$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: c8sVj3pMtWSNRLd3DsV41sy0YadylpZQpCyt6PkfmcM= Subject key identifier: 4E:FF:E8:EC:5C:09:11:6A:9D:9C:7A:24:0C:51:EE:39:1F:7D:E0:35 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 095D Signing time: Sat 10 May 2025 19:55:27 +0000 Manifest this update: Sat 10 May 2025 19:55:27 +0000 Manifest next update: Sat 17 May 2025 19:55:27 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: hJQ3R64TzrHUhU6dJnnEwpg0ZYkstaGWG4ZvUf+P6JY=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 10 19:55:27 2025 GMT Not After : May 17 19:55:27 2025 GMT Subject: CN=681faf2f-dc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:0b:a5:97:f7:35:a4:66:7d:bc:55:34:d4: f7:2b:84:b9:43:9a:f6:1e:da:32:76:0c:a8:27:34: cd:6f:e0:70:54:85:4f:f8:92:02:06:c6:11:a4:e7: cb:f3:09:bb:ad:64:94:66:bb:eb:61:ee:55:94:30: f7:5b:88:c7:d1:0f:6d:0b:83:18:35:13:ea:b8:d3: 72:b9:91:c2:9d:ff:c0:61:8d:77:dd:be:86:37:dd: a9:0b:57:2d:e2:c9:7d:14:77:c9:b2:90:30:93:c7: ae:80:d4:96:26:97:f9:93:97:e0:30:a8:27:07:1a: be:e5:e3:85:6a:0f:73:ef:6c:1a:05:8a:85:a2:e5: 2b:cb:52:6d:80:d1:64:8b:4e:46:33:f4:ed:0c:46: 5a:19:42:93:e1:3e:62:da:d3:79:11:63:0f:94:95: 27:57:e8:8e:b8:69:a0:79:1a:94:b1:02:fb:d3:58: ea:6c:a1:d1:27:61:e9:78:65:3b:f2:b4:57:e7:aa: ea:f9:3c:26:06:4e:c7:3b:00:d6:e9:30:ee:1c:39: 29:fa:9c:6c:75:f7:49:40:d3:8a:3f:6f:39:55:40: 24:06:19:4d:6f:06:75:d4:9a:33:7d:19:d7:0a:db: 62:be:95:c4:28:59:44:ea:17:f0:87:0e:94:56:81: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:E8:EC:5C:09:11:6A:9D:9C:7A:24:0C:51:EE:39:1F:7D:E0:35 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:28:dc:ea:49:0e:8f:c1:f0:9b:d3:15:93:01:6c:ed:1d:bf: 37:bd:58:1a:74:f6:ab:18:e9:14:3b:23:17:39:04:ee:59:6a: e8:43:f5:a7:66:79:ed:d7:29:fe:32:95:a5:16:51:4b:f9:50: 8f:3f:fd:5f:5b:5b:8c:7c:62:38:0e:b5:14:65:c4:4c:86:e1: aa:5e:43:ab:db:21:e4:a1:a6:ba:84:95:ae:a3:4d:0b:c7:ed: a1:02:38:1b:91:dc:5e:01:40:1f:0a:79:dd:63:75:b0:df:8d: d5:d6:74:cd:e7:a9:7d:3e:63:d6:44:25:86:4a:7b:3f:aa:71: 85:5b:87:7d:0f:8f:89:d4:10:8f:a3:7e:b6:8c:d0:0d:25:dc: 4f:43:ca:8e:12:cc:e0:be:60:9d:65:6c:6b:1c:b1:41:9d:19: 22:6c:65:e7:ee:60:b6:01:e3:f1:a8:5b:0d:2d:11:03:ae:cc: a8:ba:ca:92:d2:17:eb:5c:1c:84:a1:d8:47:97:50:f0:30:a1: bf:8f:53:75:25:5c:fb:33:fb:5e:3a:3e:81:ee:2c:8d:69:5d: 70:b9:2e:de:63:40:f6:1b:8e:06:18:35:69:a1:ce:16:42:4b: b4:8e:e0:2d:1b:d3:57:a3:ef:d1:9c:0d:dc:51:96:81:87:dc: 2f:ab:fa:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwNTEwMTk1NTI3WhcNMjUwNTE3MTk1NTI3WjAYMRYwFAYD VQQDEw02ODFmYWYyZi1kYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHcLpZf3NaRmfbxVNNT3K4S5Q5r2HtoydgyoJzTNb+BwVIVP+JICBsYRpOfL 8wm7rWSUZrvrYe5VlDD3W4jH0Q9tC4MYNRPquNNyuZHCnf/AYY133b6GN92pC1ct 4sl9FHfJspAwk8eugNSWJpf5k5fgMKgnBxq+5eOFag9z72waBYqFouUry1JtgNFk i05GM/TtDEZaGUKT4T5i2tN5EWMPlJUnV+iOuGmgeRqUsQL701jqbKHRJ2HpeGU7 8rRX56rq+TwmBk7HOwDW6TDuHDkp+pxsdfdJQNOKP285VUAkBhlNbwZ11JozfRnX CttivpXEKFlE6hfwhw6UVoHXlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7/6Oxc CRFqnZx6JAxR7jkffeA1MB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUKNzqSQ6PwfCb0xWTAWztHb83vVgadParGOkUOyMXOQTuWWroQ/Wn Znnt1yn+MpWlFlFL+VCPP/1fW1uMfGI4DrUUZcRMhuGqXkOr2yHkoaa6hJWuo00L x+2hAjgbkdxeAUAfCnndY3Ww343V1nTN56l9PmPWRCWGSns/qnGFW4d9D4+J1BCP o362jNANJdxPQ8qOEszgvmCdZWxrHLFBnRkibGXn7mC2AePxqFsNLREDrsyousqS 0hfrXByEodhHl1DwMKG/j1N1JVz7M/teOj6B7iyNaV1wuS7eY0D2G44GGDVpoc4W Qku0juAtG9NXo+/RnA3cUZaBh9wvq/oM -----END CERTIFICATE-----Generated at Sun May 11 19:02:46 2025 by rpki-client