$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft File: gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json) Hash identifier: 8Quk7/zQFIiRAKeljLMVhyNhfTTIwx7RP3Ur+1fAIj0= Subject key identifier: 49:DE:4C:B2:14:14:72:4A:3D:EE:5C:77:F1:3C:91:CD:DB:FF:D4:49 Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E Certificate issuer: /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft Manifest number: D1 Signing time: Thu 15 May 2025 05:01:18 +0000 Manifest this update: Thu 15 May 2025 05:01:18 +0000 Manifest next update: Thu 22 May 2025 05:01:18 +0000 Files and hashes: 1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: 9OMkeLxmza/J20kpz4nQS2t9r2MnT2IkwaCa+lvYX2w=) 2: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (hash: uKMqZt2qvb7h6qHUQjfxf24PgOE6TEH+nsPjU9i47sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E Validity Not Before: May 15 05:01:18 2025 GMT Not After : May 22 05:01:18 2025 GMT Subject: CN=6825751e-d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:f2:21:6e:33:bc:a9:52:50:d0:bb:0b:7c: 86:c3:92:b8:fa:34:a9:8f:e3:e6:d6:18:bc:8a:7a: 70:bb:5c:5a:37:36:4c:91:28:91:ef:c8:35:bf:ea: 46:70:3b:41:42:cf:1a:9c:0c:e4:53:a5:7d:e7:16: ea:9c:6f:91:a3:9b:0f:69:03:91:8e:5d:0b:e2:75: 57:79:50:d4:3e:71:5d:c7:04:91:0f:6f:0e:6a:e1: 58:e0:7a:68:1c:ad:bd:a1:9b:98:84:12:8a:37:4d: 0a:07:56:c0:6c:9c:07:0c:7a:f2:fe:56:0e:b3:9e: 66:67:9b:75:14:f7:54:01:51:f5:c7:b2:4d:8c:50: fc:ba:32:2b:49:53:30:05:ec:4b:7b:53:94:40:12: 79:8f:40:ec:54:ba:b7:09:f8:be:31:d5:71:71:f3: be:65:3c:20:75:65:83:78:09:33:54:96:6e:cf:cc: 6d:69:e3:90:3d:53:3c:65:7a:30:45:a7:a3:6f:d3: cb:94:49:31:e4:83:9a:de:e7:53:71:27:1d:f0:8b: a2:41:0e:82:1d:8a:26:12:df:44:d4:6a:37:cf:ad: e7:07:9a:cb:3d:26:df:7d:e9:bf:74:ce:f8:fe:e2: bd:27:52:5f:bb:fd:58:5c:d4:50:69:26:62:78:22: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:4C:B2:14:14:72:4A:3D:EE:5C:77:F1:3C:91:CD:DB:FF:D4:49 X509v3 Authority Key Identifier: keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f6:97:ce:04:17:91:c2:0b:0c:02:26:e4:ce:2c:95:28:ea: eb:6f:81:78:e3:78:9c:4b:bc:d2:b3:83:19:71:97:9a:62:75: 30:ff:d5:1c:17:b3:07:c4:34:99:95:10:c3:cd:62:84:e1:5b: 40:17:5b:3a:d1:37:af:e0:52:66:53:1f:80:4d:dd:f9:f1:7f: f2:56:b1:4d:5e:8f:5d:b5:7a:56:44:7c:36:24:25:3d:f5:36: 67:4a:d6:f9:39:97:45:90:c4:96:bb:86:43:f8:86:2d:12:b8: 42:11:0d:66:1d:8e:00:0f:1e:74:de:0c:21:53:4b:80:39:03: 63:94:50:50:62:9c:b9:78:b7:18:ab:bf:7e:03:a6:11:d3:a8: f7:c5:91:63:d3:28:3c:cc:6d:93:31:ee:6b:29:48:e3:96:6d: 8b:74:42:ca:ed:69:62:ed:56:af:9c:0a:fa:51:25:a4:e6:3f: 88:27:94:c6:66:e0:3b:58:fc:be:8a:6e:57:63:17:39:ea:d5: 26:2a:d1:49:75:bf:76:2e:51:33:ff:b4:b3:97:e8:32:f1:eb: c5:c3:18:a2:68:d4:55:6a:84:a1:b3:17:78:25:2b:1f:d0:f7: da:a1:0d:c2:09:fd:65:22:a0:76:69:c3:d9:4b:35:40:89:1b: f0:d7:df:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwOEYxMTAvBgNVBAUTKDgyRTlDNjNCN0MyQzc5MDg3RDVBQjEwRTg5REQyOEEy RjdDNDlDM0UwHhcNMjUwNTE1MDUwMTE4WhcNMjUwNTIyMDUwMTE4WjAYMRYwFAYD VQQDEw02ODI1NzUxZS1kNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNryIW4zvKlSUNC7C3yGw5K4+jSpj+Pm1hi8inpwu1xaNzZMkSiR78g1v+pG cDtBQs8anAzkU6V95xbqnG+Ro5sPaQORjl0L4nVXeVDUPnFdxwSRD28OauFY4Hpo HK29oZuYhBKKN00KB1bAbJwHDHry/lYOs55mZ5t1FPdUAVH1x7JNjFD8ujIrSVMw BexLe1OUQBJ5j0DsVLq3Cfi+MdVxcfO+ZTwgdWWDeAkzVJZuz8xtaeOQPVM8ZXow Raejb9PLlEkx5IOa3udTcScd8IuiQQ6CHYomEt9E1Go3z63nB5rLPSbffem/dM74 /uK9J1Jfu/1YXNRQaSZieCJKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEneTLIU FHJKPe5cd/E8kc3b/9RJMB8GA1UdIwQYMBaAFILpxjt8LHkIfVqxDondKKL3xJw+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA4Ri8yQzE0RUExMEY2 NjAxMUVFOUM4OEREMUZDNEY5QUUwMi9ndW5HTzN3c2VRaDlXckVPaWQwb292ZkVu RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d1bkdPM3dzZVFoOVdyRU9pZDBvb3ZmRW5ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA4Ri8yQzE0RUExMEY2NjAxMUVFOUM4OEREMUZDNEY5QUUwMi9ndW5HTzN3c2VR aDlXckVPaWQwb292ZkVuRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC09pfOBBeRwgsMAibkziyVKOrrb4F443icS7zSs4MZcZeaYnUw/9Uc F7MHxDSZlRDDzWKE4VtAF1s60Tev4FJmUx+ATd358X/yVrFNXo9dtXpWRHw2JCU9 9TZnStb5OZdFkMSWu4ZD+IYtErhCEQ1mHY4ADx503gwhU0uAOQNjlFBQYpy5eLcY q79+A6YR06j3xZFj0yg8zG2TMe5rKUjjlm2LdELK7Wli7VavnAr6USWk5j+IJ5TG ZuA7WPy+im5XYxc56tUmKtFJdb92LlEz/7Szl+gy8evFwxiiaNRVaoShsxd4JSsf 0PfaoQ3CCf1lIqB2acPZSzVAiRvw19+1 -----END CERTIFICATE-----Generated at Sat May 17 03:28:02 2025 by rpki-client