$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: a49BaXzno4voXovrAMhCXM45fMicU0rnlbT0m8GxhDI= Subject key identifier: B0:E6:92:BB:0F:91:7C:32:1B:86:49:44:3D:E5:02:F5:8A:67:62:69 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: C5 Signing time: Fri 09 May 2025 04:50:53 +0000 Manifest this update: Fri 09 May 2025 04:50:52 +0000 Manifest next update: Fri 16 May 2025 04:50:52 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: 2IMMs4Z+xy5utXPi58hzDDYhfZE/pwXBGrheqK7RG/I=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: May 9 04:50:52 2025 GMT Not After : May 16 04:50:52 2025 GMT Subject: CN=681d89ad-32c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:fc:18:13:a3:eb:c2:73:0c:c3:5b:b1:ef: 3f:48:ab:ed:6e:41:ee:af:3f:ee:35:4d:f2:66:24: a7:40:e9:8d:eb:40:43:5d:bf:a7:da:9c:af:28:07: 18:39:3d:a9:af:e6:c4:4b:06:9c:27:5d:45:fe:9e: 48:df:39:3c:dc:cb:95:ce:25:8f:71:1c:00:88:88: 31:4b:5c:1e:ae:2d:7d:a0:74:f0:13:f0:68:1d:28: c2:f1:7c:95:b5:80:1c:c5:18:68:ab:5c:8a:21:dc: 0a:1c:5e:c4:15:a8:40:a8:29:e4:cd:d4:62:84:f1: 38:1e:a4:c0:22:48:ee:cb:39:13:97:24:b4:be:3c: a6:77:a8:89:82:05:36:51:e4:40:25:3e:4f:85:c0: f6:aa:33:fc:a5:70:03:e2:a0:9b:85:ef:37:5a:75: 02:e2:17:ca:f6:bf:a3:74:fa:3e:87:c9:73:26:a8: 97:82:7e:2c:5f:2d:64:d1:4b:4a:10:63:f2:b5:2e: 62:f1:23:67:e4:2b:14:8b:63:03:66:80:3f:44:3d: bd:36:07:0b:ba:b4:18:df:08:fa:7e:b9:2c:00:8d: ee:77:42:b1:6a:e9:3e:17:64:60:15:45:fc:37:27: da:5d:43:cf:d1:1b:4d:c1:65:7a:c7:ec:96:2c:cc: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:92:BB:0F:91:7C:32:1B:86:49:44:3D:E5:02:F5:8A:67:62:69 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:1e:4a:a4:90:02:d9:34:19:4d:1b:15:6d:da:eb:23:a0: 8b:5a:e8:b9:f0:16:f6:55:59:e0:fc:93:ce:6c:92:85:3d:0b: 9f:4a:d5:c9:21:cc:09:92:3f:77:a2:f7:db:17:77:36:bb:78: 3a:74:f5:70:47:fc:09:68:b8:1d:2a:6f:9c:b2:8c:13:87:be: 6a:0f:2e:a6:64:01:7c:14:bf:95:c9:de:3c:82:35:d1:c5:c3: b4:c7:ee:fb:dc:b5:d8:75:a5:9d:3b:f1:ce:c6:4c:4c:b3:ff: 94:b9:6b:37:aa:d5:e7:25:7d:40:48:f6:33:f2:be:5f:d5:23: 14:40:e3:b3:60:40:0f:2c:cc:a1:d2:ba:b9:b3:e3:62:ff:2e: 38:10:95:53:b7:54:33:ed:f0:73:a7:ce:4e:bb:ee:22:de:e3: 8f:52:3d:9c:62:37:d6:99:77:27:1c:37:15:de:7c:4c:75:63: 3c:da:44:f8:d0:0c:56:6e:b5:38:d5:f2:cc:b2:8d:2a:41:35: 23:4f:e4:75:88:c6:81:0e:7d:56:ad:f1:2b:03:a3:cd:0d:14: 7e:e8:86:79:46:3e:5f:5a:d6:2a:62:cc:5c:6d:ce:cb:b8:4d: cf:71:36:71:30:1b:ca:c5:aa:5e:7f:81:96:dc:0d:55:5c:d1: 2c:6b:51:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUwNTA5MDQ1MDUyWhcNMjUwNTE2MDQ1MDUyWjAYMRYwFAYD VQQDEw02ODFkODlhZC0zMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNn8GBOj68JzDMNbse8/SKvtbkHurz/uNU3yZiSnQOmN60BDXb+n2pyvKAcY OT2pr+bESwacJ11F/p5I3zk83MuVziWPcRwAiIgxS1weri19oHTwE/BoHSjC8XyV tYAcxRhoq1yKIdwKHF7EFahAqCnkzdRihPE4HqTAIkjuyzkTlyS0vjymd6iJggU2 UeRAJT5PhcD2qjP8pXAD4qCbhe83WnUC4hfK9r+jdPo+h8lzJqiXgn4sXy1k0UtK EGPytS5i8SNn5CsUi2MDZoA/RD29NgcLurQY3wj6frksAI3ud0Kxauk+F2RgFUX8 NyfaXUPP0RtNwWV6x+yWLMya4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDmkrsP kXwyG4ZJRD3lAvWKZ2JpMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVFx5KpJAC2TQZTRsVbdrrI6CLWui58Bb2VVng/JPObJKFPQufStXJ IcwJkj93ovfbF3c2u3g6dPVwR/wJaLgdKm+csowTh75qDy6mZAF8FL+Vyd48gjXR xcO0x+773LXYdaWdO/HOxkxMs/+UuWs3qtXnJX1ASPYz8r5f1SMUQOOzYEAPLMyh 0rq5s+Ni/y44EJVTt1Qz7fBzp85Ou+4i3uOPUj2cYjfWmXcnHDcV3nxMdWM82kT4 0AxWbrU41fLMso0qQTUjT+R1iMaBDn1WrfErA6PNDRR+6IZ5Rj5fWtYqYsxcbc7L uE3PcTZxMBvKxapef4GW3A1VXNEsa1F1 -----END CERTIFICATE-----Generated at Fri May 9 23:53:10 2025 by rpki-client