$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: x2bftbWasrmTuLNgRa32wnZ8bKiouq2UUz+UKF3j+Q4= Subject key identifier: AA:75:FC:06:4D:D9:0D:F4:9B:EF:60:DD:B9:47:63:E0:95:DA:29:0D Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 01E2 Signing time: Sun 11 May 2025 01:39:24 +0000 Manifest this update: Sun 11 May 2025 01:39:23 +0000 Manifest next update: Sun 18 May 2025 01:39:23 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: xf1ZuWmlmY1Yols7jUg/gexh7emfQWzSxhJFHhAKy5Q=) 2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: May 11 01:39:23 2025 GMT Not After : May 18 01:39:23 2025 GMT Subject: CN=681fffcb-2ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:c6:6c:73:c6:db:79:cd:f9:97:2d:7e:85: 6f:e4:e6:44:53:64:f9:60:f8:00:0e:6c:09:cf:08: 38:32:5c:a2:d9:c2:f4:ad:f1:51:49:23:76:b8:01: 31:bd:07:3c:fb:53:6c:75:a6:bf:e8:37:ef:36:d5: 9f:2e:e2:b4:a7:e0:3f:e5:2b:77:65:6a:c6:17:86: 46:00:d4:47:6f:76:3d:82:57:81:b7:e5:29:78:af: 78:60:76:27:fd:25:de:84:5e:a0:87:fe:34:a8:c5: 5f:f7:c5:c1:e1:74:2c:66:42:c2:37:e6:cc:39:c4: 95:51:56:0d:8e:39:15:e0:ff:53:6e:a0:21:6f:d0: aa:8b:aa:74:f6:aa:38:c7:58:68:22:35:ef:5e:9b: 86:5e:9f:56:82:f8:7d:96:9f:c8:2e:8a:95:2d:c0: a1:22:30:88:09:86:4c:90:85:8a:2e:09:b7:98:ea: b2:4f:31:0c:4d:7b:e6:c3:dd:e3:66:86:73:b7:02: 7f:03:ff:de:e2:62:ea:a3:37:49:e1:bb:b7:1a:8b: 5f:17:bb:85:6a:f9:eb:18:78:1f:78:f9:94:a8:3f: fb:8b:ec:7b:16:f1:df:98:32:47:30:fb:cf:b5:3b: 44:51:f9:23:ea:3f:98:2e:7a:6c:1b:2e:25:32:c7: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:75:FC:06:4D:D9:0D:F4:9B:EF:60:DD:B9:47:63:E0:95:DA:29:0D X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:09:90:20:1a:68:ad:5f:89:9c:fa:49:c5:12:0b:ac:3a:70: 21:fd:3c:90:6c:d1:3a:01:0a:a3:af:b0:cd:78:ed:77:a9:b3: d9:a2:56:aa:73:96:27:5f:28:3b:af:3c:5f:dd:01:7e:68:cc: 4a:b4:18:dc:fd:86:40:1f:76:e8:8d:a9:21:68:3e:97:de:4a: b4:a3:be:bb:16:31:4f:e0:33:b5:1a:3f:56:c6:b4:d2:75:54: 28:bc:0a:2d:40:37:96:ea:bc:94:32:1c:c2:df:f4:a2:6e:7f: bf:d2:8a:cb:c9:ca:3f:70:5c:d9:ce:7d:81:ed:db:13:87:3d: e7:b3:4e:f2:5e:e8:31:6e:2c:94:a9:16:62:b3:75:0e:09:ba: b4:37:cc:d4:c7:02:3d:1a:93:20:59:0a:01:bb:21:2f:3b:1d: 62:66:7c:3d:fa:b7:ea:f6:b7:5b:50:7f:f3:24:7a:c5:65:be: 9e:79:e1:a3:f1:0b:27:cc:9c:3b:13:aa:c4:73:3c:04:50:1b: 4d:2d:2a:fd:b1:57:ff:a8:47:19:c5:1a:0c:dc:4c:da:53:0d: a5:73:6b:99:9f:e3:3d:0c:83:d3:d3:b2:d2:61:22:16:df:e1: a6:02:3f:97:09:cb:a5:6b:e1:12:f9:55:62:69:86:c2:e2:e5: 3a:ea:2d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjUwNTExMDEzOTIzWhcNMjUwNTE4MDEzOTIzWjAYMRYwFAYD VQQDEw02ODFmZmZjYi0yZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc7GbHPG23nN+ZctfoVv5OZEU2T5YPgADmwJzwg4Mlyi2cL0rfFRSSN2uAEx vQc8+1Nsdaa/6DfvNtWfLuK0p+A/5St3ZWrGF4ZGANRHb3Y9gleBt+UpeK94YHYn /SXehF6gh/40qMVf98XB4XQsZkLCN+bMOcSVUVYNjjkV4P9TbqAhb9Cqi6p09qo4 x1hoIjXvXpuGXp9Wgvh9lp/ILoqVLcChIjCICYZMkIWKLgm3mOqyTzEMTXvmw93j ZoZztwJ/A//e4mLqozdJ4bu3GotfF7uFavnrGHgfePmUqD/7i+x7FvHfmDJHMPvP tTtEUfkj6j+YLnpsGy4lMscHawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp1/AZN 2Q30m+9g3blHY+CV2ikNMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiCZAgGmitX4mc+knFEgusOnAh/TyQbNE6AQqjr7DNeO13qbPZolaq c5YnXyg7rzxf3QF+aMxKtBjc/YZAH3bojakhaD6X3kq0o767FjFP4DO1Gj9WxrTS dVQovAotQDeW6ryUMhzC3/Sibn+/0orLyco/cFzZzn2B7dsThz3ns07yXugxbiyU qRZis3UOCbq0N8zUxwI9GpMgWQoBuyEvOx1iZnw9+rfq9rdbUH/zJHrFZb6eeeGj 8QsnzJw7E6rEczwEUBtNLSr9sVf/qEcZxRoM3EzaUw2lc2uZn+M9DIPT07LSYSIW 3+GmAj+XCcula+ES+VViaYbC4uU66i0d -----END CERTIFICATE-----Generated at Mon May 12 10:22:32 2025 by rpki-client