$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: hZU92hQ0UI8h3OO8D43fp1LX54EQ7yP2WHU4PbwGeJ4= Subject key identifier: B8:1F:29:58:B2:C2:FA:0F:1E:0C:37:51:16:23:CB:12:14:94:3B:14 Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 014D Signing time: Sun 11 May 2025 03:10:16 +0000 Manifest this update: Sun 11 May 2025 03:10:15 +0000 Manifest next update: Sun 18 May 2025 03:10:15 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: cEABBVK5fGXtUb/XuAbG67zJrxCF22atnse+0xJ22uM=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: May 11 03:10:15 2025 GMT Not After : May 18 03:10:15 2025 GMT Subject: CN=68201517-ecb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:e1:34:9f:ec:50:21:f6:ea:95:8e:4a:aa: af:59:35:d5:ca:ca:14:4d:74:dd:e5:39:75:4a:33: 4a:05:71:81:ad:dd:61:ab:49:bc:57:00:5b:3c:8e: ee:0d:9c:2e:73:d1:34:d2:69:72:7c:6d:59:e0:17: 42:59:3f:29:01:46:ff:38:d8:64:e0:3a:30:43:ad: be:99:c0:ed:41:03:92:1d:35:07:c2:da:33:77:66: c6:2b:a8:40:32:ff:2e:75:66:09:c9:04:9a:8c:e1: ef:5a:1f:a8:46:06:51:a6:fc:80:09:76:4e:46:3b: 93:8b:34:33:01:a1:34:86:2e:5d:dc:64:8b:d1:8f: a2:cb:38:a8:12:3b:be:15:11:78:23:87:ab:ee:ae: ec:dd:7b:e0:26:5f:3a:40:a4:3b:e7:54:47:32:c6: 29:44:e6:df:86:d9:6c:06:eb:a6:e9:c6:71:b1:91: 16:e7:b9:12:61:8c:b0:be:29:2c:a9:5d:68:7c:8d: d1:1c:3b:be:04:3e:70:5d:78:a0:e6:04:a7:e2:a1: 84:9a:f1:9e:82:d4:44:cc:09:a5:ce:9f:8c:79:f7: 1b:2f:57:6c:d8:57:08:67:9b:96:ed:f3:b7:b9:9b: 47:1d:68:c4:78:38:c2:d6:8a:7a:9d:4e:48:c6:6d: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1F:29:58:B2:C2:FA:0F:1E:0C:37:51:16:23:CB:12:14:94:3B:14 X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:35:40:89:ae:f1:3f:6f:28:ba:2c:fe:47:20:c5:b9:a0:15: 4a:f0:de:36:c1:af:13:42:14:73:75:f5:2b:98:36:04:92:34: 0a:ca:f3:c2:82:50:5e:07:66:1e:cb:8e:53:1d:9a:3d:8e:d1: 68:be:78:c1:04:cd:5f:13:38:53:65:57:c0:81:35:3e:62:1c: b9:a8:03:df:82:4f:2e:60:17:11:14:1b:27:5e:66:18:ac:67: 6f:88:c4:9b:e9:05:70:56:5a:7b:66:45:ee:1e:bb:4d:cd:75: c1:23:20:83:c3:71:da:58:6b:d4:6e:c4:25:ff:32:6c:fa:2f: a6:a7:31:82:ff:a4:d8:09:a5:8d:be:91:a2:14:2a:80:3d:7d: 59:8a:a8:2d:86:80:1b:d2:cb:e4:18:4f:5c:da:1a:7b:ff:f0: 84:0e:64:01:47:9e:e3:9f:6e:df:d8:9b:22:b9:11:db:db:7e: fe:0b:09:f1:59:83:ec:9c:a7:46:b4:86:bf:6b:7c:dd:fe:58: 7e:bd:6f:7b:19:be:56:49:91:8b:77:59:51:7b:2b:5a:bc:4b: 6c:a6:1a:02:83:e5:41:fc:75:92:51:2c:df:57:10:4d:cb:e9: 10:85:31:41:47:e1:d1:4c:14:fd:d3:32:43:e0:d0:f6:0d:5f: 9b:0f:09:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUwNTExMDMxMDE1WhcNMjUwNTE4MDMxMDE1WjAYMRYwFAYD VQQDEw02ODIwMTUxNy1lY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rLhNJ/sUCH26pWOSqqvWTXVysoUTXTd5Tl1SjNKBXGBrd1hq0m8VwBbPI7u DZwuc9E00mlyfG1Z4BdCWT8pAUb/ONhk4DowQ62+mcDtQQOSHTUHwtozd2bGK6hA Mv8udWYJyQSajOHvWh+oRgZRpvyACXZORjuTizQzAaE0hi5d3GSL0Y+iyzioEju+ FRF4I4er7q7s3XvgJl86QKQ751RHMsYpRObfhtlsBuum6cZxsZEW57kSYYywviks qV1ofI3RHDu+BD5wXXig5gSn4qGEmvGegtREzAmlzp+MefcbL1ds2FcIZ5uW7fO3 uZtHHWjEeDjC1op6nU5Ixm3OewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgfKViy wvoPHgw3URYjyxIUlDsUMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDONUCJrvE/byi6LP5HIMW5oBVK8N42wa8TQhRzdfUrmDYEkjQKyvPC glBeB2Yey45THZo9jtFovnjBBM1fEzhTZVfAgTU+Yhy5qAPfgk8uYBcRFBsnXmYY rGdviMSb6QVwVlp7ZkXuHrtNzXXBIyCDw3HaWGvUbsQl/zJs+i+mpzGC/6TYCaWN vpGiFCqAPX1ZiqgthoAb0svkGE9c2hp7//CEDmQBR57jn27f2JsiuRHb237+Cwnx WYPsnKdGtIa/a3zd/lh+vW97Gb5WSZGLd1lReytavEtsphoCg+VB/HWSUSzfVxBN y+kQhTFBR+HRTBT90zJD4ND2DV+bDwk1 -----END CERTIFICATE-----Generated at Mon May 12 18:24:30 2025 by rpki-client