$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: T/1gPDl2YUQbiYmthHit9UTbaZe8ThAE9cTk8u0C5OY= Subject key identifier: 31:A3:F4:E2:2C:6E:87:01:BB:08:37:35:84:0F:19:6C:AD:CE:02:75 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C15 Signing time: Mon 12 May 2025 18:30:32 +0000 Manifest this update: Mon 12 May 2025 18:30:31 +0000 Manifest next update: Mon 19 May 2025 18:30:31 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: gxyGfUYCCem4O0PRFJqTabfGrxcoSVqm48/WPREWeTU=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: E0+Wetfx26FkfR/4N1Ow0BnaKFJugSEUCFgfURwthKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: May 12 18:30:31 2025 GMT Not After : May 19 18:30:31 2025 GMT Subject: CN=68223e48-2480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:6d:32:cf:60:28:8e:03:f5:36:f5:7e:76: 18:46:6e:71:20:3e:d7:19:a8:d0:b9:7d:c0:85:4a: d3:a7:07:19:dc:61:fb:80:85:6a:94:c7:1b:19:d2: e0:51:92:0b:c9:01:f1:93:f0:a6:39:df:9a:79:b1: 67:98:6e:e4:08:0f:6e:15:7b:d2:94:e7:37:9f:4b: cd:df:71:46:39:58:5c:5a:e7:80:fe:bb:b1:68:55: 06:be:53:6f:10:c3:06:5b:5d:22:91:99:a7:aa:23: 20:d7:33:ab:3f:1e:f4:fd:28:e1:84:1b:e7:0c:5b: 3e:51:dc:8b:8d:c5:45:26:bc:5c:59:ac:15:6d:94: 8b:4b:e3:51:ae:80:9d:c2:7a:3a:cf:4f:04:2b:b3: 46:b0:aa:88:c0:4e:1a:a6:02:1a:7e:16:09:64:1a: 4b:a5:63:2e:6f:01:97:4c:0f:e5:10:f0:3b:b0:bc: 67:b7:94:e1:3a:da:fe:15:0d:ac:11:b5:41:ae:67: 93:7f:c3:52:9d:e1:db:b3:dc:98:e7:21:85:ac:a0: 88:4a:b5:e2:25:04:4c:42:72:2b:9f:e1:5e:f6:c9: 63:45:54:89:22:44:dd:41:0a:8c:4d:2b:de:0d:90: 30:7d:26:e7:2b:56:2d:e5:dc:9b:5e:e9:9f:0f:14: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:F4:E2:2C:6E:87:01:BB:08:37:35:84:0F:19:6C:AD:CE:02:75 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ff:fc:89:9a:10:3f:8c:c5:75:32:76:f7:3b:2d:2a:4f:63: 75:0b:2d:e2:cb:04:2b:d3:ea:64:af:d4:ad:ac:f0:b3:51:c5: 84:ec:78:51:68:b1:0e:17:ce:27:62:b0:0b:40:c1:51:9d:9f: 1c:d7:39:79:ed:9e:94:4e:b8:93:44:b5:b5:49:7a:67:eb:05: 4c:44:5a:23:4b:7a:a7:2a:f5:b2:df:37:f6:de:1b:75:f7:d7: 26:be:36:43:6d:86:fb:6e:dc:db:bd:d0:c8:65:2a:84:9d:34: 95:fd:8c:cc:b0:d2:99:f7:a6:cf:11:5f:a5:83:6e:3e:6c:1d: 63:55:08:1e:e9:48:b2:b0:fd:68:a4:62:78:61:83:bd:e9:a9: 44:b2:84:7b:c4:b2:51:09:3e:45:f2:71:29:9c:b1:7f:4e:39: ba:e9:3e:da:53:ca:73:65:fe:06:fd:43:df:86:98:3a:ef:db: 48:24:e5:1f:07:6a:ce:18:4c:72:f7:85:62:19:81:c7:ba:c7: 28:e0:32:e6:9b:c7:77:9b:da:33:22:48:a4:62:a7:20:6d:e2: 39:e8:a6:ee:ad:00:5b:6b:c0:3e:c4:e3:f9:4c:2f:36:87:fc: af:84:2d:2c:ed:6b:e7:de:5c:7e:b1:fa:22:a9:6b:2a:92:c6: be:12:a8:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwNTEyMTgzMDMxWhcNMjUwNTE5MTgzMDMxWjAYMRYwFAYD VQQDEw02ODIyM2U0OC0yNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMVtMs9gKI4D9Tb1fnYYRm5xID7XGajQuX3AhUrTpwcZ3GH7gIVqlMcbGdLg UZILyQHxk/CmOd+aebFnmG7kCA9uFXvSlOc3n0vN33FGOVhcWueA/ruxaFUGvlNv EMMGW10ikZmnqiMg1zOrPx70/SjhhBvnDFs+UdyLjcVFJrxcWawVbZSLS+NRroCd wno6z08EK7NGsKqIwE4apgIafhYJZBpLpWMubwGXTA/lEPA7sLxnt5ThOtr+FQ2s EbVBrmeTf8NSneHbs9yY5yGFrKCISrXiJQRMQnIrn+Fe9sljRVSJIkTdQQqMTSve DZAwfSbnK1Yt5dybXumfDxQHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGj9OIs bocBuwg3NYQPGWytzgJ1MB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo//yJmhA/jMV1Mnb3Oy0qT2N1Cy3iywQr0+pkr9StrPCzUcWE7HhR aLEOF84nYrALQMFRnZ8c1zl57Z6UTriTRLW1SXpn6wVMRFojS3qnKvWy3zf23ht1 99cmvjZDbYb7btzbvdDIZSqEnTSV/YzMsNKZ96bPEV+lg24+bB1jVQge6UiysP1o pGJ4YYO96alEsoR7xLJRCT5F8nEpnLF/Tjm66T7aU8pzZf4G/UPfhpg679tIJOUf B2rOGExy94ViGYHHusco4DLmm8d3m9ozIkikYqcgbeI56KburQBba8A+xOP5TC82 h/yvhC0s7Wvn3lx+sfoiqWsqksa+Eqh6 -----END CERTIFICATE-----Generated at Wed May 14 09:33:35 2025 by rpki-client