$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: +XbgVbN9QJV7mh6jXUSTTyrXOKEn5kyuols4L9vspKI= Subject key identifier: B6:4B:3A:78:4E:54:8E:2F:11:36:D1:71:35:26:95:78:F2:DC:40:7E Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 064B Signing time: Sun 04 May 2025 22:11:54 +0000 Manifest this update: Sun 04 May 2025 22:11:54 +0000 Manifest next update: Sun 11 May 2025 22:11:54 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: 1hBkFyX31XFUXfgoBqCOYoPrM/UkLWZM3jXD3qbix7E=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: HJ5B1NeUHZuSr0dNR5r03BZuHl4ib3IbNLeDtkm6M04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: May 4 22:11:54 2025 GMT Not After : May 11 22:11:54 2025 GMT Subject: CN=6817e62a-119b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:1f:c1:96:88:0f:5d:9b:24:a9:1b:91:23: dc:c7:01:32:eb:d2:30:c9:a4:a8:87:d8:73:86:77: 89:b0:b2:56:86:ff:4a:bd:15:6f:99:1a:3d:63:10: 4d:00:65:e8:9e:6b:16:71:93:f1:ad:0d:b8:ce:3d: 2a:76:0e:f0:33:e7:c4:99:85:49:73:b3:69:60:98: 4d:ea:62:78:1b:df:70:37:4f:60:20:c6:2f:ba:1d: 53:31:75:03:6a:be:f6:5f:10:9b:8c:00:7a:4a:45: 59:1a:ad:15:1d:2d:40:f4:44:57:78:61:b6:c2:80: d6:5e:e3:d7:ca:48:92:0b:e9:c3:b0:3d:a5:72:a9: 6e:ad:5c:37:a1:b6:2f:0b:94:8e:b4:2f:27:7f:23: 94:b4:3b:da:40:62:05:66:86:e4:9d:e1:61:38:23: 71:2e:3e:98:e4:01:9d:4d:dd:bd:a8:d2:0f:73:3f: 3c:ab:73:c6:fa:65:17:7b:1b:f9:31:50:37:6b:2b: 63:05:ef:e6:3d:9a:d0:66:91:75:43:07:f9:43:38: 18:c3:76:ee:a5:dd:11:ac:0b:b6:15:bd:b8:4e:1b: 91:ce:5d:9f:de:2f:a4:b9:7d:de:c9:d9:e2:20:49: 61:84:a2:5b:8b:be:91:40:35:ae:3a:1c:86:2a:3a: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:3A:78:4E:54:8E:2F:11:36:D1:71:35:26:95:78:F2:DC:40:7E X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:27:14:ab:da:05:65:0f:80:aa:23:dd:6e:61:44:2d:4e:62: 2c:22:7f:bc:15:b8:01:27:ce:61:ad:68:02:fc:07:0a:49:f7: ec:ee:8e:12:26:76:f1:8d:32:48:02:e2:a2:ef:1a:72:ea:2c: 76:e2:ab:9d:83:fe:61:7d:aa:ee:08:df:d4:b8:75:13:9d:84: 9d:55:83:f0:49:60:ab:37:4b:17:d8:8e:22:ec:4d:90:e4:98: de:81:19:64:0e:e9:3e:ad:fe:94:38:8c:40:dc:e2:7e:6c:0c: 5d:25:6d:a4:7b:05:f7:37:00:1a:ca:d9:29:b7:a1:dd:07:f6: e3:93:42:53:24:58:4a:57:3f:0b:88:91:1c:65:e9:59:0c:06: 26:72:2b:a9:ea:b4:4f:ed:85:d4:db:40:0b:6b:34:52:19:d0: 10:9b:d6:5f:aa:ce:62:20:88:9d:d5:ec:cc:73:e6:5c:72:7e: b1:96:41:ce:26:93:8b:d9:19:b3:17:c3:18:96:39:dd:f7:de: 3a:a7:ed:48:2d:06:6a:4b:77:ff:67:0c:1d:79:2f:bd:50:0d: 2c:e4:15:93:81:06:d5:b1:10:63:16:eb:96:1c:d9:5e:6b:65: 31:6f:95:9c:5c:4d:f5:e7:14:f4:44:25:18:d8:ae:95:0f:2e: 3e:70:4d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUwNTA0MjIxMTU0WhcNMjUwNTExMjIxMTU0WjAYMRYwFAYD VQQDEw02ODE3ZTYyYS0xMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaUfwZaID12bJKkbkSPcxwEy69IwyaSoh9hzhneJsLJWhv9KvRVvmRo9YxBN AGXonmsWcZPxrQ24zj0qdg7wM+fEmYVJc7NpYJhN6mJ4G99wN09gIMYvuh1TMXUD ar72XxCbjAB6SkVZGq0VHS1A9ERXeGG2woDWXuPXykiSC+nDsD2lcqlurVw3obYv C5SOtC8nfyOUtDvaQGIFZobkneFhOCNxLj6Y5AGdTd29qNIPcz88q3PG+mUXexv5 MVA3aytjBe/mPZrQZpF1Qwf5QzgYw3bupd0RrAu2Fb24ThuRzl2f3i+kuX3eydni IElhhKJbi76RQDWuOhyGKjpu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZLOnhO VI4vETbRcTUmlXjy3EB+MB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2JxSr2gVlD4CqI91uYUQtTmIsIn+8FbgBJ85hrWgC/AcKSffs7o4S JnbxjTJIAuKi7xpy6ix24qudg/5hfaruCN/UuHUTnYSdVYPwSWCrN0sX2I4i7E2Q 5JjegRlkDuk+rf6UOIxA3OJ+bAxdJW2kewX3NwAaytkpt6HdB/bjk0JTJFhKVz8L iJEcZelZDAYmciup6rRP7YXU20ALazRSGdAQm9Zfqs5iIIid1ezMc+Zccn6xlkHO JpOL2RmzF8MYljnd9946p+1ILQZqS3f/ZwwdeS+9UA0s5BWTgQbVsRBjFuuWHNle a2Uxb5WcXE315xT0RCUY2K6VDy4+cE10 -----END CERTIFICATE-----Generated at Mon May 5 08:00:19 2025 by rpki-client