$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft File: GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json) Hash identifier: pVg5K+96irDp0oy6IdctRMsrKQrT64t8Aicjrtt1Iy4= Subject key identifier: 14:9B:F5:5B:24:78:93:0D:6D:78:34:D9:8B:00:33:DA:61:CE:56:7A Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft Manifest number: 0787 Signing time: Mon 12 May 2025 21:09:43 +0000 Manifest this update: Mon 12 May 2025 21:09:43 +0000 Manifest next update: Mon 19 May 2025 21:09:43 +0000 Files and hashes: 1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: JoIRXmBcDxVMgVWCD2xwzOxlh6Bb5d5tvE5w9D5Jgqw=) 2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: ioUnn9Sg1+1Knr69k6HvCYNkUAJj3SY+tArXzL4hN4U=) 3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 7BAdUQMZjuuZNgHFdOha+SYqXFalxz5F+SZR0XZCmpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: May 12 21:09:43 2025 GMT Not After : May 19 21:09:43 2025 GMT Subject: CN=68226397-2b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:82:ad:58:de:cd:d8:ba:40:d5:b4:0f:83: 18:2a:b0:7b:4e:8e:5d:30:b9:a3:78:52:d7:a3:52: aa:3a:fc:d3:39:d7:d4:b2:39:0b:63:93:21:85:a3: 95:46:aa:7a:d4:43:84:7f:66:d3:29:3a:03:20:73: f5:48:70:81:4f:84:1f:70:ce:74:04:32:33:5d:38: 39:4e:2f:c0:ab:62:5a:ce:ed:ce:a1:12:aa:72:19: 14:84:c9:43:bb:f7:57:76:23:58:aa:b0:62:99:0b: 2b:26:76:45:26:b1:1b:73:34:eb:5f:70:6d:d1:ba: a6:6f:ab:ed:27:e7:aa:39:52:80:1c:5e:da:14:c7: 00:b5:cd:cf:c0:52:ee:f9:2e:7c:9e:11:fb:ee:84: 1b:39:de:45:35:e6:0f:0d:72:70:f3:46:b2:a8:db: 8b:8f:03:c3:69:e9:2e:9a:bb:f5:b6:47:47:20:05: 0b:c7:a4:2c:b5:de:03:70:ff:2c:af:8a:87:f8:e5: d5:5b:84:36:7c:5d:7a:c0:6c:cb:d3:0b:5a:e5:45: 3c:c0:e5:96:a8:c7:d9:07:da:ca:a9:f3:bf:43:68: b6:4c:dd:df:4e:37:55:f6:b1:b2:4e:63:96:67:fb: 67:1a:63:59:ec:ce:08:b7:b5:aa:d4:b3:b7:61:1a: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9B:F5:5B:24:78:93:0D:6D:78:34:D9:8B:00:33:DA:61:CE:56:7A X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:85:de:49:6f:90:69:f4:73:49:2a:60:e5:4c:a6:c5:62:77: 7e:2d:04:c3:27:2a:1f:cf:47:49:62:f2:7a:04:92:ac:cc:85: f8:47:c3:4d:55:77:69:94:63:e2:72:21:e8:20:12:0e:a7:64: 17:3a:35:e5:50:18:3b:18:eb:de:f7:95:dc:67:07:63:14:68: 85:86:b0:a2:3b:81:36:a5:b6:d9:f0:59:9a:38:3c:57:87:54: 68:4e:ea:2a:79:bd:07:3e:a1:21:13:cd:78:da:00:51:ce:d2: 56:dd:74:ab:e8:79:da:0d:60:60:e8:cf:c8:26:52:00:23:64: b6:4a:12:0d:ed:de:73:2c:f8:a1:a1:a6:68:93:67:5d:40:43: f6:10:a8:7b:21:61:5a:a3:fc:db:2c:9a:2e:b7:eb:3f:bd:8e: 50:fe:11:b6:77:c2:8c:44:f5:d7:26:4a:f2:bc:0f:c5:7b:4b: 89:d3:05:94:d9:c5:49:37:f3:7c:19:9f:74:c7:f5:cc:50:8b: 28:c9:f7:53:6f:3a:32:e6:9a:96:57:cc:1d:85:db:99:c6:11: cb:6c:d5:c6:a4:f2:38:a3:01:f8:f2:c2:e9:05:a7:44:1e:76: 81:b5:e5:3e:5d:73:f6:83:67:b3:9a:9b:e9:7b:f5:8d:af:5e: 58:58:6c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjUwNTEyMjEwOTQzWhcNMjUwNTE5MjEwOTQzWjAYMRYwFAYD VQQDEw02ODIyNjM5Ny0yYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZqCrVjezdi6QNW0D4MYKrB7To5dMLmjeFLXo1KqOvzTOdfUsjkLY5MhhaOV Rqp61EOEf2bTKToDIHP1SHCBT4QfcM50BDIzXTg5Ti/Aq2Jazu3OoRKqchkUhMlD u/dXdiNYqrBimQsrJnZFJrEbczTrX3Bt0bqmb6vtJ+eqOVKAHF7aFMcAtc3PwFLu +S58nhH77oQbOd5FNeYPDXJw80ayqNuLjwPDaekumrv1tkdHIAULx6Qstd4DcP8s r4qH+OXVW4Q2fF16wGzL0wta5UU8wOWWqMfZB9rKqfO/Q2i2TN3fTjdV9rGyTmOW Z/tnGmNZ7M4It7Wq1LO3YRqoMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSb9Vsk eJMNbXg02YsAM9phzlZ6MB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUE3Ri9FOTY0QUY0QzBCNTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VC dnNqSW4wVUJsNHdKSURhN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7hd5Jb5Bp9HNJKmDlTKbFYnd+LQTDJyofz0dJYvJ6BJKszIX4R8NN VXdplGPiciHoIBIOp2QXOjXlUBg7GOve95XcZwdjFGiFhrCiO4E2pbbZ8FmaODxX h1RoTuoqeb0HPqEhE8142gBRztJW3XSr6HnaDWBg6M/IJlIAI2S2ShIN7d5zLPih oaZok2ddQEP2EKh7IWFao/zbLJout+s/vY5Q/hG2d8KMRPXXJkryvA/Fe0uJ0wWU 2cVJN/N8GZ90x/XMUIsoyfdTbzoy5pqWV8wdhduZxhHLbNXGpPI4owH48sLpBadE HnaBteU+XXP2g2ezmpvpe/WNr15YWGxo -----END CERTIFICATE-----Generated at Tue May 13 19:28:43 2025 by rpki-client