$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: rmY+TPd7M35QZVaRocDJ10pc+YX10f6VGMQV9AAjh10= Subject key identifier: AD:A6:46:3E:69:3D:84:94:BF:97:51:00:67:E0:8C:A2:8E:A0:A7:F8 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 013A Signing time: Tue 13 May 2025 03:36:15 +0000 Manifest this update: Tue 13 May 2025 03:36:15 +0000 Manifest next update: Tue 20 May 2025 03:36:15 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: nVDUxzuR9VcVuambPwW8Uuravt4fZDixyyVFebmftxY=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: LEXF9HRhajbu2nLL2GIh97gP542YxXzyNibweT+ZgSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: May 13 03:36:15 2025 GMT Not After : May 20 03:36:15 2025 GMT Subject: CN=6822be2f-bb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:7f:da:94:dc:d7:c6:ef:1f:be:c0:47:74: 6f:45:0c:c9:6c:20:22:40:e5:86:15:22:3a:cd:53: 28:cf:8b:7f:e9:ac:f6:86:39:64:67:51:ac:b6:1a: 53:c3:1f:03:2f:01:b6:a8:19:8c:4a:0f:62:33:00: 83:19:77:84:1a:d9:2b:92:8f:ba:ae:0a:0f:e4:f9: bd:f0:e3:db:65:a8:f8:04:6c:1a:15:50:66:26:ba: 3f:4a:a4:23:f2:ba:0d:bb:0d:f9:07:4c:7b:f0:6a: 9b:ee:97:db:4f:d7:72:8b:d1:99:88:dc:84:75:21: f1:d1:50:af:28:1a:6e:89:1c:f3:a0:81:e1:c8:9b: 81:95:2b:6e:85:8d:87:d6:a2:c4:b1:48:c4:0f:46: f4:17:8a:ac:86:54:0f:39:a8:af:c0:3b:26:cf:81: 0d:a6:17:3f:83:84:94:cd:d4:8c:36:f0:91:00:17: 72:b5:37:dd:db:73:12:c2:b3:1f:4a:cf:61:50:00: ac:eb:e8:74:cd:7e:bd:3b:33:04:c7:35:27:f9:75: f9:15:30:90:d6:d8:ad:7e:84:0c:e2:6c:69:d9:c3: 5c:dc:e1:27:72:3c:33:14:04:c5:b2:b1:79:c6:df: a2:b5:4d:f2:f4:c4:14:20:84:21:9e:08:2f:1a:bf: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A6:46:3E:69:3D:84:94:BF:97:51:00:67:E0:8C:A2:8E:A0:A7:F8 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:36:c1:f0:cc:1c:bb:9e:27:b4:f3:3e:7c:79:75:ae:83: 34:1c:3c:d2:25:21:78:bf:5d:5b:49:44:ef:1a:64:ec:b8:d9: bc:fb:b6:a0:1d:6f:7d:32:b0:b3:fb:cc:f3:5a:dd:5e:55:31: b8:1a:10:01:d3:23:6b:c8:b9:74:99:1c:62:1a:30:76:94:0f: 7e:ab:fb:70:9d:e6:57:ad:4a:64:e0:2f:d8:c5:bf:d1:ea:99: d8:fb:76:38:a9:36:66:dc:7c:e3:c4:37:4c:51:7a:26:64:b9: e6:94:7d:51:a7:d0:30:95:d3:08:4b:a0:5d:6f:65:14:38:f6: 42:7a:35:3b:88:8c:33:1f:55:d4:09:be:03:4f:86:cc:5c:eb: cd:9f:21:54:61:a0:96:dd:77:39:f9:db:4a:67:31:7f:09:1c: 3b:eb:44:fb:c6:f4:7f:43:66:2b:aa:f3:7e:65:f9:ee:f6:bb: 52:0f:b5:ab:1f:8c:f2:30:54:63:1e:88:82:55:6d:47:bc:0d: 82:27:ee:98:a2:ea:e8:30:70:1a:77:51:14:bb:22:13:58:1c: b4:3a:9a:88:4d:5c:91:a1:e3:58:f9:79:d1:a0:03:7d:23:08: 38:bc:5c:11:40:f7:2c:80:60:04:4f:37:30:f4:eb:a3:ab:d5: 61:cf:95:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUwNTEzMDMzNjE1WhcNMjUwNTIwMDMzNjE1WjAYMRYwFAYD VQQDEw02ODIyYmUyZi1iYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMB/2pTc18bvH77AR3RvRQzJbCAiQOWGFSI6zVMoz4t/6az2hjlkZ1GsthpT wx8DLwG2qBmMSg9iMwCDGXeEGtkrko+6rgoP5Pm98OPbZaj4BGwaFVBmJro/SqQj 8roNuw35B0x78Gqb7pfbT9dyi9GZiNyEdSHx0VCvKBpuiRzzoIHhyJuBlStuhY2H 1qLEsUjED0b0F4qshlQPOaivwDsmz4ENphc/g4SUzdSMNvCRABdytTfd23MSwrMf Ss9hUACs6+h0zX69OzMExzUn+XX5FTCQ1titfoQM4mxp2cNc3OEncjwzFATFsrF5 xt+itU3y9MQUIIQhnggvGr9cCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2mRj5p PYSUv5dRAGfgjKKOoKf4MB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAefjbB8Mwcu54ntPM+fHl1roM0HDzSJSF4v11bSUTvGmTsuNm8+7ag HW99MrCz+8zzWt1eVTG4GhAB0yNryLl0mRxiGjB2lA9+q/twneZXrUpk4C/Yxb/R 6pnY+3Y4qTZm3HzjxDdMUXomZLnmlH1Rp9AwldMIS6Bdb2UUOPZCejU7iIwzH1XU Cb4DT4bMXOvNnyFUYaCW3Xc5+dtKZzF/CRw760T7xvR/Q2YrqvN+Zfnu9rtSD7Wr H4zyMFRjHoiCVW1HvA2CJ+6YouroMHAad1EUuyITWBy0OpqITVyRoeNY+XnRoAN9 Iwg4vFwRQPcsgGAETzcw9Oujq9Vhz5VB -----END CERTIFICATE-----Generated at Tue May 13 18:51:01 2025 by rpki-client