$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: hITJF/qbs1sJET4AqF2s6ziCxE2A+fVV4O4kd/uwp/Q= Subject key identifier: FD:98:5E:C2:32:CA:07:24:FD:9E:A3:D4:17:06:6B:80:9B:A1:6E:59 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: D3 Signing time: Tue 13 May 2025 04:53:37 +0000 Manifest this update: Tue 13 May 2025 04:53:37 +0000 Manifest next update: Tue 20 May 2025 04:53:37 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: Tpk5XBU7L/J+E8uD6Ijs8i234EgTvomJREALVtzIhvQ=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: May 13 04:53:37 2025 GMT Not After : May 20 04:53:37 2025 GMT Subject: CN=6822d051-8582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:12:dd:5b:c5:40:16:aa:67:bc:44:a9:d5: 6d:66:ce:7d:fe:a6:57:fc:f7:c6:00:6f:56:bb:62: 7c:c4:42:ab:fc:17:3d:8b:3c:11:25:99:0a:a9:3e: 9b:33:ea:28:c8:81:5a:c9:ef:1b:d3:37:ec:2c:cf: 69:1c:fa:a7:7d:9b:1b:6c:2d:18:b9:b6:22:0f:8a: 9b:ea:91:35:9c:d3:ab:c7:fe:35:02:ce:a1:66:d2: 72:d4:8c:84:df:9d:de:ab:c1:3a:2b:48:d9:96:f9: e2:a9:9e:f8:49:9f:e7:2e:0f:a8:51:f7:da:1f:48: 34:8a:61:56:47:e3:2f:d4:90:8e:8e:75:98:8f:0b: ff:96:b0:59:33:dc:ae:08:4e:56:01:fb:e9:aa:f9: 0f:8a:3e:a9:14:de:18:ad:dd:c0:59:50:cc:62:0e: c7:e6:5a:00:45:a3:12:98:f2:25:a1:d4:8f:c9:3c: b1:d7:8c:c2:11:2b:1d:87:3e:a3:5d:ef:90:d3:31: 89:35:71:93:ec:58:ef:67:ae:af:1c:70:4f:14:0f: 91:7c:ba:b9:83:3a:ba:a1:d1:1c:82:f5:25:9b:e6: 43:94:4d:e1:64:48:d4:1d:66:34:64:e8:79:58:7f: e8:93:10:43:c0:c6:d1:57:62:b7:8c:18:07:7b:a3: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:98:5E:C2:32:CA:07:24:FD:9E:A3:D4:17:06:6B:80:9B:A1:6E:59 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cc:af:dd:a9:08:90:34:5e:95:62:a1:cd:e6:fd:93:31:28: 6b:bc:e0:8c:44:90:13:cb:3b:fb:be:40:d6:ba:48:d5:4a:cd: ec:1f:73:cb:79:4f:86:13:38:bb:fd:47:b7:d6:c9:9e:06:69: 42:ca:62:c4:45:07:2c:21:79:a9:af:24:21:b8:f4:4d:d5:f4: e9:9e:d9:5b:99:a5:be:cf:d8:75:e3:5c:cb:43:43:34:7e:a9: 64:ca:4b:bc:63:62:c9:d4:43:3f:55:c0:18:c9:e0:f4:6e:c8: 68:4f:d1:82:7a:bd:65:e1:55:78:01:31:96:ff:ce:ca:53:a8: 51:9b:6e:23:c5:79:6c:b2:8b:82:74:06:ff:57:c1:d7:b1:22: ea:d6:dc:8b:86:4a:84:a9:68:94:6c:a0:96:06:f9:ea:55:13: cf:e0:7c:29:a2:bc:59:9b:61:62:e8:50:00:44:ee:09:f4:2a: 09:24:c6:6c:3b:38:09:72:60:18:c5:54:d8:1d:b1:35:cb:73: 34:2a:2c:0c:f8:eb:51:ed:06:50:06:f5:89:a3:94:6c:2b:cb: 02:2f:a6:5e:9d:1c:8b:ab:75:0a:8a:45:a5:91:49:ae:66:ad: 1b:ea:bd:a6:00:b5:22:1c:2a:ad:e6:4e:b9:5d:dd:dc:db:c5: df:20:66:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwNTEzMDQ1MzM3WhcNMjUwNTIwMDQ1MzM3WjAYMRYwFAYD VQQDEw02ODIyZDA1MS04NTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GUS3VvFQBaqZ7xEqdVtZs59/qZX/PfGAG9Wu2J8xEKr/Bc9izwRJZkKqT6b M+ooyIFaye8b0zfsLM9pHPqnfZsbbC0YubYiD4qb6pE1nNOrx/41As6hZtJy1IyE 353eq8E6K0jZlvniqZ74SZ/nLg+oUffaH0g0imFWR+Mv1JCOjnWYjwv/lrBZM9yu CE5WAfvpqvkPij6pFN4Yrd3AWVDMYg7H5loARaMSmPIlodSPyTyx14zCESsdhz6j Xe+Q0zGJNXGT7FjvZ66vHHBPFA+RfLq5gzq6odEcgvUlm+ZDlE3hZEjUHWY0ZOh5 WH/okxBDwMbRV2K3jBgHe6PXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2YXsIy ygck/Z6j1BcGa4CboW5ZMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzK/dqQiQNF6VYqHN5v2TMShrvOCMRJATyzv7vkDWukjVSs3sH3PL eU+GEzi7/Ue31smeBmlCymLERQcsIXmpryQhuPRN1fTpntlbmaW+z9h141zLQ0M0 fqlkyku8Y2LJ1EM/VcAYyeD0bshoT9GCer1l4VV4ATGW/87KU6hRm24jxXlssouC dAb/V8HXsSLq1tyLhkqEqWiUbKCWBvnqVRPP4HwporxZm2Fi6FAARO4J9CoJJMZs OzgJcmAYxVTYHbE1y3M0KiwM+OtR7QZQBvWJo5RsK8sCL6ZenRyLq3UKikWlkUmu Zq0b6r2mALUiHCqt5k65Xd3c28XfIGbq -----END CERTIFICATE-----Generated at Tue May 13 18:13:47 2025 by rpki-client