$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: O9eP0oYzGEdUD8LOdtEUQKX+ZmZU3q1oq9R73v2L04c= Subject key identifier: DA:D9:FC:09:BF:73:B0:5D:09:0C:1A:F5:0F:E6:D6:72:9E:9E:E9:D3 Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 0348 Signing time: Sun 11 May 2025 00:34:45 +0000 Manifest this update: Sun 11 May 2025 00:34:44 +0000 Manifest next update: Sun 18 May 2025 00:34:44 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: Iz8LEI2m+/gvx539CH+tR/qiycoJ+bmxj4uymNYt03w=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: bwcKq1c0r2cXBrd25MLQlHFjWgMS2hGGf/FnvA7qj34=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: M4NylbqODaGIV7jb3azGtcDcoPjVhzDh1zfYrf7L1aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: May 11 00:34:44 2025 GMT Not After : May 18 00:34:44 2025 GMT Subject: CN=681ff0a4-4597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:51:a9:eb:63:c2:47:8e:7e:d0:76:f1:03: 86:11:26:76:c2:b1:87:c6:66:a5:8e:c3:05:c4:46: 60:2f:54:03:b0:42:fc:23:8e:c8:52:98:06:ef:15: d0:0c:19:e1:27:e0:cb:53:97:da:da:c3:6c:c7:05: db:94:40:66:12:18:5d:4b:4f:54:e7:8d:b6:83:18: 79:dd:f8:44:88:57:86:fd:df:6e:af:64:b7:65:8f: b3:54:e8:13:f6:64:9c:98:3d:d8:ed:ec:8c:e3:62: 27:a0:0f:94:5d:cd:41:fe:79:f2:e7:40:99:9f:8d: 0d:2e:95:20:38:ea:03:ab:af:75:46:0d:40:d0:2c: e0:c7:9a:1b:59:32:33:b2:25:10:bb:2d:8b:23:c2: b8:36:e2:53:75:15:a3:05:ca:3a:4d:6b:c9:12:d0: 57:b8:d8:16:ca:9b:eb:93:20:9f:49:2e:7f:6f:a4: b6:b1:57:c6:db:77:2a:6e:cb:91:26:d0:9e:6c:d1: d2:5c:34:3a:a2:cc:f2:b8:d0:56:b6:63:1e:ee:aa: 09:a3:c3:e9:f9:34:e5:17:ed:66:a4:75:26:89:c2: 93:3b:96:bd:2d:32:84:59:b1:77:97:a3:2e:ae:af: a5:ed:29:bd:1a:8a:f4:67:89:60:89:65:ea:f1:0f: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:FC:09:BF:73:B0:5D:09:0C:1A:F5:0F:E6:D6:72:9E:9E:E9:D3 X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0e:3a:0b:9a:df:16:47:2f:c7:c9:a2:99:62:ef:3f:b5:82: 8b:56:ca:40:37:af:74:f6:46:bf:ba:22:39:7e:7b:2b:a2:ba: 50:46:9f:2d:00:3d:73:c2:53:b2:8c:16:5c:c8:ea:84:fd:46: 4c:26:09:1e:06:de:b2:94:82:88:b3:86:59:c5:bf:5a:97:a4: a4:d6:80:ba:0d:6e:0b:5e:73:37:83:a9:06:85:ae:ba:fc:7a: e2:35:bc:05:3a:a6:4b:c4:db:fd:0c:65:f1:aa:d5:b9:49:9a: 0c:bf:2a:ba:fb:fd:15:48:99:72:34:b5:7a:33:45:e1:4b:c6: 4f:38:c5:06:b5:09:13:12:78:e6:b7:3e:16:3e:80:0b:d4:53: 08:cf:4a:87:38:9e:e2:aa:f1:9c:ae:3d:ae:45:53:c9:76:c4: 5a:f2:ce:1e:38:44:64:f9:04:51:cf:5e:69:0f:11:67:5d:7c: bb:e0:f9:66:1b:81:c0:10:44:7b:50:02:fd:90:e9:2d:90:c9: 53:61:f2:7a:ef:fc:12:13:e0:ae:5b:01:9b:8b:ed:72:21:ad: be:09:50:e2:b8:71:f9:2b:0e:23:41:ea:fd:2b:83:f2:a6:34: 5b:3e:b2:2b:f0:81:75:27:8c:c7:8e:ed:55:f2:b1:11:b3:d2: f4:26:9a:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUwNTExMDAzNDQ0WhcNMjUwNTE4MDAzNDQ0WjAYMRYwFAYD VQQDEw02ODFmZjBhNC00NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG1RqetjwkeOftB28QOGESZ2wrGHxmaljsMFxEZgL1QDsEL8I47IUpgG7xXQ DBnhJ+DLU5fa2sNsxwXblEBmEhhdS09U5422gxh53fhEiFeG/d9ur2S3ZY+zVOgT 9mScmD3Y7eyM42InoA+UXc1B/nny50CZn40NLpUgOOoDq691Rg1A0Czgx5obWTIz siUQuy2LI8K4NuJTdRWjBco6TWvJEtBXuNgWypvrkyCfSS5/b6S2sVfG23cqbsuR JtCebNHSXDQ6oszyuNBWtmMe7qoJo8Pp+TTlF+1mpHUmicKTO5a9LTKEWbF3l6Mu rq+l7Sm9Gor0Z4lgiWXq8Q9Y6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrZ/Am/ c7BdCQwa9Q/m1nKenunTMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDjoLmt8WRy/HyaKZYu8/tYKLVspAN6909ka/uiI5fnsrorpQRp8t AD1zwlOyjBZcyOqE/UZMJgkeBt6ylIKIs4ZZxb9al6Sk1oC6DW4LXnM3g6kGha66 /HriNbwFOqZLxNv9DGXxqtW5SZoMvyq6+/0VSJlyNLV6M0XhS8ZPOMUGtQkTEnjm tz4WPoAL1FMIz0qHOJ7iqvGcrj2uRVPJdsRa8s4eOERk+QRRz15pDxFnXXy74Plm G4HAEER7UAL9kOktkMlTYfJ67/wSE+CuWwGbi+1yIa2+CVDiuHH5Kw4jQer9K4Py pjRbPrIr8IF1J4zHju1V8rERs9L0JppA -----END CERTIFICATE-----Generated at Sun May 11 20:00:41 2025 by rpki-client