$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft File: GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json) Hash identifier: 1Vps7ULWY6Zv9uijbFIv4OQ5DQbdiNFkL2GbOSGHeFM= Subject key identifier: BE:69:BC:FF:7C:7F:DB:EE:8F:BB:67:B2:01:E7:FE:A5:63:8A:1F:BE Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1F0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft Manifest number: 1EF7 Signing time: Sat 10 May 2025 15:58:01 +0000 Manifest this update: Sat 10 May 2025 15:58:01 +0000 Manifest next update: Sat 17 May 2025 15:58:01 +0000 Files and hashes: 1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: OWr075MSyJN35BzItIetdMQZuKRSquerbHsgafDHb8s=) 2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: N8CiTad7+YCKPe2opBHwCiq7VtSImphL9JYd7EN47KQ=) 3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7947 (0x1f0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Validity Not Before: May 10 15:58:01 2025 GMT Not After : May 17 15:58:01 2025 GMT Subject: CN=681f7789-d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:fc:38:f7:fd:b2:17:6b:6c:70:22:2b:30: 98:7d:90:ca:76:18:a9:66:03:16:de:bf:37:b6:88: dc:06:1b:b3:fd:21:e6:69:07:9b:ef:f4:0e:1c:1e: 98:5a:d3:41:f5:de:e7:42:ab:ae:04:86:35:d6:c2: 85:98:a7:ff:c3:fb:bc:44:b8:56:b2:8a:a0:9e:e5: 46:03:f4:5a:6d:97:13:35:99:e6:c6:86:dc:3a:27: 79:c3:92:a0:97:f3:ae:7f:cc:49:e7:30:49:f7:a6: c4:3d:48:63:78:7f:18:5d:f8:65:f0:e3:5f:10:5d: 81:d2:b7:92:6b:59:56:ab:32:1d:f1:6d:6b:54:69: 43:9e:6f:b4:c7:34:12:ef:94:b4:47:76:3f:69:bf: 7b:48:68:1d:62:e2:a8:bb:80:9d:b8:fd:9f:76:e4: ef:89:0e:7d:23:69:30:43:98:da:d0:13:c2:ce:73: 9f:40:0a:23:58:67:89:1f:11:62:c1:7d:5e:d8:0e: 16:6f:94:18:49:e0:0d:45:23:f5:6d:72:51:66:f6: d5:ce:9d:29:ca:01:fb:19:35:6e:06:ce:d3:ef:59: 14:8c:1e:c4:ed:5f:43:39:de:89:b5:b8:98:08:0e: 16:ea:21:5d:a5:73:94:22:21:18:7d:9c:60:61:5a: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:BC:FF:7C:7F:DB:EE:8F:BB:67:B2:01:E7:FE:A5:63:8A:1F:BE X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f9:e0:d5:d3:e7:8b:b1:7e:a7:19:16:b9:4f:86:41:0d:03: e0:26:dd:4f:f9:57:72:7e:64:23:fd:12:4b:46:36:4f:d5:c9: a1:31:05:c2:ec:95:f2:f2:3d:66:9d:9e:33:3f:ae:6c:2f:d1: a5:c1:43:1e:46:b2:8e:0b:5a:77:f3:dc:8b:85:d7:fd:4b:34: 19:ae:12:37:49:49:40:76:7e:78:1f:66:46:be:be:66:8e:34: 5b:5d:24:3f:9c:0c:f5:40:43:fd:8b:b1:dc:e6:6a:66:b5:cf: 19:d1:d6:cf:3e:dc:4c:24:2a:fe:bd:42:c0:7b:13:85:7e:b9: c0:c8:a7:86:3b:8b:b6:0d:8f:60:40:b1:0f:24:d8:11:41:10: c5:96:aa:83:09:86:37:28:49:77:84:d2:b3:ed:a7:bd:5b:8c: 3b:f0:51:48:d9:df:59:43:33:9a:2b:9a:2f:0b:bb:70:19:3c: 1d:5d:a2:f3:a9:a7:0d:46:07:21:97:b3:9d:73:ac:18:1d:c8: 70:eb:3b:d2:91:bf:0e:80:47:65:ac:80:4f:3d:5e:19:ba:cb: e5:e0:b4:89:e6:c7:3f:54:0e:0b:74:da:3b:66:7b:fe:b5:b6: 37:77:b5:3b:21:68:f0:05:ee:48:40:4c:96:c4:52:2f:b1:92: 31:21:3d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjUwNTEwMTU1ODAxWhcNMjUwNTE3MTU1ODAxWjAYMRYwFAYD VQQDEw02ODFmNzc4OS1kNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXL8OPf9shdrbHAiKzCYfZDKdhipZgMW3r83tojcBhuz/SHmaQeb7/QOHB6Y WtNB9d7nQquuBIY11sKFmKf/w/u8RLhWsoqgnuVGA/RabZcTNZnmxobcOid5w5Kg l/Ouf8xJ5zBJ96bEPUhjeH8YXfhl8ONfEF2B0reSa1lWqzId8W1rVGlDnm+0xzQS 75S0R3Y/ab97SGgdYuKou4CduP2fduTviQ59I2kwQ5ja0BPCznOfQAojWGeJHxFi wX1e2A4Wb5QYSeANRSP1bXJRZvbVzp0pygH7GTVuBs7T71kUjB7E7V9DOd6JtbiY CA4W6iFdpXOUIiEYfZxgYVoVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5pvP98 f9vuj7tnsgHn/qVjih++MB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+eDV0+eLsX6nGRa5T4ZBDQPgJt1P+VdyfmQj/RJLRjZP1cmhMQXC 7JXy8j1mnZ4zP65sL9GlwUMeRrKOC1p389yLhdf9SzQZrhI3SUlAdn54H2ZGvr5m jjRbXSQ/nAz1QEP9i7Hc5mpmtc8Z0dbPPtxMJCr+vULAexOFfrnAyKeGO4u2DY9g QLEPJNgRQRDFlqqDCYY3KEl3hNKz7ae9W4w78FFI2d9ZQzOaK5ovC7twGTwdXaLz qacNRgchl7Odc6wYHchw6zvSkb8OgEdlrIBPPV4Zusvl4LSJ5sc/VA4LdNo7Znv+ tbY3d7U7IWjwBe5IQEyWxFIvsZIxIT0l -----END CERTIFICATE-----Generated at Sun May 11 15:36:36 2025 by rpki-client