$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: FBdYBvJgoS46txVs2iBLeY4ssvWjvQPT1e5Eb/L8wt4= Subject key identifier: 6F:03:6D:F1:5B:19:69:25:91:16:34:40:4F:2C:9D:03:C3:1C:33:06 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 0824 Signing time: Sat 10 May 2025 20:30:48 +0000 Manifest this update: Sat 10 May 2025 20:30:48 +0000 Manifest next update: Sat 17 May 2025 20:30:48 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: thz23wr8eu+rAhxnMigfPJa/WIb1jmcwNexZzwYxD70=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: May 10 20:30:48 2025 GMT Not After : May 17 20:30:48 2025 GMT Subject: CN=681fb778-756a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:8f:28:84:ce:68:8f:dc:28:43:11:2b:b6: d2:d3:fd:a2:02:c0:08:c5:27:0c:71:f1:52:51:24: 7f:54:ee:e7:8f:b7:49:af:15:8e:0f:86:c6:b0:b8: c6:9a:43:01:7f:e5:c2:ba:3f:7f:c3:18:07:9f:ca: f8:e4:1d:c9:d9:4e:87:82:f1:80:92:3a:2f:b3:08: 36:38:3f:c2:37:9c:1e:25:93:27:59:a3:44:86:53: 54:fb:16:2b:ca:4c:1f:53:63:9a:dd:29:c3:59:3c: ea:1d:a6:cb:c5:44:0d:ec:f3:29:94:c7:c3:88:d6: db:a7:4c:fa:f9:4a:c5:3d:85:1b:74:51:c2:09:0b: bc:e8:33:17:d1:3d:50:a2:ea:d4:b3:38:2a:89:1b: d5:26:2c:49:91:24:04:20:d5:28:ca:99:2a:87:25: b3:5d:0a:51:ee:ff:3a:4b:f4:ba:9c:f1:4d:e5:e4: 54:23:0b:f0:f0:b3:40:3c:04:33:54:62:e9:2d:53: cf:1f:f9:0b:81:e5:9b:ef:58:be:df:fa:c1:ca:01: 29:53:ee:b4:67:c1:1b:f8:f8:76:d4:a1:e0:3d:f4: a3:48:85:c3:dd:38:04:74:77:dc:c4:8e:39:5d:94: 84:68:f6:98:2d:9b:6a:41:a7:24:03:52:a4:10:ca: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:6D:F1:5B:19:69:25:91:16:34:40:4F:2C:9D:03:C3:1C:33:06 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:99:de:ef:06:12:a7:e0:11:fd:a3:89:51:f6:14:09:53:7d: 9e:2a:1a:19:64:56:52:b0:af:63:63:84:97:47:f9:5d:16:a7: 02:8e:50:41:d6:be:4a:76:c2:61:5f:78:cc:a0:5e:82:0d:14: f7:b2:d1:c8:d4:2b:ad:b3:67:51:ec:f9:a0:08:6f:74:76:f0: 86:47:55:bc:a1:39:c2:ed:ba:e8:ab:37:d0:61:e0:d7:42:6d: 34:18:b2:7e:96:11:92:5c:2c:1e:3e:f6:e5:72:57:98:fc:9c: 18:a6:0a:e6:56:fd:f6:ea:08:f4:2d:2c:07:47:57:b2:16:7b: 8f:56:92:f2:03:c7:6d:bd:82:7b:a4:12:8f:39:f2:98:f4:28: f3:89:90:eb:9b:02:8e:84:f3:aa:51:98:12:c1:39:ef:a2:45: ef:df:8d:1a:06:a5:85:22:42:eb:34:9a:72:8f:59:42:53:86: a8:6b:e7:cb:f6:9a:c2:b7:ff:49:a4:37:9b:aa:9b:e4:05:4d: d5:93:27:ba:c8:90:69:35:16:a8:28:01:71:7a:38:17:f9:4d: 7d:be:26:c8:b5:96:16:cd:93:65:6b:61:29:70:77:01:52:e5: e7:20:bf:56:cb:46:0e:8b:60:ac:1d:d2:7d:49:c3:bb:af:ae: 63:87:fc:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNTEwMjAzMDQ4WhcNMjUwNTE3MjAzMDQ4WjAYMRYwFAYD VQQDEw02ODFmYjc3OC03NTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+2PKITOaI/cKEMRK7bS0/2iAsAIxScMcfFSUSR/VO7nj7dJrxWOD4bGsLjG mkMBf+XCuj9/wxgHn8r45B3J2U6HgvGAkjovswg2OD/CN5weJZMnWaNEhlNU+xYr ykwfU2Oa3SnDWTzqHabLxUQN7PMplMfDiNbbp0z6+UrFPYUbdFHCCQu86DMX0T1Q ourUszgqiRvVJixJkSQEINUoypkqhyWzXQpR7v86S/S6nPFN5eRUIwvw8LNAPAQz VGLpLVPPH/kLgeWb71i+3/rBygEpU+60Z8Eb+Ph21KHgPfSjSIXD3TgEdHfcxI45 XZSEaPaYLZtqQackA1KkEMovDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8DbfFb GWklkRY0QE8snQPDHDMGMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWmd7vBhKn4BH9o4lR9hQJU32eKhoZZFZSsK9jY4SXR/ldFqcCjlBB 1r5KdsJhX3jMoF6CDRT3stHI1Cuts2dR7PmgCG90dvCGR1W8oTnC7broqzfQYeDX Qm00GLJ+lhGSXCwePvblcleY/JwYpgrmVv326gj0LSwHR1eyFnuPVpLyA8dtvYJ7 pBKPOfKY9CjziZDrmwKOhPOqUZgSwTnvokXv340aBqWFIkLrNJpyj1lCU4aoa+fL 9prCt/9JpDebqpvkBU3Vkye6yJBpNRaoKAFxejgX+U19vibItZYWzZNla2EpcHcB UuXnIL9Wy0YOi2CsHdJ9ScO7r65jh/y+ -----END CERTIFICATE-----Generated at Sun May 11 16:13:11 2025 by rpki-client