$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: FY8uHefiC2Jc9gwkcvurhx4GpEr105VBusF4FfaqyAY= Subject key identifier: C9:18:65:56:A4:9F:8B:1E:7A:E8:E7:B6:C2:BF:B6:26:68:C4:34:D3 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 01B6 Signing time: Wed 09 Apr 2025 02:08:53 +0000 Manifest this update: Wed 09 Apr 2025 02:08:53 +0000 Manifest next update: Wed 16 Apr 2025 02:08:53 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: gU9uKO9+1bIjPWZc0LuvAPzqB5bw55hP7nfl4Hm+C84=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B Validity Not Before: Apr 9 02:08:53 2025 GMT Not After : Apr 16 02:08:53 2025 GMT Subject: CN=67f5d6b5-2cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:70:46:af:d6:0a:c6:f5:b7:cb:b6:06:51: 3d:b6:4d:f4:1d:7c:f6:74:3b:c2:06:de:08:42:b2: ac:35:1a:39:15:52:3d:fc:b1:0a:46:12:7e:1f:77: 13:c3:d1:f0:46:c0:2d:88:21:42:79:52:fe:53:21: de:dc:2b:42:85:dd:5f:b0:df:4c:0b:b2:85:13:ad: ac:65:be:53:39:4b:fc:83:4b:bb:d7:d7:6f:b7:96: 82:99:09:ea:db:b2:a2:10:52:d1:e1:63:1d:10:4a: 90:22:0a:d4:0b:99:7a:ba:ba:ab:b6:6b:ae:f4:b2: e9:25:ca:fb:69:e4:07:0c:36:ba:f1:7a:e7:b7:f0: f4:47:b5:88:8f:7f:a1:47:9a:3f:8c:33:95:73:d2: e9:4e:13:15:00:91:1e:20:33:4e:28:ba:f2:26:3d: 26:64:1e:94:31:fb:87:5f:ed:a6:59:17:a5:17:a9: 79:d2:b4:13:1d:8e:df:c9:85:2e:dc:53:64:22:34: 09:f2:af:7d:95:25:7b:79:34:54:8a:ae:c1:d5:f1: ec:20:fa:86:90:ae:e9:59:9c:87:50:d7:ce:29:5f: a6:f0:15:57:1b:3f:cc:3f:5b:29:56:bc:c6:e4:71: 6c:7f:da:a0:74:16:2f:20:59:b9:09:f2:54:31:3f: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:65:56:A4:9F:8B:1E:7A:E8:E7:B6:C2:BF:B6:26:68:C4:34:D3 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4f:44:a1:cc:d1:da:07:1e:dd:91:cd:1a:4f:b7:bc:8e:41: 82:6d:9e:38:f6:9a:3d:f8:50:ac:10:3d:e5:e8:75:62:70:1f: b9:cd:60:d6:2e:b3:f3:a7:5d:b6:9e:6f:fd:51:fd:f3:e0:8b: 05:0c:69:3c:ec:5f:45:cb:0d:6e:77:42:9f:f7:2e:56:fd:5c: 65:ae:0c:65:10:13:95:fc:17:e9:ba:cf:7a:a3:b5:83:79:6c: ee:9f:00:a1:87:5c:e3:e5:97:54:0d:34:f6:8e:91:bb:39:f7: 92:b3:21:ce:1f:e7:22:51:cc:64:5b:46:1b:60:fc:d0:63:c9: e9:7e:29:aa:ad:66:d5:f0:4a:c7:74:be:65:28:ac:db:5d:52: 4b:81:ec:8b:09:df:db:42:19:0e:bf:4d:e0:c9:dd:4f:77:73: e7:b8:89:81:c6:fe:d0:6b:2c:1a:62:a1:d1:45:16:cc:52:e4: ce:d5:bc:22:bd:f2:5b:04:f0:28:f2:ad:c7:d4:b5:22:ef:38: 24:0c:c6:c3:7a:2c:f7:90:53:45:cc:bd:de:cb:dd:e8:48:d1: 68:55:99:94:f7:87:3c:a3:ec:23:c0:b0:3e:58:86:7b:bd:a0: 08:11:6d:70:4d:0f:b1:62:26:9b:94:75:5a:38:e5:a8:c0:2c: 8e:bb:d0:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwNDA5MDIwODUzWhcNMjUwNDE2MDIwODUzWjAYMRYwFAYD VQQDEw02N2Y1ZDZiNS0yY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxglwRq/WCsb1t8u2BlE9tk30HXz2dDvCBt4IQrKsNRo5FVI9/LEKRhJ+H3cT w9HwRsAtiCFCeVL+UyHe3CtChd1fsN9MC7KFE62sZb5TOUv8g0u719dvt5aCmQnq 27KiEFLR4WMdEEqQIgrUC5l6urqrtmuu9LLpJcr7aeQHDDa68Xrnt/D0R7WIj3+h R5o/jDOVc9LpThMVAJEeIDNOKLryJj0mZB6UMfuHX+2mWRelF6l50rQTHY7fyYUu 3FNkIjQJ8q99lSV7eTRUiq7B1fHsIPqGkK7pWZyHUNfOKV+m8BVXGz/MP1spVrzG 5HFsf9qgdBYvIFm5CfJUMT9EEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkYZVak n4seeujntsK/tiZoxDTTMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzT0ShzNHaBx7dkc0aT7e8jkGCbZ449po9+FCsED3l6HVicB+5zWDW LrPzp122nm/9Uf3z4IsFDGk87F9Fyw1ud0Kf9y5W/VxlrgxlEBOV/Bfpus96o7WD eWzunwChh1zj5ZdUDTT2jpG7OfeSsyHOH+ciUcxkW0YbYPzQY8npfimqrWbV8ErH dL5lKKzbXVJLgeyLCd/bQhkOv03gyd1Pd3PnuImBxv7QaywaYqHRRRbMUuTO1bwi vfJbBPAo8q3H1LUi7zgkDMbDeiz3kFNFzL3ey93oSNFoVZmU94c8o+wjwLA+WIZ7 vaAIEW1wTQ+xYiablHVaOOWowCyOu9BX -----END CERTIFICATE-----Generated at Wed Apr 9 09:51:58 2025 by rpki-client