$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft File: GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json) Hash identifier: 6v+BBt1OBCJxdZCqSDTQp1zQWjO7HWRrgOE20jGQ4kM= Subject key identifier: C8:32:4B:58:8D:00:BC:58:2B:B1:BF:C4:A0:7F:02:DD:9D:1C:A1:D9 Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 Certificate issuer: /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft Manifest number: 03A5 Signing time: Thu 15 May 2025 00:45:18 +0000 Manifest this update: Thu 15 May 2025 00:45:17 +0000 Manifest next update: Thu 22 May 2025 00:45:17 +0000 Files and hashes: 1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: choNdeUnY8ALO3B3t802ap7OkGx5S2axunpWWXw7eJg=) 2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: lfHIywQz4YgqCkW/d8PSzpBeHa1aTAqSamGmUbb/c3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926 Validity Not Before: May 15 00:45:17 2025 GMT Not After : May 22 00:45:17 2025 GMT Subject: CN=6825391e-4a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:c0:30:19:ad:09:0a:d2:d2:2f:46:16:10: 99:89:d3:53:c6:32:ca:63:7d:59:50:5c:48:70:8e: ea:18:1c:1b:f3:92:bf:c2:ae:6a:b0:ec:91:83:09: a3:12:a0:76:24:27:bd:49:44:bd:70:3f:75:81:d9: 26:d4:96:df:ba:61:69:e8:8a:3e:2c:d1:a3:77:20: 46:95:4c:9c:81:ca:f4:61:ac:10:27:89:70:4a:96: 9b:32:ef:00:c9:70:55:97:5d:b5:35:54:a1:d3:ec: 91:0c:98:29:16:d1:a3:69:ca:eb:ba:51:b1:7e:42: 3b:b4:a0:dc:98:84:5d:c9:b1:29:ab:9b:cb:55:19: 47:ea:85:93:2b:ef:3d:c1:80:ae:78:cf:c9:f7:f9: d5:0b:79:2b:4f:4c:1b:98:0c:d5:23:81:52:7f:dc: 3a:46:94:ff:f7:12:78:9d:f9:fd:16:a8:8b:24:f2: fc:c3:a4:01:eb:e4:c4:27:dc:9f:c9:69:3c:a2:6f: 69:62:68:fe:fe:45:f9:4f:90:96:89:4f:96:be:08: 60:cb:9e:9b:48:1a:78:ad:f7:bf:03:21:f2:b5:1f: 70:02:ba:79:1c:9f:af:37:79:1b:7a:5a:46:e8:6c: dc:25:eb:e1:2b:cf:ce:15:47:bc:6e:fc:a7:8d:04: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:4B:58:8D:00:BC:58:2B:B1:BF:C4:A0:7F:02:DD:9D:1C:A1:D9 X509v3 Authority Key Identifier: keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3b:d0:5f:12:0c:5a:4f:d6:c0:12:38:66:c3:1c:0c:1e:07: e4:15:37:5a:1e:82:93:50:9f:3e:60:00:9f:50:81:89:b8:05: 67:20:5b:28:54:79:ef:82:db:90:38:b7:ce:45:39:0c:8d:35: 67:12:a4:a5:62:fe:91:b4:0a:99:e9:df:15:c1:d0:96:0f:e5: 48:8e:b1:3b:90:b4:d9:07:ed:67:d5:55:56:a7:58:8a:99:e0: dd:12:4e:c4:f1:b5:f3:e5:3b:c7:f2:b0:6a:f8:59:9f:0a:9e: 8e:20:ce:c4:ea:36:40:93:8b:ae:83:c5:51:54:c8:f6:0e:6d: 4f:c5:c0:5c:1d:79:82:f1:cb:c2:e8:79:61:57:9f:05:36:bf: 04:97:24:c0:3f:4b:f3:5a:e0:2b:14:67:4d:71:de:0b:08:9f: 9b:c2:ea:a9:d3:cb:07:20:2b:0d:7e:a8:6a:8d:7f:fc:7b:a3: 73:cd:3b:35:40:fb:82:a3:a6:33:b2:4f:3b:98:f1:9e:bb:72: 53:12:1f:86:e8:ac:74:2d:92:2d:a9:1c:35:a3:cf:d5:ce:ee: b1:3a:6e:1e:93:dc:5b:ba:19:7e:a1:d0:64:d1:05:83:1f:d1: 7f:22:69:07:7a:8c:73:ab:c5:23:d6:6a:52:1f:6e:01:e3:64: f5:bc:e7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0NEMxMTAvBgNVBAUTKDE4RDI0MTY5QjAyNTRFQTdGMjk5NDNDNTA1RTJCNTkz MUFGQUI5MjYwHhcNMjUwNTE1MDA0NTE3WhcNMjUwNTIyMDA0NTE3WjAYMRYwFAYD VQQDEw02ODI1MzkxZS00YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kPAMBmtCQrS0i9GFhCZidNTxjLKY31ZUFxIcI7qGBwb85K/wq5qsOyRgwmj EqB2JCe9SUS9cD91gdkm1JbfumFp6Io+LNGjdyBGlUycgcr0YawQJ4lwSpabMu8A yXBVl121NVSh0+yRDJgpFtGjacrrulGxfkI7tKDcmIRdybEpq5vLVRlH6oWTK+89 wYCueM/J9/nVC3krT0wbmAzVI4FSf9w6RpT/9xJ4nfn9FqiLJPL8w6QB6+TEJ9yf yWk8om9pYmj+/kX5T5CWiU+Wvghgy56bSBp4rfe/AyHytR9wArp5HJ+vN3kbelpG 6GzcJevhK8/OFUe8bvynjQRhqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgyS1iN ALxYK7G/xKB/At2dHKHZMB8GA1UdIwQYMBaAFBjSQWmwJU6n8plDxQXitZMa+rkm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQ0Qy80QjVCMjlBQTk0 NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRxZnltVVBGQmVLMWt4cjZ1 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOSkJhYkFsVHFmeW1VUEZCZUsxa3hyNnVTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQ0Qy80QjVCMjlBQTk0NTgxMUVDOTkwNTdBM0FDNEY5QUUwMi9HTkpCYWJBbFRx ZnltVVBGQmVLMWt4cjZ1U1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7O9BfEgxaT9bAEjhmwxwMHgfkFTdaHoKTUJ8+YACfUIGJuAVnIFso VHnvgtuQOLfORTkMjTVnEqSlYv6RtAqZ6d8VwdCWD+VIjrE7kLTZB+1n1VVWp1iK meDdEk7E8bXz5TvH8rBq+FmfCp6OIM7E6jZAk4uug8VRVMj2Dm1PxcBcHXmC8cvC 6HlhV58FNr8ElyTAP0vzWuArFGdNcd4LCJ+bwuqp08sHICsNfqhqjX/8e6NzzTs1 QPuCo6Yzsk87mPGeu3JTEh+G6Kx0LZItqRw1o8/Vzu6xOm4ek9xbuhl+odBk0QWD H9F/ImkHeoxzq8Uj1mpSH24B42T1vOe8 -----END CERTIFICATE-----Generated at Thu May 15 08:21:26 2025 by rpki-client