$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft File: GTTTDoaMK2LqebeYJrIco-4_N0M.mft (raw, json) Hash identifier: Xt8jEVGZGwnZgeYkZj/Qi7QcgfwXSOvav8Y0DwzFr5o= Subject key identifier: 37:2C:32:A3:99:03:71:D2:0E:7C:07:88:D8:C9:15:3E:94:58:35:19 Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 Certificate issuer: /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft Manifest number: 05BF Signing time: Fri 30 May 2025 23:18:28 +0000 Manifest this update: Fri 30 May 2025 23:18:28 +0000 Manifest next update: Fri 06 Jun 2025 23:18:28 +0000 Files and hashes: 1: GTTTDoaMK2LqebeYJrIco-4_N0M.crl (hash: QQGvasuDWwzaWhrJy58oF/8P4hqyglVDbvCIutXQ6IA=) 2: B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (hash: D44y8yK3PslKu95mSqGBAiOz2/DAxOx2GOp0kxbojB8=) 3: B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (hash: dxA+FsX+z/6QO39P8vpv3U7r3ZQVusg7yiQAQgF0Kjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180FA7, serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743 Validity Not Before: May 30 23:18:28 2025 GMT Not After : Jun 6 23:18:28 2025 GMT Subject: CN=683a3cc4-4fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:00:bd:e0:d8:c8:d7:8c:44:ed:f2:4b:2d: cf:29:cd:b5:5c:89:3e:93:be:af:bb:3c:90:0e:77: 9a:5d:13:c9:c5:11:b2:c1:6b:70:b2:12:72:9a:97: db:28:b3:c9:fb:a1:53:c3:31:73:46:ec:7a:72:8a: f4:12:44:2a:0e:3b:d8:4c:6e:73:6c:db:89:3f:29: 51:ff:9f:42:58:00:50:ea:6d:b4:97:6a:f9:25:bc: c0:8c:6b:87:6c:63:e5:68:9c:4c:03:01:11:13:c5: b7:3a:21:e9:95:32:74:c1:81:5f:e7:5a:6b:ff:74: 9e:07:92:29:f9:87:21:a3:75:98:75:b3:e2:5a:a5: da:ce:70:7b:a1:bb:f0:ed:fb:53:39:46:51:73:53: d8:77:d5:56:a4:36:3a:c7:8b:a0:f8:30:2f:04:58: 35:2f:84:32:5e:e2:79:e4:97:cd:27:1c:c3:22:11: 86:a1:a5:14:41:3b:c4:b8:ce:7c:08:1b:da:83:4b: 51:a4:3d:4b:e5:b1:33:41:48:11:6a:88:c3:23:1b: 6a:e5:b2:dd:6e:4f:c7:df:64:27:f5:2b:e7:06:c5: 10:ff:79:b7:ce:0b:2d:8d:7c:32:40:0b:c0:e0:d3: d3:92:20:7e:11:c2:70:99:a7:71:60:93:c2:95:d3: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:32:A3:99:03:71:D2:0E:7C:07:88:D8:C9:15:3E:94:58:35:19 X509v3 Authority Key Identifier: keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7d:d0:5d:86:2f:4c:14:65:8a:d0:d3:4f:2d:3d:28:c0:a2: 9e:7a:45:6d:43:24:38:2e:4e:2e:ad:a5:52:66:a9:09:d9:49: b3:eb:87:d0:df:2c:5d:23:c1:09:f2:3e:93:08:78:57:07:8e: 48:55:fb:22:81:db:75:3f:82:f3:8d:1e:92:4f:df:d7:1e:30: 2c:ed:a4:ca:93:ea:dd:6a:f0:5e:0a:78:ad:a7:ef:4b:7e:c5: 6e:71:ed:ef:ac:30:0b:e3:b0:2c:8c:a5:1c:cb:63:30:a9:09: 72:21:94:f2:ef:e3:c7:5c:8a:1f:7d:2d:a2:79:c2:50:de:20: ed:b0:fb:2b:74:4e:8a:17:f9:2d:8f:6c:ce:3a:af:f7:0d:6e: 02:47:8a:50:58:5c:9e:45:2d:96:41:38:51:93:b7:ad:fd:ad: c0:13:60:ec:1e:8b:d2:e7:9b:a2:01:a6:65:d2:9f:ec:51:bd: 59:79:1e:0c:34:a7:66:3d:4a:ff:4e:36:14:a5:3e:61:f3:75: 18:fb:37:1b:8e:07:ef:db:0f:15:cb:4d:9b:55:28:c4:7a:9a: 65:3e:03:cf:97:4c:43:6f:af:b8:e0:03:e3:a1:ae:8c:73:be: 67:2b:4e:b3:1d:ca:50:e2:df:26:18:59:bf:59:b9:a9:44:d3: 06:4d:87:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBGQTcxMTAvBgNVBAUTKDE5MzREMzBFODY4QzJCNjJFQTc5Qjc5ODI2QjIxQ0Ez RUUzRjM3NDMwHhcNMjUwNTMwMjMxODI4WhcNMjUwNjA2MjMxODI4WjAYMRYwFAYD VQQDEw02ODNhM2NjNC00ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsIAveDYyNeMRO3ySy3PKc21XIk+k76vuzyQDneaXRPJxRGywWtwshJympfb KLPJ+6FTwzFzRux6cor0EkQqDjvYTG5zbNuJPylR/59CWABQ6m20l2r5JbzAjGuH bGPlaJxMAwERE8W3OiHplTJ0wYFf51pr/3SeB5Ip+Ycho3WYdbPiWqXaznB7obvw 7ftTOUZRc1PYd9VWpDY6x4ug+DAvBFg1L4QyXuJ55JfNJxzDIhGGoaUUQTvEuM58 CBvag0tRpD1L5bEzQUgRaojDIxtq5bLdbk/H32Qn9SvnBsUQ/3m3zgstjXwyQAvA 4NPTkiB+EcJwmadxYJPCldP/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcsMqOZ A3HSDnwHiNjJFT6UWDUZMB8GA1UdIwQYMBaAFBk00w6GjCti6nm3mCayHKPuPzdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEZBNy9BN0ZBRDRGNkMy QjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsyTHFlYmVZSnJJY28tNF9O ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dUVFREb2FNSzJMcWViZVlKckljby00X04wTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEZBNy9BN0ZBRDRGNkMyQjkxMUVCQjVDODY4NzFDNEY5QUUwMi9HVFRURG9hTUsy THFlYmVZSnJJY28tNF9OME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKfdBdhi9MFGWK0NNPLT0owKKeekVtQyQ4Lk4uraVSZqkJ2Umz64fQ 3yxdI8EJ8j6TCHhXB45IVfsigdt1P4LzjR6ST9/XHjAs7aTKk+rdavBeCnitp+9L fsVuce3vrDAL47AsjKUcy2MwqQlyIZTy7+PHXIoffS2iecJQ3iDtsPsrdE6KF/kt j2zOOq/3DW4CR4pQWFyeRS2WQThRk7et/a3AE2DsHovS55uiAaZl0p/sUb1ZeR4M NKdmPUr/TjYUpT5h83UY+zcbjgfv2w8Vy02bVSjEepplPgPPl0xDb6+44APjoa6M c75nK06zHcpQ4t8mGFm/WbmpRNMGTYdU -----END CERTIFICATE-----Generated at Sat May 31 17:00:25 2025 by rpki-client