$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: OVeFRqY3ySUV9nmiL8NmSCkpGeluhleWutppUJShtqM= Subject key identifier: 9F:D3:22:C0:D9:C7:2A:EB:05:2A:B2:CC:06:03:96:1B:10:E7:C7:6D Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 552B Signing time: Sat 31 May 2025 14:53:39 +0000 Manifest this update: Sat 31 May 2025 14:53:39 +0000 Manifest next update: Sat 07 Jun 2025 14:53:39 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: 7myjegWrJlYmWqCaqwsfwOF9cb0WGqNTw+xVP5hQlQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: May 31 14:53:39 2025 GMT Not After : Jun 7 14:53:39 2025 GMT Subject: CN=683b17f3-87cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:db:6f:df:eb:4f:48:cd:dc:c3:92:c0:a4: 57:01:c5:bf:73:8c:a5:b1:a0:52:32:75:1c:f6:cd: 14:b6:1a:f5:de:d3:e8:05:3a:fd:26:b0:23:bb:4f: 6f:5d:c4:12:4b:ae:89:f1:4b:e7:f3:df:cd:c8:ff: 55:d2:74:1a:e5:49:d6:c9:36:c7:dc:36:15:e6:e4: b3:ea:6f:91:e7:18:5e:a7:ae:0a:be:30:63:71:c0: d1:a3:cb:31:4c:50:e4:29:bd:79:95:29:36:d2:7e: 14:29:ff:5a:39:30:ae:52:3c:09:fc:13:76:1b:10: 83:93:17:27:2b:f8:63:f8:28:4d:3a:a2:e9:ff:63: 57:e8:46:ab:0d:33:20:d3:55:7d:db:0a:8c:f6:2c: 32:6d:9d:f1:4a:40:39:e8:41:b0:9b:3f:e6:48:24: e4:df:db:ec:26:6d:3d:7c:5a:36:1d:b9:3c:e4:4b: 50:75:e5:be:a9:dd:7a:f3:3a:4d:e1:f7:e8:d9:6b: c6:70:03:61:01:5b:34:57:97:12:bb:61:e5:73:34: 64:37:3e:0c:96:bd:c1:ec:f6:c2:fa:3d:4f:f9:00: 5b:2b:14:1a:97:03:42:d8:a3:8d:69:ab:08:cd:38: 9a:2a:2d:12:a2:a0:36:40:86:77:e1:6a:05:ea:1f: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D3:22:C0:D9:C7:2A:EB:05:2A:B2:CC:06:03:96:1B:10:E7:C7:6D X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:78:39:87:23:08:cf:75:ef:ce:f4:a3:12:14:a9:38:46:f2: 1b:c4:e8:b6:c6:10:7d:d8:7c:03:66:ea:4d:d0:4a:dc:22:47: b1:66:ea:67:70:d4:6b:2a:5f:d4:e1:ee:a5:3a:bb:f1:c9:fe: 8e:f0:7a:50:33:81:51:38:86:62:29:1d:8f:98:37:23:dd:7c: f1:4d:c2:62:f7:d1:cb:4f:72:a8:39:0f:ec:7f:10:96:31:8b: cd:13:f1:80:22:90:42:d4:fe:19:89:d7:f0:ff:25:ce:02:41: d4:c4:eb:18:40:90:9b:6e:5d:21:15:21:00:14:3b:a7:ce:41: ab:26:9f:a4:0c:4a:84:d3:7a:52:2b:44:c0:21:d6:88:93:35: 74:60:db:0c:49:9d:2d:33:86:f6:eb:a2:aa:d4:19:ff:26:b9: 83:4f:44:75:82:cc:ff:45:82:4a:a3:71:6f:45:63:c0:41:06: fe:e2:62:fe:cf:b1:08:59:2d:71:82:7c:a8:02:08:b7:b4:cd: 1c:a0:4b:ab:5c:fa:8d:9e:bc:bb:85:bc:cf:cb:cd:ec:d6:d1: 44:12:f4:52:d0:7f:24:54:32:81:bf:89:0c:7f:25:4a:e8:e8: 7e:21:f8:24:2a:0b:37:1d:d9:69:8c:ce:b5:a9:61:f3:c4:5f: 82:5a:6e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUwNTMxMTQ1MzM5WhcNMjUwNjA3MTQ1MzM5WjAYMRYwFAYD VQQDEw02ODNiMTdmMy04N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ijbb9/rT0jN3MOSwKRXAcW/c4ylsaBSMnUc9s0Uthr13tPoBTr9JrAju09v XcQSS66J8Uvn89/NyP9V0nQa5UnWyTbH3DYV5uSz6m+R5xhep64KvjBjccDRo8sx TFDkKb15lSk20n4UKf9aOTCuUjwJ/BN2GxCDkxcnK/hj+ChNOqLp/2NX6EarDTMg 01V92wqM9iwybZ3xSkA56EGwmz/mSCTk39vsJm09fFo2Hbk85EtQdeW+qd168zpN 4ffo2WvGcANhAVs0V5cSu2HlczRkNz4Mlr3B7PbC+j1P+QBbKxQalwNC2KONaasI zTiaKi0SoqA2QIZ34WoF6h9gUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/TIsDZ xyrrBSqyzAYDlhsQ58dtMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeeDmHIwjPde/O9KMSFKk4RvIbxOi2xhB92HwDZupN0ErcIkexZupn cNRrKl/U4e6lOrvxyf6O8HpQM4FROIZiKR2PmDcj3XzxTcJi99HLT3KoOQ/sfxCW MYvNE/GAIpBC1P4Zidfw/yXOAkHUxOsYQJCbbl0hFSEAFDunzkGrJp+kDEqE03pS K0TAIdaIkzV0YNsMSZ0tM4b266Kq1Bn/JrmDT0R1gsz/RYJKo3FvRWPAQQb+4mL+ z7EIWS1xgnyoAgi3tM0coEurXPqNnry7hbzPy83s1tFEEvRS0H8kVDKBv4kMfyVK 6Oh+IfgkKgs3HdlpjM61qWHzxF+CWm7S -----END CERTIFICATE-----Generated at Sat May 31 17:00:21 2025 by rpki-client