$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft File: GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json) Hash identifier: T8GjSiGCbt0NnLG/+ak/zQ4QzXNLCcEyQOKoNVWcK2Y= Subject key identifier: 62:2D:ED:B4:E3:42:29:0F:89:A4:CD:A1:CE:D0:8A:56:AF:37:D1:E8 Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 Certificate issuer: /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft Manifest number: 013D Signing time: Thu 15 May 2025 03:45:38 +0000 Manifest this update: Thu 15 May 2025 03:45:37 +0000 Manifest next update: Thu 22 May 2025 03:45:37 +0000 Files and hashes: 1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: TmrBIFKjp4VEJ3XkWPVlOJI+QhQtMle5A/t7CgiriUE=) 2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Validity Not Before: May 15 03:45:37 2025 GMT Not After : May 22 03:45:37 2025 GMT Subject: CN=68256361-e278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:dc:01:cc:58:39:7b:9a:ec:38:d2:ee:63: 37:6e:3c:1f:f7:6f:e2:f9:44:05:96:a5:5e:a8:77: 64:6c:3e:15:16:b6:55:21:a4:a8:00:d2:e3:f5:c5: 02:34:4c:4b:d2:f1:df:b0:fb:88:58:56:a9:6f:97: 11:a2:01:6e:d6:c6:b2:07:23:6e:0a:de:83:8b:f6: 8c:e5:74:f4:bc:d5:6d:24:c9:ae:e9:a3:9d:1e:e6: f1:e0:c9:32:04:54:10:69:48:3a:fe:8c:ac:7a:40: 72:0f:7a:26:24:0f:c4:e6:e6:47:dc:31:3e:29:eb: cb:8a:88:83:4b:27:83:05:46:4d:89:81:4c:05:8b: 6b:6f:a1:ee:a1:25:fd:16:24:a3:74:7f:5a:bc:25: 06:87:a8:cd:e7:92:bc:ff:8f:27:e0:c8:06:92:a2: 8b:54:b5:b8:31:23:40:dc:11:b0:b3:99:c6:46:47: 3a:09:0d:84:8f:fc:f8:67:79:be:02:a5:fc:24:56: 0e:18:1e:3e:d8:69:f1:7d:8c:18:bf:b7:a7:c6:1b: b2:55:ef:ba:7f:4e:ec:05:a0:c9:3f:d8:de:69:13: 80:90:a6:e8:23:92:d2:dd:b1:f7:13:fb:a6:98:3e: fd:58:5c:b4:91:f6:52:27:9a:8f:6a:52:3a:b6:5c: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:ED:B4:E3:42:29:0F:89:A4:CD:A1:CE:D0:8A:56:AF:37:D1:E8 X509v3 Authority Key Identifier: keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:e6:2a:5e:e6:c1:00:80:75:c0:11:49:c9:82:c0:a3:b4: da:f5:32:b2:c1:a3:47:62:6b:29:f6:be:19:09:db:b7:a8:1c: 99:5b:53:0a:7f:d5:5c:5e:3d:db:75:d0:fa:cb:7d:81:33:9f: 62:36:57:65:8f:a9:08:4a:2b:52:ba:9c:50:76:fa:9b:0f:93: fe:41:12:27:99:63:3f:19:44:77:e1:ba:56:14:9d:17:c0:e6: c8:31:6a:4e:ac:05:03:83:ca:cf:f3:d8:dd:52:7d:5c:15:a7: 61:c9:a8:0b:8b:7d:9c:5d:16:3f:96:9c:c5:1f:15:15:8c:d8: ba:5b:27:06:c9:26:f2:bc:68:a4:5a:5c:40:0d:a6:c8:e0:e4: 09:8b:9e:df:46:f5:c7:3d:f8:e0:2e:46:f8:23:1d:e1:ac:09: 07:54:5d:ef:2e:79:5f:bd:64:f3:55:f6:72:4b:f8:7f:fa:93: f5:6d:ad:95:83:1d:74:d8:c9:1b:9f:83:e9:41:2a:bb:10:7c: 5b:97:7d:f5:fe:fe:9a:0d:6f:3b:8e:8e:ba:94:94:6d:7f:07: 38:70:2d:aa:7a:7e:85:e8:53:2d:4b:ef:3f:96:f9:96:ba:92: 72:c4:13:31:73:93:25:83:c8:b6:59:4b:7d:35:1b:e5:e5:a7: 5c:7c:11:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4 RTJBNjI2NjEwHhcNMjUwNTE1MDM0NTM3WhcNMjUwNTIyMDM0NTM3WjAYMRYwFAYD VQQDEw02ODI1NjM2MS1lMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNrcAcxYOXua7DjS7mM3bjwf92/i+UQFlqVeqHdkbD4VFrZVIaSoANLj9cUC NExL0vHfsPuIWFapb5cRogFu1sayByNuCt6Di/aM5XT0vNVtJMmu6aOdHubx4Mky BFQQaUg6/oysekByD3omJA/E5uZH3DE+KevLioiDSyeDBUZNiYFMBYtrb6HuoSX9 FiSjdH9avCUGh6jN55K8/48n4MgGkqKLVLW4MSNA3BGws5nGRkc6CQ2Ej/z4Z3m+ AqX8JFYOGB4+2GnxfYwYv7enxhuyVe+6f07sBaDJP9jeaROAkKboI5LS3bH3E/um mD79WFy0kfZSJ5qPalI6tlyzJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIt7bTj QikPiaTNoc7QilavN9HoMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT MGFnanN2S2RyY0NPS21KbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTOYqXubBAIB1wBFJyYLAo7Ta9TKywaNHYmsp9r4ZCdu3qByZW1MK f9VcXj3bddD6y32BM59iNldlj6kISitSupxQdvqbD5P+QRInmWM/GUR34bpWFJ0X wObIMWpOrAUDg8rP89jdUn1cFadhyagLi32cXRY/lpzFHxUVjNi6WycGySbyvGik WlxADabI4OQJi57fRvXHPfjgLkb4Ix3hrAkHVF3vLnlfvWTzVfZyS/h/+pP1ba2V gx102Mkbn4PpQSq7EHxbl331/v6aDW87jo66lJRtfwc4cC2qen6F6FMtS+8/lvmW upJyxBMxc5Mlg8i2WUt9NRvl5adcfBHF -----END CERTIFICATE-----Generated at Fri May 16 10:27:06 2025 by rpki-client