$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: oJeFDwUnw3CtBV3HeR+BVi+ut7vN9JUU3CSv69g9PZc= Subject key identifier: 1A:9A:7B:F4:B4:AC:16:EB:5E:EF:EF:E6:98:62:4A:B9:6C:F2:56:27 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 3486 Signing time: Wed 14 May 2025 14:21:58 +0000 Manifest this update: Wed 14 May 2025 14:21:58 +0000 Manifest next update: Wed 21 May 2025 14:21:58 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: d/3UhTq+Lb/d2zsqa6j4v4tPxnXGfmhGMArOYm5jlBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: May 14 14:21:58 2025 GMT Not After : May 21 14:21:58 2025 GMT Subject: CN=6824a706-10cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:dc:cc:50:cb:81:f7:03:45:84:1d:2a:bf: ad:fc:78:22:b6:5a:3a:15:71:14:e4:1e:0e:2e:39: 20:ea:5a:73:e3:f7:c4:34:b9:83:b1:0b:f7:c3:4e: 14:15:54:5d:60:19:0a:73:02:e6:57:79:93:5b:c9: 51:29:d0:30:82:0d:5d:1e:ae:b3:b8:43:4e:80:22: fd:6a:df:bb:34:8c:70:76:23:e7:a5:3c:25:3c:11: ca:5c:53:e3:33:79:f8:21:f6:09:15:35:2b:6e:0d: 72:90:c7:db:32:65:c8:d6:86:a4:47:99:9d:05:0c: f3:63:8f:64:65:3f:d7:5f:ee:56:18:b1:82:6b:1f: f6:85:c9:26:b4:e6:3a:e3:2c:9b:74:2b:08:12:39: e7:90:2a:94:69:5f:e2:54:27:06:99:29:b9:9c:7b: 40:7b:f3:4f:49:ee:74:8b:76:b1:6e:b9:c2:f7:f8: 05:5b:c2:b1:de:98:96:5b:2e:4e:8e:b9:04:b4:d7: ca:93:7f:5f:fa:2b:0f:e4:1d:83:2f:69:ea:e8:42: 67:4f:a1:6e:a1:81:a3:04:5b:3f:88:d6:e3:22:e2: ed:c9:28:97:90:5a:f5:7d:c4:e3:2f:1e:94:b7:25: bb:e7:46:ef:b8:a9:19:26:05:c4:96:72:1a:8f:4c: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:7B:F4:B4:AC:16:EB:5E:EF:EF:E6:98:62:4A:B9:6C:F2:56:27 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7c:c4:6f:58:df:c7:75:dc:01:d0:e6:fa:cb:f1:e3:4f:71: 15:bf:da:a3:03:a0:de:68:11:e1:54:32:cf:0a:23:aa:94:9c: fc:41:d4:98:b3:fe:2e:0b:ac:6b:62:1d:32:ef:0f:2c:38:c7: cf:a6:be:28:c7:16:a3:36:e9:14:45:e0:0c:bc:f7:4d:cb:5a: 87:84:10:97:f0:85:1a:ef:d7:c0:eb:98:43:ce:e4:2d:9a:75: c3:57:ff:a8:f9:55:6f:4a:b9:b4:89:77:28:14:b3:98:a8:94: 6c:88:7f:c3:c7:41:e4:37:ef:9d:44:ba:66:9f:13:65:c9:76: 2f:e8:28:97:e8:e4:43:45:2f:ff:39:cb:cd:ad:95:f0:c5:87: 8a:92:3f:f7:c0:36:4f:e5:5b:dc:82:a1:d3:1d:c8:90:fd:85: a4:68:e6:81:c1:63:8f:02:89:ce:3b:bd:60:f3:bb:31:ea:79: da:3e:df:f2:ae:bb:89:04:38:64:8e:28:09:d3:1c:45:f2:5d: 42:61:d6:f5:ad:00:65:34:e3:95:f5:8f:28:2e:b1:a6:1e:e0: 25:57:45:a1:c9:85:0a:40:0f:f8:58:c0:9f:00:f4:33:0d:84: c3:ad:77:3a:66:ea:d7:e5:b7:40:e2:b6:23:e2:54:dd:0a:a1: 9c:a1:be:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUwNTE0MTQyMTU4WhcNMjUwNTIxMTQyMTU4WjAYMRYwFAYD VQQDEw02ODI0YTcwNi0xMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr97czFDLgfcDRYQdKr+t/Hgitlo6FXEU5B4OLjkg6lpz4/fENLmDsQv3w04U FVRdYBkKcwLmV3mTW8lRKdAwgg1dHq6zuENOgCL9at+7NIxwdiPnpTwlPBHKXFPj M3n4IfYJFTUrbg1ykMfbMmXI1oakR5mdBQzzY49kZT/XX+5WGLGCax/2hckmtOY6 4yybdCsIEjnnkCqUaV/iVCcGmSm5nHtAe/NPSe50i3axbrnC9/gFW8Kx3piWWy5O jrkEtNfKk39f+isP5B2DL2nq6EJnT6FuoYGjBFs/iNbjIuLtySiXkFr1fcTjLx6U tyW750bvuKkZJgXElnIaj0yrTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqae/S0 rBbrXu/v5phiSrls8lYnMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCifMRvWN/HddwB0Ob6y/HjT3EVv9qjA6DeaBHhVDLPCiOqlJz8QdSY s/4uC6xrYh0y7w8sOMfPpr4oxxajNukUReAMvPdNy1qHhBCX8IUa79fA65hDzuQt mnXDV/+o+VVvSrm0iXcoFLOYqJRsiH/Dx0HkN++dRLpmnxNlyXYv6CiX6ORDRS// OcvNrZXwxYeKkj/3wDZP5VvcgqHTHciQ/YWkaOaBwWOPAonOO71g87sx6nnaPt/y rruJBDhkjigJ0xxF8l1CYdb1rQBlNOOV9Y8oLrGmHuAlV0WhyYUKQA/4WMCfAPQz DYTDrXc6ZurX5bdA4rYj4lTdCqGcob4x -----END CERTIFICATE-----Generated at Thu May 15 13:32:09 2025 by rpki-client