$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: jDWMHQdvWba4fvrJxbejMVEFUG+6UoU7fMXJjzfWbZ4= Subject key identifier: 4F:7C:C2:D3:D2:1D:2A:EC:9C:67:D0:4E:5A:71:87:F5:AC:90:2E:41 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 01EC Signing time: Tue 13 May 2025 01:52:56 +0000 Manifest this update: Tue 13 May 2025 01:52:56 +0000 Manifest next update: Tue 20 May 2025 01:52:56 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: b6YWGP3ksQ3lAfDL/VKNW4oMRX+SWrXTyxmoRZXm9pg=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: May 13 01:52:56 2025 GMT Not After : May 20 01:52:56 2025 GMT Subject: CN=6822a5f8-5778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:1a:07:67:db:e0:0e:dc:e7:42:ce:9a:e3: e9:bd:45:cb:25:42:ba:8f:65:08:fc:de:a6:06:90: 2a:c4:6c:7f:e0:4e:3a:69:83:14:f6:de:29:3b:12: 38:b8:62:be:d1:b2:a5:b5:39:bb:76:b6:ad:7a:12: d6:29:a0:5e:25:89:c3:1d:ce:fa:3a:92:8c:4c:70: 4e:7c:71:c9:7e:35:ac:f4:29:e2:9c:c9:75:13:83: 7f:f7:ea:07:ba:64:a8:83:15:ba:fd:2b:6a:8a:7a: 91:58:36:42:d9:c0:00:b6:36:4f:cc:4a:70:13:db: 43:37:33:52:48:c2:56:cf:d8:93:a5:9f:de:26:23: 30:3a:ce:f3:5d:1e:70:f1:c5:9a:fb:fd:db:5f:51: 79:fc:8c:f1:46:d2:4d:19:ef:99:96:71:78:f6:7d: 0a:f1:41:5b:89:54:32:a3:80:7e:6c:d4:87:e2:e0: 1d:b2:16:37:3f:f3:32:9e:b7:62:50:2b:93:58:e3: 37:22:9e:dc:a7:29:80:9d:16:60:7c:e7:4c:35:5b: 83:fe:dd:a5:a5:13:19:20:de:5b:93:c1:80:8c:9e: c0:6f:ad:55:68:40:36:19:9d:98:69:2c:6d:df:88: 3c:35:c2:c0:d4:14:db:bc:99:f9:f0:89:e1:c9:ca: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:C2:D3:D2:1D:2A:EC:9C:67:D0:4E:5A:71:87:F5:AC:90:2E:41 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b1:80:5c:5c:32:5e:80:5f:23:29:04:14:a4:7c:b2:42:b9: 98:14:73:f4:8c:f6:5b:39:8e:19:ba:1b:b0:f0:c5:71:80:91: f7:10:d5:7a:7f:1d:00:81:e0:c4:19:34:da:af:a7:56:7d:bc: 29:15:28:74:0b:61:27:f9:df:0f:c0:51:fb:c2:c2:db:29:8f: 39:e1:72:5c:69:bb:73:35:ac:e1:e6:2d:4b:93:89:9f:94:8c: fe:12:06:75:85:78:4c:97:45:df:aa:79:a5:83:9f:d9:18:1d: 3d:3f:f4:3e:f6:d2:c4:99:e0:d5:8d:a9:4f:7d:05:f1:df:94: 46:d2:56:00:13:92:f5:24:1f:7b:0b:8c:bb:39:be:e8:7f:8b: bb:a9:b1:f1:b1:c3:bd:a3:5f:a4:05:c4:df:7e:9b:a2:24:15: 33:09:78:f1:3a:fb:11:5c:6f:70:f4:c2:76:ad:c0:f7:1c:56: d3:a2:71:55:5e:39:1d:38:3a:2c:e3:44:1d:97:a4:df:65:6a: 6a:01:ef:8e:7c:68:83:91:aa:6f:59:29:61:bb:3a:50:99:81: b2:c2:20:17:4e:fe:2c:ec:cc:e2:de:f6:c0:9b:c1:f5:1d:45: 6a:d4:3f:f6:5a:eb:8e:27:e3:72:2d:5d:26:a9:50:7b:d2:71: 20:c6:ed:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUwNTEzMDE1MjU2WhcNMjUwNTIwMDE1MjU2WjAYMRYwFAYD VQQDEw02ODIyYTVmOC01Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhYaB2fb4A7c50LOmuPpvUXLJUK6j2UI/N6mBpAqxGx/4E46aYMU9t4pOxI4 uGK+0bKltTm7dratehLWKaBeJYnDHc76OpKMTHBOfHHJfjWs9CninMl1E4N/9+oH umSogxW6/StqinqRWDZC2cAAtjZPzEpwE9tDNzNSSMJWz9iTpZ/eJiMwOs7zXR5w 8cWa+/3bX1F5/IzxRtJNGe+ZlnF49n0K8UFbiVQyo4B+bNSH4uAdshY3P/Mynrdi UCuTWOM3Ip7cpymAnRZgfOdMNVuD/t2lpRMZIN5bk8GAjJ7Ab61VaEA2GZ2YaSxt 34g8NcLA1BTbvJn58InhycrfKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE98wtPS HSrsnGfQTlpxh/WskC5BMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPsYBcXDJegF8jKQQUpHyyQrmYFHP0jPZbOY4Zuhuw8MVxgJH3ENV6 fx0AgeDEGTTar6dWfbwpFSh0C2En+d8PwFH7wsLbKY854XJcabtzNazh5i1Lk4mf lIz+EgZ1hXhMl0Xfqnmlg5/ZGB09P/Q+9tLEmeDVjalPfQXx35RG0lYAE5L1JB97 C4y7Ob7of4u7qbHxscO9o1+kBcTffpuiJBUzCXjxOvsRXG9w9MJ2rcD3HFbTonFV XjkdODos40Qdl6TfZWpqAe+OfGiDkapvWSlhuzpQmYGywiAXTv4s7Mzi3vbAm8H1 HUVq1D/2WuuOJ+NyLV0mqVB70nEgxu3N -----END CERTIFICATE-----Generated at Tue May 13 21:57:13 2025 by rpki-client