$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: kpwdQ57rhwrmeNDVLkEHJ+w9SaJK2u8vhJgPr/CK5Vo= Subject key identifier: C3:6A:19:A0:1B:AF:19:90:B2:1D:6D:A6:77:C8:E4:E2:7D:EC:94:E2 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 14B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 14AF Signing time: Wed 14 May 2025 16:56:27 +0000 Manifest this update: Wed 14 May 2025 16:56:26 +0000 Manifest next update: Wed 21 May 2025 16:56:26 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: cB4eupueFb8rJtrBifTmgkth9P3/LRFzDF+bha6r84A=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5304 (0x14b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: May 14 16:56:26 2025 GMT Not After : May 21 16:56:26 2025 GMT Subject: CN=6824cb3a-b302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:cf:a9:84:b5:f5:ec:9f:0b:5e:24:7c:49: f4:e1:fb:31:48:63:9f:78:ce:02:23:6a:c4:4f:c3: 13:87:5e:8b:59:f3:13:60:01:b7:f4:9a:8b:f3:6f: 01:27:3c:1f:19:19:93:f4:f0:c6:09:24:a1:3d:7d: d7:18:ba:9b:4e:52:29:6d:f9:a8:7f:33:39:a6:4f: dd:c8:12:2e:7f:b7:9f:38:9f:d5:8c:8b:84:fb:8d: 50:37:da:da:68:62:40:ec:9e:7b:72:84:e0:f7:61: 19:71:e0:bd:68:76:39:60:36:36:c3:c8:43:42:41: 06:73:3d:d5:12:1f:a4:13:5c:bb:41:f0:77:48:58: a5:36:99:25:57:4b:0d:88:3a:18:53:7f:d7:01:51: 2d:fc:b6:48:73:34:6a:f8:60:bb:9d:b3:55:85:74: 2e:ed:48:f9:37:eb:e0:56:a6:18:a8:e3:fb:ce:00: c6:40:93:a4:29:11:24:12:5a:d1:d3:37:3e:4b:1f: ee:d0:a7:ab:f3:8f:d7:e5:7e:ae:87:d3:e5:af:68: 1a:52:7a:d2:f8:ce:aa:1d:29:6e:80:ab:74:c9:f9: ad:94:3b:88:1f:ce:87:66:3a:06:fa:40:6d:3a:28: d5:f0:6b:e6:56:a9:e2:70:56:76:04:76:d7:1a:99: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6A:19:A0:1B:AF:19:90:B2:1D:6D:A6:77:C8:E4:E2:7D:EC:94:E2 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:1d:90:f1:a2:31:87:30:e9:0a:ff:0c:03:39:8c:a7:ae: 7a:44:ff:33:59:83:c1:d1:24:f9:a3:14:23:b2:15:aa:ae:6c: e9:90:87:09:08:35:84:36:16:96:79:24:27:72:ad:04:23:75: 7a:8a:69:7a:50:c8:d4:36:4a:16:fd:47:0e:59:6b:d6:0c:16: 11:6e:ff:ea:fb:e6:31:7b:9d:20:7d:4a:7c:57:f2:8c:40:58: ec:86:c4:c7:6e:5e:d5:83:ed:e1:c4:c3:fc:88:62:52:82:87: 16:11:d4:51:a5:49:f6:a3:d2:88:6f:46:dc:c1:73:f2:4e:92: 23:1f:8c:a1:52:32:a2:94:76:c3:27:92:35:4b:3c:57:1b:b6: 16:54:c6:ba:b8:a5:42:42:61:80:84:02:b3:68:89:fc:6c:62: 00:fb:9d:60:e5:2f:f1:4f:6a:68:db:80:01:4f:5d:9b:df:eb: 57:02:9b:13:08:8c:de:7a:2f:41:be:d4:df:7f:5e:70:fc:32: 71:0b:ee:25:c3:2f:b4:52:6e:4c:41:58:0f:17:08:a0:d6:85: 97:4f:01:e9:6e:c3:52:11:ff:ec:62:67:8c:6c:37:7e:c3:10: c3:47:e9:d2:18:2b:e1:b2:96:ee:23:0c:56:f9:e2:34:72:6d: 02:0c:e6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUwNTE0MTY1NjI2WhcNMjUwNTIxMTY1NjI2WjAYMRYwFAYD VQQDEw02ODI0Y2IzYS1iMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TTPqYS19eyfC14kfEn04fsxSGOfeM4CI2rET8MTh16LWfMTYAG39JqL828B JzwfGRmT9PDGCSShPX3XGLqbTlIpbfmofzM5pk/dyBIuf7efOJ/VjIuE+41QN9ra aGJA7J57coTg92EZceC9aHY5YDY2w8hDQkEGcz3VEh+kE1y7QfB3SFilNpklV0sN iDoYU3/XAVEt/LZIczRq+GC7nbNVhXQu7Uj5N+vgVqYYqOP7zgDGQJOkKREkElrR 0zc+Sx/u0Ker84/X5X6uh9Plr2gaUnrS+M6qHSlugKt0yfmtlDuIH86HZjoG+kBt OijV8GvmVqnicFZ2BHbXGpn8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNqGaAb rxmQsh1tpnfI5OJ97JTiMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMh2Q8aIxhzDpCv8MAzmMp656RP8zWYPB0ST5oxQjshWqrmzpkIcJ CDWENhaWeSQncq0EI3V6iml6UMjUNkoW/UcOWWvWDBYRbv/q++Yxe50gfUp8V/KM QFjshsTHbl7Vg+3hxMP8iGJSgocWEdRRpUn2o9KIb0bcwXPyTpIjH4yhUjKilHbD J5I1SzxXG7YWVMa6uKVCQmGAhAKzaIn8bGIA+51g5S/xT2po24ABT12b3+tXApsT CIzeei9BvtTff15w/DJxC+4lwy+0Um5MQVgPFwig1oWXTwHpbsNSEf/sYmeMbDd+ wxDDR+nSGCvhspbuIwxW+eI0cm0CDOZP -----END CERTIFICATE-----Generated at Thu May 15 16:05:09 2025 by rpki-client