$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: 64rfsQZP8MCxZVaNG8S2Z8L2ipRHjckrISH6okMz3KY= Subject key identifier: A3:BC:6F:11:74:E8:EE:77:B9:C6:ED:0E:E5:1C:CC:81:77:44:E3:92 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 01C9 Signing time: Sat 17 May 2025 02:38:15 +0000 Manifest this update: Sat 17 May 2025 02:38:15 +0000 Manifest next update: Sat 24 May 2025 02:38:15 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: fwi7cp7AjtsqMNM3Rw0PHgy6ujS21HHZ5HZ9dbgmC5s=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: May 17 02:38:15 2025 GMT Not After : May 24 02:38:15 2025 GMT Subject: CN=6827f697-ae7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:37:13:b5:9d:82:35:55:95:ae:af:50:b3: de:52:3d:66:71:f4:aa:32:4f:45:be:ee:cc:e3:78: 28:38:e7:49:44:1b:15:34:a8:8f:c1:86:85:f2:20: bf:20:08:e4:9f:a8:f0:07:c2:8b:4e:8c:a2:ea:79: 22:d5:4d:48:ee:61:23:73:fb:f3:54:25:ba:6e:bb: 0d:1e:06:20:d3:78:57:1c:44:57:02:fe:d2:b9:99: 79:b4:bc:bb:3e:74:ad:5d:65:ae:27:31:bf:f4:64: 0c:4f:26:6f:4a:6b:da:20:5c:51:b5:23:84:3b:07: 7a:b9:d0:22:b0:3a:f9:60:ca:10:2b:c7:26:dd:84: 43:d6:f2:b2:16:10:e9:f4:45:d9:01:e6:10:73:f2: 4b:69:8a:3e:c6:69:1c:87:1c:32:b2:ee:d3:f7:c3: 7c:3e:a4:c3:c6:fe:13:6a:4f:1d:d9:d5:d3:00:83: e9:bd:63:be:f5:d3:8a:90:4c:fd:97:45:3c:8b:43: e3:d4:01:d0:62:c5:f4:25:10:dc:cb:27:50:3b:a6: c5:15:5d:f8:11:40:3a:d4:7c:b4:e9:ef:66:18:cb: 7c:af:ba:2a:ec:1a:64:57:ff:89:5e:c7:39:da:82: 99:e2:2c:84:af:da:7e:14:4a:9e:77:88:d2:ea:f8: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:6F:11:74:E8:EE:77:B9:C6:ED:0E:E5:1C:CC:81:77:44:E3:92 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c1:30:d1:f4:36:f3:33:ec:de:90:4f:39:4c:62:4a:7e:88: 84:d9:36:87:22:89:02:bb:8f:ac:e2:73:dd:43:a3:6e:27:05: 63:3e:24:c1:13:45:56:b1:d2:77:da:26:9e:b8:e8:f2:d4:97: ce:8a:4a:a9:ff:04:f1:bc:e4:73:a9:55:75:8e:9b:f2:93:5f: 73:40:b1:88:f6:55:b2:92:6d:fb:14:67:91:e2:21:2a:32:c7: f2:2d:ce:09:f2:42:88:49:f1:38:21:e4:21:c1:b6:67:91:ea: d8:b8:15:fa:b8:e5:79:21:6f:2d:24:bd:3a:ae:78:c4:a9:da: b9:43:72:68:eb:38:e2:09:43:15:ad:ac:c8:97:e5:16:99:f1: 17:36:2a:23:54:07:7c:1b:39:b5:41:e2:d6:d6:3d:0a:f9:21: 12:e5:07:84:49:e4:da:50:5a:5e:e8:b6:1c:2c:5d:98:50:db: 9d:50:0c:59:0f:ea:f3:7b:e1:5d:f5:50:c2:ac:42:0b:36:d8: 87:bb:3f:c3:de:a1:6b:34:4a:70:cb:05:42:7a:57:8b:af:ec: 74:0c:91:f5:26:6b:31:cc:4a:29:b8:fb:2c:a5:41:e5:f2:d4: 6b:8b:3f:d3:c4:79:5b:8e:c7:c1:e1:84:8c:76:6f:3b:d4:9c: e6:96:58:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwNTE3MDIzODE1WhcNMjUwNTI0MDIzODE1WjAYMRYwFAYD VQQDEw02ODI3ZjY5Ny1hZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofs3E7WdgjVVla6vULPeUj1mcfSqMk9Fvu7M43goOOdJRBsVNKiPwYaF8iC/ IAjkn6jwB8KLToyi6nki1U1I7mEjc/vzVCW6brsNHgYg03hXHERXAv7SuZl5tLy7 PnStXWWuJzG/9GQMTyZvSmvaIFxRtSOEOwd6udAisDr5YMoQK8cm3YRD1vKyFhDp 9EXZAeYQc/JLaYo+xmkchxwysu7T98N8PqTDxv4Tak8d2dXTAIPpvWO+9dOKkEz9 l0U8i0Pj1AHQYsX0JRDcyydQO6bFFV34EUA61Hy06e9mGMt8r7oq7BpkV/+JXsc5 2oKZ4iyEr9p+FEqed4jS6vj/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO8bxF0 6O53ucbtDuUczIF3ROOSMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6wTDR9DbzM+zekE85TGJKfoiE2TaHIokCu4+s4nPdQ6NuJwVjPiTB E0VWsdJ32iaeuOjy1JfOikqp/wTxvORzqVV1jpvyk19zQLGI9lWykm37FGeR4iEq MsfyLc4J8kKISfE4IeQhwbZnkerYuBX6uOV5IW8tJL06rnjEqdq5Q3Jo6zjiCUMV razIl+UWmfEXNiojVAd8Gzm1QeLW1j0K+SES5QeESeTaUFpe6LYcLF2YUNudUAxZ D+rze+Fd9VDCrEILNtiHuz/D3qFrNEpwywVCeleLr+x0DJH1JmsxzEopuPsspUHl 8tRriz/TxHlbjsfB4YSMdm871Jzmllhr -----END CERTIFICATE-----Generated at Sat May 17 16:56:12 2025 by rpki-client