$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: mTx1EiEmMnP9IFUzrC1oivPDP+rfavzCbqyKvPwbfVk= Subject key identifier: 5D:30:D2:0A:92:85:36:CF:B8:06:D6:0C:A3:EE:CC:2D:78:3E:46:C2 Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 4A Signing time: Sat 31 May 2025 06:54:16 +0000 Manifest this update: Sat 31 May 2025 06:54:16 +0000 Manifest next update: Sat 07 Jun 2025 06:54:16 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: oBKbGOArw0sKQlxx7Ycm/4HKeoO9mYjZYO51WxUcey8=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: May 31 06:54:16 2025 GMT Not After : Jun 7 06:54:16 2025 GMT Subject: CN=683aa798-8c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:e7:e0:c3:1f:69:ec:af:42:9c:33:63:c5: cf:62:4b:94:0a:66:33:ed:5a:20:13:d5:62:3c:ec: 80:80:1f:fd:ae:e0:d7:32:a2:5d:79:b7:fe:a3:65: a9:60:02:d5:a5:b5:3b:63:d9:10:2d:7b:03:e6:64: fc:f5:1a:80:e5:ef:a6:8c:6a:94:c4:57:2f:aa:7f: 68:bd:f1:e4:51:e1:7f:ac:84:92:c9:50:c2:af:4c: b5:4b:e5:49:07:43:f2:eb:5a:09:17:27:57:58:d4: 91:36:63:21:2a:37:3d:fc:2f:c2:ac:75:c0:4e:15: e0:02:6d:72:5a:51:e5:43:68:c8:8f:9e:a1:46:07: 3a:83:24:67:35:8a:62:bb:d2:47:ee:f9:19:17:2e: 0e:0e:6b:ce:49:49:54:49:6a:06:b3:72:11:85:85: 09:e8:fa:85:85:55:b2:b3:2e:88:ab:e2:ac:0e:aa: 73:18:8e:36:a6:a1:ca:8f:19:bb:3e:88:a8:44:d4: e1:d5:c5:de:56:fd:ff:37:88:c5:83:c5:ab:db:84: 15:e7:86:96:5c:c7:1f:d1:64:76:69:9e:9f:40:b5: f5:fc:66:29:16:da:b2:4a:72:53:ef:47:ab:4b:9d: bf:fd:66:e3:7d:94:36:d1:3e:a9:59:ee:45:63:4b: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:D2:0A:92:85:36:CF:B8:06:D6:0C:A3:EE:CC:2D:78:3E:46:C2 X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:78:22:3a:d2:af:ea:ad:ee:9c:49:1a:10:06:98:c2:ca:fb: 6b:53:aa:b4:cf:ad:d7:ab:aa:14:d0:5e:df:e8:29:5d:fa:86: 5c:e7:4a:0a:15:09:fe:79:1c:47:2c:31:cd:af:64:19:49:7f: 10:4d:22:33:33:2b:57:ab:65:b0:18:03:aa:38:3b:48:14:2b: 9f:64:92:4b:3f:46:39:c8:c0:48:14:5d:ee:b8:c1:83:b0:46: 13:77:22:c2:28:e9:c6:30:e3:63:43:25:39:a3:08:f2:c2:9c: ad:0d:ec:78:74:3c:75:21:1f:01:4f:50:01:98:96:97:e5:1e: 97:7f:57:01:d7:76:00:f1:3d:f6:86:2b:d3:52:1a:cc:ab:73: fa:49:a8:c9:e5:e0:8a:2f:fe:7b:a8:10:8d:69:df:b4:15:03: a0:c7:dc:d4:fc:b0:63:f4:68:1e:10:cf:d7:34:54:86:31:4d: 81:ee:14:e2:37:d2:72:db:c8:82:b2:72:b1:0b:9e:68:d0:73: 9b:6d:46:b7:42:09:dc:37:25:61:77:cc:da:ea:8a:ca:cb:5b: 79:11:a6:57:0e:75:31:f8:d7:ef:72:fc:eb:50:fb:f9:2f:c3: 96:ce:6f:47:e4:af:38:7d:d3:dc:2b:2a:5d:0f:5d:a1:60:10: c1:bc:61:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDIyMjExMC8GA1UEBRMoODIwNUU5Nzk2RUM2OUEwQzczREMzQjVCM0NFMTJDNDgx OTJCNDU3NzAeFw0yNTA1MzEwNjU0MTZaFw0yNTA2MDcwNjU0MTZaMBgxFjAUBgNV BAMTDTY4M2FhNzk4LThjNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Vefgwx9p7K9CnDNjxc9iS5QKZjPtWiAT1WI87ICAH/2u4Ncyol15t/6jZalg AtWltTtj2RAtewPmZPz1GoDl76aMapTEVy+qf2i98eRR4X+shJLJUMKvTLVL5UkH Q/LrWgkXJ1dY1JE2YyEqNz38L8KsdcBOFeACbXJaUeVDaMiPnqFGBzqDJGc1imK7 0kfu+RkXLg4Oa85JSVRJagazchGFhQno+oWFVbKzLoir4qwOqnMYjjamocqPGbs+ iKhE1OHVxd5W/f83iMWDxavbhBXnhpZcxx/RZHZpnp9AtfX8ZikW2rJKclPvR6tL nb/9ZuN9lDbRPqlZ7kVjS8sXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXTDSCpKF Ns+4BtYMo+7MLXg+RsIwHwYDVR0jBBgwFoAUggXpeW7Gmgxz3DtbPOEsSBkrRXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMjIyLzg3NjQ0ODlDQ0Q3 RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ2dYcGVXN0dtZ3h6M0R0YlBPRXNTQmtyUlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyL2dnWHBlVzdHbWd4 ejNEdGJQT0VzU0JrclJYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIB4IjrSr+qt7pxJGhAGmMLK+2tTqrTPrderqhTQXt/oKV36hlznSgoV Cf55HEcsMc2vZBlJfxBNIjMzK1erZbAYA6o4O0gUK59kkks/RjnIwEgUXe64wYOw RhN3IsIo6cYw42NDJTmjCPLCnK0N7Hh0PHUhHwFPUAGYlpflHpd/VwHXdgDxPfaG K9NSGsyrc/pJqMnl4Iov/nuoEI1p37QVA6DH3NT8sGP0aB4Qz9c0VIYxTYHuFOI3 0nLbyIKycrELnmjQc5ttRrdCCdw3JWF3zNrqisrLW3kRplcOdTH41+9y/OtQ+/kv w5bOb0fkrzh909wrKl0PXaFgEMG8YR8= -----END CERTIFICATE-----Generated at Sat May 31 17:48:39 2025 by rpki-client