$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: SHdyjmPu6aTv3BxI0/uxP7DTfHhre3ohHfuiqOOsJ8s= Subject key identifier: D8:AB:05:C8:70:45:D9:F4:94:23:A7:E7:1E:50:9B:D2:BB:D4:70:BE Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 0219 Signing time: Sat 05 Apr 2025 02:08:00 +0000 Manifest this update: Sat 05 Apr 2025 02:07:59 +0000 Manifest next update: Sat 12 Apr 2025 02:07:59 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: d3X6NXOEEb3lIrzb+O7ZeqjwYXPdi7HN4E94qqnGTgM=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8 Validity Not Before: Apr 5 02:07:59 2025 GMT Not After : Apr 12 02:07:59 2025 GMT Subject: CN=67f09080-2ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:8d:b5:c9:cd:25:1e:1a:35:4b:db:0d:19: ab:ca:98:41:7a:0a:28:fc:89:6e:83:a8:d0:27:18: b4:b9:43:95:40:aa:9a:66:88:1e:52:2c:e4:df:d5: a0:ec:9c:07:89:9a:94:a9:14:be:a5:63:c1:f4:bb: 73:ac:93:d9:79:33:a2:50:5c:72:21:e2:38:dd:42: ec:ad:fe:0b:a3:9d:c3:bb:36:2a:a0:ed:93:4c:c3: e4:bf:eb:1c:57:b2:27:30:5d:b0:49:1a:a1:25:7b: 66:23:97:54:61:7c:17:cb:81:21:b7:a4:be:26:8a: 4a:34:fb:a2:98:33:5d:99:8c:4c:9a:f2:9c:00:cb: df:21:bd:a1:74:58:c9:47:c1:40:f6:d8:22:1f:aa: 8a:84:06:29:d8:64:17:fe:ae:c8:17:b0:8b:42:0d: f6:de:ff:f2:14:4f:c5:77:bf:30:d9:7e:31:86:c7: 23:ba:70:fc:44:e5:f3:06:eb:ee:f8:f6:5e:4e:bf: 97:dd:ac:c1:cc:57:f3:70:34:ce:1f:fc:14:15:22: f7:e2:ba:c0:fd:dc:ef:06:a1:0f:35:57:56:18:ab: fc:5d:13:c8:27:b2:3c:d0:87:18:4c:39:07:aa:4e: c5:4a:23:be:09:30:fe:03:50:8a:e6:c1:35:be:ba: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:05:C8:70:45:D9:F4:94:23:A7:E7:1E:50:9B:D2:BB:D4:70:BE X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:af:72:36:35:32:c3:5b:38:72:bb:c5:67:59:e1:7f:f9:27: 82:b5:e7:05:7d:d4:de:04:58:e7:4e:33:4b:7b:3c:1b:96:40: b7:5c:21:e2:22:44:0b:ea:d3:42:c5:51:9e:4b:65:e0:7f:e2: 4f:ea:1a:5f:da:22:10:2b:15:91:69:bf:45:4f:75:48:68:0c: ad:d2:74:68:c0:5d:96:65:da:f3:b1:80:88:6d:5e:6f:4f:9c: 3c:7a:f6:50:7e:d5:72:90:e5:ee:52:69:8c:ad:f8:3f:2e:57: 38:11:b4:02:5e:78:13:2a:bc:92:aa:d7:23:aa:85:30:de:e7: 69:68:3c:1d:61:01:08:4f:a7:de:95:a6:4c:99:44:30:e6:52: ff:4d:e8:b4:9d:2d:27:8d:f6:40:0d:75:a0:87:48:c4:77:24: 15:28:41:c6:b8:a3:2c:f0:cb:13:73:e2:65:c7:ce:63:d4:80: 47:d7:94:66:b1:ec:e8:64:e0:90:c1:8a:e6:18:1b:7c:0a:66: 19:bf:1e:c4:62:b4:34:9e:3b:59:94:f5:e1:22:59:dc:97:2e: 01:84:71:fd:86:8d:45:8f:7e:59:cd:f9:40:d6:2c:e3:e1:98: 27:15:91:80:57:33:e6:d5:58:41:71:be:9d:42:1b:44:72:f8: 27:d3:c6:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUwNDA1MDIwNzU5WhcNMjUwNDEyMDIwNzU5WjAYMRYwFAYD VQQDEw02N2YwOTA4MC0yYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuKNtcnNJR4aNUvbDRmryphBegoo/Ilug6jQJxi0uUOVQKqaZogeUizk39Wg 7JwHiZqUqRS+pWPB9LtzrJPZeTOiUFxyIeI43ULsrf4Lo53DuzYqoO2TTMPkv+sc V7InMF2wSRqhJXtmI5dUYXwXy4Eht6S+JopKNPuimDNdmYxMmvKcAMvfIb2hdFjJ R8FA9tgiH6qKhAYp2GQX/q7IF7CLQg323v/yFE/Fd78w2X4xhscjunD8ROXzBuvu +PZeTr+X3azBzFfzcDTOH/wUFSL34rrA/dzvBqEPNVdWGKv8XRPIJ7I80IcYTDkH qk7FSiO+CTD+A1CK5sE1vrrfAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNirBchw Rdn0lCOn5x5Qm9K71HC+MB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAr3I2NTLDWzhyu8VnWeF/+SeCtecFfdTeBFjnTjNLezwblkC3XCHi IkQL6tNCxVGeS2Xgf+JP6hpf2iIQKxWRab9FT3VIaAyt0nRowF2WZdrzsYCIbV5v T5w8evZQftVykOXuUmmMrfg/Llc4EbQCXngTKrySqtcjqoUw3udpaDwdYQEIT6fe laZMmUQw5lL/Tei0nS0njfZADXWgh0jEdyQVKEHGuKMs8MsTc+Jlx85j1IBH15Rm sezoZOCQwYrmGBt8CmYZvx7EYrQ0njtZlPXhIlncly4BhHH9ho1Fj35ZzflA1izj 4ZgnFZGAVzPm1VhBcb6dQhtEcvgn08bf -----END CERTIFICATE-----Generated at Sat Apr 5 08:21:25 2025 by rpki-client