$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: ck1tf97nO4jOA75/trcoR+zYFS3Go2x9mdoblHz3zWY= Subject key identifier: 0E:A4:95:9E:98:A5:80:6D:85:81:E7:EA:A7:01:12:0C:A8:F0:AC:22 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: E9 Signing time: Sat 03 May 2025 04:43:11 +0000 Manifest this update: Sat 03 May 2025 04:43:10 +0000 Manifest next update: Sat 10 May 2025 04:43:10 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: dngwksnxTAjL3vtSA0NNM6UNvhciVlacihzOjvcWNSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: May 3 04:43:10 2025 GMT Not After : May 10 04:43:10 2025 GMT Subject: CN=68159edf-80af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4e:62:68:89:c2:bb:43:57:ae:38:6a:49:d4: 38:62:96:03:0d:e1:66:08:7e:23:76:58:96:37:38: a4:6f:0d:b5:ca:3d:13:4f:d5:c4:dd:36:31:44:6c: 02:d0:3e:81:b6:1c:6a:c7:8f:90:63:76:4a:1e:3c: 88:f7:18:01:7d:68:1b:af:76:e9:35:3d:88:c7:9a: 23:86:ea:fa:67:99:1f:92:02:1b:56:ba:80:37:b9: 58:fc:59:72:89:4b:83:a0:bc:10:3c:32:2b:ae:44: 43:e3:a6:5e:f2:f4:81:72:8f:a1:43:bb:03:bc:d1: 15:46:4a:e5:3e:db:42:46:6f:53:14:4b:1c:5d:cf: 77:7a:fe:b4:11:f0:a0:85:be:b5:76:87:58:88:af: 11:37:1a:13:a5:df:19:7b:08:e5:75:4d:e0:dd:d6: e4:ca:8b:48:2f:71:97:5e:ba:d4:de:07:6a:72:c4: 6b:b8:d1:b8:48:ab:7f:83:6f:56:0a:11:fe:8e:94: 23:61:16:d8:22:76:94:05:cb:0d:59:f4:1c:09:32: a6:58:39:1c:57:04:d2:f7:bf:07:05:a2:03:db:34: 30:0f:a3:ac:39:43:95:d1:72:0f:d1:8a:53:ea:54: 56:47:2a:ca:ab:81:fa:b6:db:fe:dd:e9:be:28:4b: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:95:9E:98:A5:80:6D:85:81:E7:EA:A7:01:12:0C:A8:F0:AC:22 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:48:5c:1f:8e:4f:4c:1e:bc:81:b3:25:58:2b:13:e2:e2:69: 14:28:71:f7:30:ea:7a:db:b0:e0:56:89:1e:af:79:da:24:e7: 8d:5d:5f:71:7f:06:c8:6c:16:1f:bf:da:7e:05:9f:18:0a:ff: 57:9c:1b:97:46:0e:a7:27:b2:bc:ee:01:26:c7:df:d8:04:dc: 06:0c:69:30:2b:72:9b:dd:62:a2:ad:16:e5:0b:83:e0:ae:c6: e8:1c:0b:7f:75:6d:18:fd:a1:9c:0b:4d:8b:b7:cd:2e:e3:69: 9d:38:15:2a:81:47:a3:4b:e5:81:fc:e6:1e:40:fc:49:e5:08: 29:cc:93:b8:c6:b6:22:89:cb:5f:bd:13:86:9b:45:ae:28:a6: 67:e3:90:b7:9a:ef:55:bf:99:91:69:0f:a8:5a:14:88:65:88: 00:73:18:e6:fa:4f:dd:74:26:81:09:43:fb:50:08:ae:9d:f7: d8:50:1d:ec:11:c8:77:f6:c6:16:1b:b8:e3:53:f5:5e:86:7d: 02:bf:57:4f:63:67:bd:91:65:52:20:3c:bb:c2:60:df:da:03: 72:de:b3:53:c7:31:85:27:c8:8c:e9:51:01:8b:28:0c:b8:5b: 61:10:3d:9b:98:26:59:d4:52:34:7c:7b:46:be:51:c6:06:b5: a5:1f:ac:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUwNTAzMDQ0MzEwWhcNMjUwNTEwMDQ0MzEwWjAYMRYwFAYD VQQDEw02ODE1OWVkZi04MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U5iaInCu0NXrjhqSdQ4YpYDDeFmCH4jdliWNzikbw21yj0TT9XE3TYxRGwC 0D6Bthxqx4+QY3ZKHjyI9xgBfWgbr3bpNT2Ix5ojhur6Z5kfkgIbVrqAN7lY/Fly iUuDoLwQPDIrrkRD46Ze8vSBco+hQ7sDvNEVRkrlPttCRm9TFEscXc93ev60EfCg hb61dodYiK8RNxoTpd8ZewjldU3g3dbkyotIL3GXXrrU3gdqcsRruNG4SKt/g29W ChH+jpQjYRbYInaUBcsNWfQcCTKmWDkcVwTS978HBaID2zQwD6OsOUOV0XIP0YpT 6lRWRyrKq4H6ttv+3em+KEv9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6klZ6Y pYBthYHn6qcBEgyo8KwiMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVSFwfjk9MHryBsyVYKxPi4mkUKHH3MOp627DgVoker3naJOeNXV9x fwbIbBYfv9p+BZ8YCv9XnBuXRg6nJ7K87gEmx9/YBNwGDGkwK3Kb3WKirRblC4Pg rsboHAt/dW0Y/aGcC02Lt80u42mdOBUqgUejS+WB/OYeQPxJ5QgpzJO4xrYiictf vROGm0WuKKZn45C3mu9Vv5mRaQ+oWhSIZYgAcxjm+k/ddCaBCUP7UAiunffYUB3s Ech39sYWG7jjU/Vehn0Cv1dPY2e9kWVSIDy7wmDf2gNy3rNTxzGFJ8iM6VEBiygM uFthED2bmCZZ1FI0fHtGvlHGBrWlH6za -----END CERTIFICATE-----Generated at Mon May 5 02:40:19 2025 by rpki-client