e:84: c1:2e:2f:be:3a:ef:01:41:2d:6e:21:83:3e:58:ad: 0b:6f:76:32:9e:4f:d1:9a:8d:b6:ec:30:b2:23:e1: 90:8c:b6:1c:3d:06:83:81:0b:ec:b4:1b:b6:48:44: b3:7d:ef:1b:08:c8:b1:c0:44:14:24:e4:16:f8:45: bc:88:b7:b9:3e:f3:e0:c5:5c:86:8b:5c:0e:96:62: fc:6e:35:e4:8b:d6:18:ec:92:48:a1:fb:7f:43:42: 61:65:73:22:7c:16:cc:c7:f5:9f:a9:2d:b3:fa:bf: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:12:B6:7E:E2:7C:0B:D8:82:46:1B:34:B7:2E:DE:4C:D3:53:0F:4D X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bf:7b:93:b6:d2:1d:23:2f:e2:0d:32:af:53:55:a0:07:5c: b0:d6:9e:58:24:df:51:5c:46:40:c2:6e:76:a8:3a:40:8b:11: 14:7f:f4:9f:11:2f:ec:f2:e0:4f:9a:f3:a4:7c:68:fe:b4:70: 02:f3:d5:5b:94:a3:65:98:cd:b8:29:c1:8a:76:d8:a5:95:a1: 12:3b:2c:6e:45:19:c5:e9:2e:1c:cc:c7:41:03:f7:c6:49:1d: 30:4c:ee:be:06:a1:c5:40:b6:7e:64:6b:7f:40:22:8b:4a:b7: ec:7c:c1:c0:72:8d:0e:9d:dd:46:8d:d8:3b:fb:a4:6c:c1:c5: f4:ca:cf:50:ff:92:22:97:65:01:ab:ea:82:c6:69:c1:15:7c: 9b:8e:19:f4:65:3e:17:df:33:6e:42:cd:9c:9b:b4:0c:e5:07: 93:17:5e:d9:54:0a:d6:6b:3d:5d:fe:53:a3:1c:84:84:0a:d7: 58:57:e0:67:48:4a:df:d1:4d:ec:dd:06:45:fb:9c:0e:f1:23: ea:c7:4f:2c:79:66:72:9f:fd:61:c0:0c:d0:16:b8:14:cc:e4: 2c:77:05:80:4a:54:61:7b:47:1c:5f:22:21:23:d5:14:4b:7c: 4f:31:99:95:9d:81:98:45:cf:dd:04:00:94:30:e6:e6:d8:b7: 0d:f0:71:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwNTMwMjEwMDE1WhcNMjUwNjA2MjEwMDE1WjAYMRYwFAYD VQQDEw02ODNhMWM1Zi04Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD0c0JhyaKi6KxG5yx6/JnUgA4wEIxgZxyV5r46hhh0JxF+aBjti2NUUigVH smkSfNtucmpuIova4rvjo/RCf9WJnhUl5ROXdqCDmDrmTiSGOLhkQVfA7gPT7OeE 9mLP+VVP6B1L9AIhN/znDSNYGnwrqP0ixgAN/eHLbBbcE7Cc9YAPQ87ub4Zc9hiz O6d2ZOBdfoTBLi++Ou8BQS1uIYM+WK0Lb3Yynk/Rmo227DCyI+GQjLYcPQaDgQvs tBu2SESzfe8bCMixwEQUJOQW+EW8iLe5PvPgxVyGi1wOlmL8bjXki9YY7JJIoft/ Q0JhZXMifBbMx/WfqS2z+r+1fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsStn7i fAvYgkYbNLcu3kzTUw9NMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTv3uTttIdIy/iDTKvU1WgB1yw1p5YJN9RXEZAwm52qDpAixEUf/Sf ES/s8uBPmvOkfGj+tHAC89VblKNlmM24KcGKdtillaESOyxuRRnF6S4czMdBA/fG SR0wTO6+BqHFQLZ+ZGt/QCKLSrfsfMHAco0Ond1Gjdg7+6RswcX0ys9Q/5Iil2UB q+qCxmnBFXybjhn0ZT4X3zNuQs2cm7QM5QeTF17ZVArWaz1d/lOjHISECtdYV+Bn SErf0U3s3QZF+5wO8SPqx08seWZyn/1hwAzQFrgUzOQsdwWASlRhe0ccXyIhI9UU S3xPMZmVnYGYRc/dBACUMObm2LcN8HG6 -----END CERTIFICATE-----Generated at Sat May 31 16:43:00 2025 by rpki-client