$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: H/w7JBfwV2F0skGy+NY5aM7TF/3Vn67XTsezBkyoubU= Subject key identifier: 15:14:71:F9:0F:A2:CB:E6:F4:56:10:53:5D:F8:B3:C7:48:64:A4:AB Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 0603 Signing time: Mon 12 May 2025 22:28:17 +0000 Manifest this update: Mon 12 May 2025 22:28:16 +0000 Manifest next update: Mon 19 May 2025 22:28:16 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: EmtOe3yjbPzISTNL6ZziVTnHwPzmSEJrIlXDkBxN23g=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: May 12 22:28:16 2025 GMT Not After : May 19 22:28:16 2025 GMT Subject: CN=68227601-1fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:c2:9c:d3:59:e3:03:1a:0a:70:8a:dd:8d: 93:95:a6:3c:3f:7a:43:84:11:b7:8c:78:b8:f6:28: ce:ce:4d:6f:b5:8f:0a:55:c0:ef:2c:70:69:06:f0: 96:a9:f6:e2:ef:8c:61:a1:24:b5:cc:54:5e:12:05: eb:d7:6a:78:03:9a:c3:03:22:25:93:c3:9a:4d:7b: e2:c6:c0:30:09:42:9c:f1:65:02:06:7f:c3:c5:fb: f3:95:dd:e9:7b:17:39:50:67:36:8d:0d:7e:5a:65: 78:fb:73:30:ba:65:aa:0a:b8:d0:19:64:89:c7:46: 08:0f:43:c2:50:96:81:1c:b3:83:65:a1:4c:ec:7e: cd:50:f5:ef:7d:35:7d:8d:78:01:a5:68:b8:3b:1e: 80:da:ea:96:8a:e7:49:24:a9:9f:a4:4e:93:44:41: 62:b0:c0:a8:d8:9e:08:5c:56:45:9c:a8:59:c6:86: 11:b1:51:3f:31:06:4f:53:a4:ba:f0:4e:cc:4e:a3: b9:00:78:9d:56:00:f3:09:ff:bf:39:0a:3f:40:d0: c0:3b:9f:ad:4b:91:44:7e:81:2d:6d:22:9e:7d:b8: 36:53:a7:a9:65:b3:8a:86:6d:82:3c:91:5d:fb:06: f8:4f:a3:1d:49:e1:0f:a3:aa:3b:16:7e:0e:90:e1: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:71:F9:0F:A2:CB:E6:F4:56:10:53:5D:F8:B3:C7:48:64:A4:AB X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:13:92:e5:ac:db:3f:0f:7a:f0:5c:6f:75:27:19:02:f8: 54:84:0a:e7:5c:82:d6:db:84:5c:b7:ac:92:20:ab:bb:f2:f9: 4c:de:a6:51:ef:95:a8:6c:05:02:95:2d:7c:88:ce:7e:88:70: 08:26:1c:d1:88:68:ce:0a:cd:95:d6:aa:d3:8e:c0:00:84:a6: 25:ec:dc:f7:a3:14:e8:7b:1d:02:57:b3:69:16:d8:a7:58:20: 9f:74:ea:ca:77:41:b7:ff:e6:b4:f1:4b:f9:68:1f:aa:f3:90: 3b:95:9b:d3:bc:e0:c7:e6:d0:f2:e4:9d:03:6d:bc:bd:70:a9: ba:79:03:cd:b9:fc:66:72:70:e7:80:5b:2e:81:e9:b3:85:57: de:25:17:be:45:d7:2f:03:5a:f7:07:fa:72:4b:9c:57:d8:47: 1c:95:73:19:a1:0d:2e:6f:9d:fe:b2:13:df:ce:53:a1:0e:0e: 0a:e2:7c:d8:ff:fe:ec:3f:31:b1:9c:de:38:5d:52:ee:a1:61: f6:22:de:87:ce:b9:c3:60:ab:9f:83:60:f9:6e:6f:49:09:c0: bc:04:97:3f:c2:76:d2:9e:b5:9f:93:d6:0e:c4:78:2c:64:c7: dc:2f:d8:77:98:eb:6a:9a:b4:dc:d0:92:06:d5:ad:2b:97:63: 03:e7:a5:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUwNTEyMjIyODE2WhcNMjUwNTE5MjIyODE2WjAYMRYwFAYD VQQDEw02ODIyNzYwMS0xZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNHCnNNZ4wMaCnCK3Y2TlaY8P3pDhBG3jHi49ijOzk1vtY8KVcDvLHBpBvCW qfbi74xhoSS1zFReEgXr12p4A5rDAyIlk8OaTXvixsAwCUKc8WUCBn/Dxfvzld3p exc5UGc2jQ1+WmV4+3MwumWqCrjQGWSJx0YID0PCUJaBHLODZaFM7H7NUPXvfTV9 jXgBpWi4Ox6A2uqWiudJJKmfpE6TREFisMCo2J4IXFZFnKhZxoYRsVE/MQZPU6S6 8E7MTqO5AHidVgDzCf+/OQo/QNDAO5+tS5FEfoEtbSKefbg2U6epZbOKhm2CPJFd +wb4T6MdSeEPo6o7Fn4OkOEanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUUcfkP osvm9FYQU134s8dIZKSrMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvOhOS5azbPw968FxvdScZAvhUhArnXILW24Rct6ySIKu78vlM3qZR 75WobAUClS18iM5+iHAIJhzRiGjOCs2V1qrTjsAAhKYl7Nz3oxToex0CV7NpFtin WCCfdOrKd0G3/+a08Uv5aB+q85A7lZvTvODH5tDy5J0Dbby9cKm6eQPNufxmcnDn gFsugemzhVfeJRe+RdcvA1r3B/pyS5xX2EcclXMZoQ0ub53+shPfzlOhDg4K4nzY //7sPzGxnN44XVLuoWH2It6HzrnDYKufg2D5bm9JCcC8BJc/wnbSnrWfk9YOxHgs ZMfcL9h3mOtqmrTc0JIG1a0rl2MD56W8 -----END CERTIFICATE-----Generated at Wed May 14 14:53:59 2025 by rpki-client