$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json) Hash identifier: TC467SJ961V+UefT3IR479RV9vHBw7pFtMJyu65En9s= Subject key identifier: 9E:EF:EA:0B:3C:69:AD:D9:06:4F:17:99:A3:DD:8C:8D:E0:FB:77:D8 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft Manifest number: 0263 Signing time: Sun 11 May 2025 01:18:17 +0000 Manifest this update: Sun 11 May 2025 01:18:16 +0000 Manifest next update: Sun 18 May 2025 01:18:16 +0000 Files and hashes: 1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: P+PWDIWCbSltZLueOCDHsbQfPTWsc59zqWaefJwB1Ks=) 2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: AMI8B01oJYBvuALPO9a5072lSyPAKpdtjtQhc2T4uR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: May 11 01:18:16 2025 GMT Not After : May 18 01:18:16 2025 GMT Subject: CN=681ffad8-483b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:82:9e:a2:23:81:f7:7b:1b:a4:d1:05:a3: 8b:8f:42:70:f9:47:eb:35:0d:ac:08:8c:46:d2:7e: cd:73:9a:8b:e1:e9:22:74:16:e9:92:ca:d5:7a:ad: 86:01:9e:b5:15:1d:4e:10:bb:7d:51:b5:a0:9c:eb: f4:15:c4:cb:b6:db:cf:8d:d8:2e:62:bb:aa:0f:9a: 2f:49:3b:e4:9d:99:75:8c:32:f4:e4:1b:f2:84:c4: 00:a6:ac:aa:6e:b0:80:80:ff:ac:c0:30:89:59:7b: 1e:ad:06:b1:84:86:3a:91:83:86:7c:cc:88:8e:e7: 2e:27:ed:5f:e6:dd:fe:3d:71:2e:85:9c:68:ff:68: 6e:eb:03:a6:f8:20:28:88:48:e6:35:20:ef:59:2f: 64:e9:10:3e:55:3a:94:5e:7d:46:9f:80:e8:5e:33: 18:58:27:ea:bf:2b:a4:9c:c5:77:2a:5f:f0:5c:d8: 04:73:ca:a6:44:ee:82:f9:4a:79:c3:d7:ad:3a:b9: c9:4d:04:49:c7:d1:e3:af:9b:71:84:43:00:c5:25: 38:3c:ae:85:e1:b1:37:9f:47:07:bf:92:db:94:d3: 0e:36:e8:a6:c0:1a:6c:e0:93:7c:fd:cf:93:d3:59: 8d:1d:48:ae:57:ef:06:e7:fb:cb:31:35:59:d3:27: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:EA:0B:3C:69:AD:D9:06:4F:17:99:A3:DD:8C:8D:E0:FB:77:D8 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fc:3f:fb:d6:24:48:45:95:b8:9c:4c:3d:0c:d9:5a:25:d7: 9a:2a:4c:9c:49:e0:1b:f5:84:a0:bb:9e:94:56:23:03:ae:fe: 93:a8:ae:bf:e8:21:53:21:97:0c:98:6e:50:90:ca:df:c1:ce: 5c:7f:7d:11:30:e6:12:10:80:f4:9a:0a:91:92:a4:9f:93:0c: 0c:c6:74:19:f7:28:01:cb:bd:b3:93:b8:7f:e3:8f:61:b4:57: 49:ba:b5:ba:b0:c4:6e:15:ec:9d:39:d2:93:f5:56:f0:e7:ae: e2:43:13:0c:19:a9:91:26:c7:6e:b9:89:d7:d1:21:4a:db:b3: 24:b7:41:d0:d1:7a:b5:1b:75:60:b2:44:22:a1:74:5b:b0:97: e1:68:00:64:b0:cd:3d:e7:8c:73:b5:d1:24:9f:8e:96:6d:ba: 16:fe:10:3e:ce:9b:22:ba:8c:31:3b:42:6c:b5:3e:e6:33:c1: 22:6f:be:0c:8c:b7:ca:d2:a8:fb:01:90:94:20:c9:0b:c3:38: 73:e8:8c:66:11:5c:4f:f9:0a:85:ba:73:81:28:95:f7:65:38: bb:c3:75:de:c5:ed:07:bc:36:f5:13:9a:22:52:b9:72:28:f0: e3:ed:70:22:b1:1d:33:b5:c1:e0:30:39:11:b3:1d:36:c8:b1: 0d:3e:a8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUwNTExMDExODE2WhcNMjUwNTE4MDExODE2WjAYMRYwFAYD VQQDEw02ODFmZmFkOC00ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JOCnqIjgfd7G6TRBaOLj0Jw+UfrNQ2sCIxG0n7Nc5qL4ekidBbpksrVeq2G AZ61FR1OELt9UbWgnOv0FcTLttvPjdguYruqD5ovSTvknZl1jDL05BvyhMQApqyq brCAgP+swDCJWXserQaxhIY6kYOGfMyIjucuJ+1f5t3+PXEuhZxo/2hu6wOm+CAo iEjmNSDvWS9k6RA+VTqUXn1Gn4DoXjMYWCfqvyuknMV3Kl/wXNgEc8qmRO6C+Up5 w9etOrnJTQRJx9Hjr5txhEMAxSU4PK6F4bE3n0cHv5LblNMONuimwBps4JN8/c+T 01mNHUiuV+8G5/vLMTVZ0yewdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7v6gs8 aa3ZBk8XmaPdjI3g+3fYMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L T20xSXp3UWp4YlJpTUFXZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/D/71iRIRZW4nEw9DNlaJdeaKkycSeAb9YSgu56UViMDrv6TqK6/ 6CFTIZcMmG5QkMrfwc5cf30RMOYSEID0mgqRkqSfkwwMxnQZ9ygBy72zk7h/449h tFdJurW6sMRuFeydOdKT9Vbw567iQxMMGamRJsduuYnX0SFK27Mkt0HQ0Xq1G3Vg skQioXRbsJfhaABksM0954xztdEkn46WbboW/hA+zpsiuowxO0JstT7mM8Eib74M jLfK0qj7AZCUIMkLwzhz6IxmEVxP+QqFunOBKJX3ZTi7w3Xexe0HvDb1E5oiUrly KPDj7XAisR0ztcHgMDkRsx02yLENPqgJ -----END CERTIFICATE-----Generated at Mon May 12 22:21:59 2025 by rpki-client