$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft File: GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json) Hash identifier: ppDN709t+bTpBnEw9beawhp5tT5xHnlCMY/N2f7ALJc= Subject key identifier: 42:5C:45:6A:11:0B:D5:01:C9:4F:E6:33:BB:7C:6E:7A:CF:2A:50:37 Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 Certificate issuer: /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft Manifest number: 33 Signing time: Thu 15 May 2025 06:55:42 +0000 Manifest this update: Thu 15 May 2025 06:55:42 +0000 Manifest next update: Thu 22 May 2025 06:55:42 +0000 Files and hashes: 1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: bPCcUmANFUu/f0sUpFYznqYIkU+ryCYxnroeNTzf59A=) 2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240 Validity Not Before: May 15 06:55:42 2025 GMT Not After : May 22 06:55:42 2025 GMT Subject: CN=68258fee-6045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:14:d0:0f:ea:2d:75:9e:90:2b:1f:82:ba: 1d:18:a4:b0:61:8d:79:b6:b4:15:94:20:75:6a:0e: ca:7b:17:f5:83:19:45:4e:81:25:af:2c:77:b0:e6: 6c:ef:32:b6:7f:b9:fb:eb:d0:38:a4:aa:b5:45:3d: be:b3:9e:43:c8:73:fb:f5:a1:4d:1f:3e:b1:9a:91: ac:b0:1a:43:c8:88:35:93:77:30:13:6d:7c:fc:de: 03:5d:79:72:51:13:b6:92:9d:3d:0a:84:1c:ef:02: 13:64:54:4d:71:4a:c3:d1:eb:cb:b3:2e:b2:d1:eb: aa:85:fb:73:46:c4:99:79:03:63:51:9a:7a:57:c4: b1:7c:e5:a4:4f:ed:3d:ab:23:db:fa:da:0e:ad:7d: d1:e0:e5:64:01:46:69:f6:93:ee:0c:5b:d8:a0:e7: b2:fa:7c:05:10:3b:2f:c2:a7:56:a7:a6:9b:58:27: 38:74:fe:ae:dd:3a:3f:a2:ea:9c:71:df:f1:92:da: 98:36:6d:2b:e2:2e:eb:f6:8a:1d:a8:ae:fa:49:20: 0b:27:c5:e6:67:1f:c3:99:e1:b7:bf:b7:c6:65:1c: 17:05:ed:7a:bc:44:35:3c:d6:fc:19:dd:8f:44:57: b6:b2:96:49:83:19:e5:0a:b2:0b:21:35:98:4d:ec: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5C:45:6A:11:0B:D5:01:C9:4F:E6:33:BB:7C:6E:7A:CF:2A:50:37 X509v3 Authority Key Identifier: keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:a2:57:fc:a7:bc:82:a0:38:c8:b4:8e:e2:b4:70:0b:d6: ae:ba:49:d9:3b:a3:ce:72:e9:eb:34:6d:1c:3a:29:d2:d3:4d: 88:ed:b4:16:01:1d:62:d3:de:4a:8d:43:9b:74:21:8f:41:c4: 8a:2b:80:ec:9b:ad:48:f1:05:2d:3a:78:a0:9f:20:7e:21:72: 75:b8:10:27:35:65:85:50:9f:0d:35:08:a4:9a:0a:1a:61:f1: d0:83:12:32:4f:ce:e1:7c:fa:14:68:e8:a7:0b:17:41:fc:6d: eb:09:9c:43:99:9a:d7:f4:48:6a:d1:5f:d6:c3:72:e7:d9:90: 4b:b7:3c:a0:33:f5:ed:50:61:0c:f1:d0:b5:84:29:49:a8:31: 3d:07:f2:c5:d1:3a:3f:4e:4d:31:37:cd:cc:04:26:72:90:c8: 00:77:99:16:f3:91:56:ee:9a:47:26:61:0c:f0:d2:6a:04:69: 63:06:28:f7:1c:a7:34:95:ea:b7:a6:95:bf:b4:fe:17:33:07: 28:88:e0:d2:6d:84:d9:58:56:89:f1:16:41:37:84:16:3b:f3: de:29:3c:ea:f7:67:0a:09:33:69:4b:21:73:6e:ef:2f:77:15: e3:a9:30:1b:23:9d:5c:83:0f:57:06:85:02:4c:67:6f:2c:40: 2e:2f:a5:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEQ1ODExMC8GA1UEBRMoMTgxMDFDQjg0NTg3MDEyMzVDM0YxMzMzOUFFNUE5REIz Qzc1QjI0MDAeFw0yNTA1MTUwNjU1NDJaFw0yNTA1MjIwNjU1NDJaMBgxFjAUBgNV BAMTDTY4MjU4ZmVlLTYwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmhTQD+otdZ6QKx+Cuh0YpLBhjXm2tBWUIHVqDsp7F/WDGUVOgSWvLHew5mzv MrZ/ufvr0DikqrVFPb6znkPIc/v1oU0fPrGakaywGkPIiDWTdzATbXz83gNdeXJR E7aSnT0KhBzvAhNkVE1xSsPR68uzLrLR66qF+3NGxJl5A2NRmnpXxLF85aRP7T2r I9v62g6tfdHg5WQBRmn2k+4MW9ig57L6fAUQOy/Cp1anpptYJzh0/q7dOj+i6pxx 3/GS2pg2bSviLuv2ih2orvpJIAsnxeZnH8OZ4be/t8ZlHBcF7Xq8RDU81vwZ3Y9E V7aylkmDGeUKsgshNZhN7Kh1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQlxFahEL 1QHJT+Yzu3xues8qUDcwHwYDVR0jBBgwFoAUGBAcuEWHASNcPxMzmuWp2zx1skAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RDU4LzQ0QzczRkQ2RTgy MjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0JBY3VFV0hBU05jUHhNem11V3Ayengxc2tBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RDU4LzQ0QzczRkQ2RTgyMjExRUZBODk3M0Y4NEM0RjlBRTAyL0dCQWN1RVdIQVNO Y1B4TXptdVdwMnp4MXNrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyiolf8p7yCoDjItI7itHAL1q66Sdk7o85y6es0bRw6KdLTTYjttBYB HWLT3kqNQ5t0IY9BxIorgOybrUjxBS06eKCfIH4hcnW4ECc1ZYVQnw01CKSaChph 8dCDEjJPzuF8+hRo6KcLF0H8besJnEOZmtf0SGrRX9bDcufZkEu3PKAz9e1QYQzx 0LWEKUmoMT0H8sXROj9OTTE3zcwEJnKQyAB3mRbzkVbumkcmYQzw0moEaWMGKPcc pzSV6remlb+0/hczByiI4NJthNlYVonxFkE3hBY7894pPOr3ZwoJM2lLIXNu7y93 FeOpMBsjnVyDD1cGhQJMZ28sQC4vpes= -----END CERTIFICATE-----Generated at Fri May 16 20:53:41 2025 by rpki-client