$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft File: gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json) Hash identifier: qn3JsN6CBH+mB3ynv7A+CWw9Z209amP/pSYFn3M/7ps= Subject key identifier: A2:EA:B4:7E:23:CC:65:40:B9:8A:E5:73:32:5D:92:9A:AA:D4:C2:47 Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft Manifest number: 0B24 Signing time: Wed 14 May 2025 19:21:02 +0000 Manifest this update: Wed 14 May 2025 19:21:01 +0000 Manifest next update: Wed 21 May 2025 19:21:01 +0000 Files and hashes: 1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: El3I/OntgVYJ3q2R05TSBsIzCKwUSAVPajftObOnr5k=) 2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg=) 3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: YABE0cos6VtRV6egJC6YTrl7tEuiiHleDpqVdQV913A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: May 14 19:21:01 2025 GMT Not After : May 21 19:21:01 2025 GMT Subject: CN=6824ed1d-a0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:a4:8e:1c:d3:cd:6c:12:d5:e3:a4:47:38: 8d:7a:c4:62:66:e6:af:a9:9b:8e:62:62:ce:5b:c7: 49:ff:72:62:c2:4a:b3:7b:2d:9f:2a:4b:dc:0d:ee: 93:85:c3:9e:64:f1:3d:e1:ac:c3:b9:95:4b:e2:c0: 46:68:10:cc:81:66:d4:2d:db:47:cd:9e:32:b1:65: 59:a5:13:1d:f0:37:d3:e4:75:ce:40:2c:c4:fa:fa: 35:b0:73:31:8f:3c:ad:41:91:43:8a:b3:2d:ac:b5: 4e:f8:a0:cf:ac:5a:8b:8c:cf:a9:59:51:09:f2:48: 9b:36:ff:4a:98:ad:9c:c9:54:58:99:aa:d1:41:e9: 16:17:7e:25:a6:f4:97:72:e5:bf:ca:b9:9b:6f:aa: 94:da:fa:c9:2f:de:57:54:ca:dc:26:04:bf:4f:45: b3:ac:2a:7d:07:91:bc:75:e8:ba:27:a3:0a:3a:be: 42:55:8a:4d:ee:a6:e4:d0:d9:68:ed:86:a1:aa:39: b6:a9:3d:df:98:2c:41:b7:14:35:82:73:e5:52:89: ef:11:f2:aa:d3:14:05:38:c4:da:e1:be:2b:87:f6: 62:91:59:9d:91:39:e8:46:4d:40:a1:69:12:65:ae: fa:3c:a8:0a:aa:6a:96:87:09:02:ef:c2:45:cb:54: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EA:B4:7E:23:CC:65:40:B9:8A:E5:73:32:5D:92:9A:AA:D4:C2:47 X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:11:59:13:f8:e9:c2:e3:45:46:43:8a:2f:2d:c6:34:39:79: 24:d9:ba:72:e0:31:5f:50:5b:ee:87:6e:49:95:b6:b1:ad:bd: 22:8d:14:35:0f:93:8e:7b:16:f7:3a:b6:96:1c:85:06:14:de: 39:47:14:83:a8:82:66:55:3b:41:23:05:d7:f5:1d:b9:1c:85: d1:f9:86:aa:d0:82:88:bc:b0:35:9a:3f:b7:57:ca:0a:a2:84: 04:5f:da:13:61:cf:e5:62:a8:57:ab:2d:f8:a4:c6:d5:cd:a4: e6:35:cb:a3:81:ae:3f:1b:f5:88:b0:c3:52:70:2e:4f:6c:1b: 5d:c4:89:cd:8d:cc:be:d3:50:88:69:2b:a1:d2:87:d5:91:4a: e1:c4:07:7c:39:e4:74:96:54:31:03:0b:fb:34:f3:5e:5e:2b: 89:28:4b:36:46:7c:b5:f8:87:04:59:24:63:b7:1a:38:2c:af: 35:e3:10:e3:77:8c:17:43:e0:90:12:39:63:b5:13:1f:68:86: 39:d9:6f:ea:0c:34:fb:75:47:6e:a2:68:27:65:71:3c:3b:7a: 7c:e6:cb:21:8d:9f:b9:90:77:38:6e:f0:70:1d:05:05:c9:4a: ce:92:85:72:32:d5:97:75:fd:07:9b:a1:b3:f5:14:25:11:75: 16:dc:47:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjUwNTE0MTkyMTAxWhcNMjUwNTIxMTkyMTAxWjAYMRYwFAYD VQQDEw02ODI0ZWQxZC1hMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwCkjhzTzWwS1eOkRziNesRiZuavqZuOYmLOW8dJ/3Jiwkqzey2fKkvcDe6T hcOeZPE94azDuZVL4sBGaBDMgWbULdtHzZ4ysWVZpRMd8DfT5HXOQCzE+vo1sHMx jzytQZFDirMtrLVO+KDPrFqLjM+pWVEJ8kibNv9KmK2cyVRYmarRQekWF34lpvSX cuW/yrmbb6qU2vrJL95XVMrcJgS/T0WzrCp9B5G8dei6J6MKOr5CVYpN7qbk0Nlo 7Yahqjm2qT3fmCxBtxQ1gnPlUonvEfKq0xQFOMTa4b4rh/ZikVmdkTnoRk1AoWkS Za76PKgKqmqWhwkC78JFy1QZVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLqtH4j zGVAuYrlczJdkpqq1MJHMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0 MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQEVkT+OnC40VGQ4ovLcY0OXkk2bpy4DFfUFvuh25Jlbaxrb0ijRQ1 D5OOexb3OraWHIUGFN45RxSDqIJmVTtBIwXX9R25HIXR+Yaq0IKIvLA1mj+3V8oK ooQEX9oTYc/lYqhXqy34pMbVzaTmNcujga4/G/WIsMNScC5PbBtdxInNjcy+01CI aSuh0ofVkUrhxAd8OeR0llQxAwv7NPNeXiuJKEs2Rny1+IcEWSRjtxo4LK814xDj d4wXQ+CQEjljtRMfaIY52W/qDDT7dUduomgnZXE8O3p85sshjZ+5kHc4bvBwHQUF yUrOkoVyMtWXdf0Hm6Gz9RQlEXUW3Ecn -----END CERTIFICATE-----Generated at Thu May 15 22:22:54 2025 by rpki-client