$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: /l36BMafvGT3BeVZik/z7kD2QjVQl06KdEdtWGHPsGM= Subject key identifier: 1C:81:A7:56:38:38:BA:96:DD:80:5C:49:B3:E4:97:D1:27:72:A0:FB Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 07DD Signing time: Fri 04 Apr 2025 21:08:35 +0000 Manifest this update: Fri 04 Apr 2025 21:08:34 +0000 Manifest next update: Fri 11 Apr 2025 21:08:34 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: L0W9+NXNSly0I1Hx5YtH1arTDTbHZ9HuGxEbEGbx66c=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: 0zq4g5RJk0E/VoR4Pr+LW71Q1CJOf0yYtzjcsTKINfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE Validity Not Before: Apr 4 21:08:34 2025 GMT Not After : Apr 11 21:08:34 2025 GMT Subject: CN=67f04a52-6083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:8c:bd:a8:ef:da:a1:10:d8:23:17:b7:63: 19:63:96:fd:69:88:88:a0:38:90:8f:04:a5:81:58: 5d:09:26:8c:cb:65:b7:7a:2d:ea:0e:fa:ad:76:95: 4d:d6:b6:20:5b:e3:cb:0e:92:73:ca:70:c9:27:d1: 47:7d:fe:20:e7:a9:a1:40:e5:cc:07:81:57:25:6f: 2c:3e:6c:70:55:0d:f2:30:85:e5:c9:56:d8:44:92: f6:ff:d7:aa:f8:b5:7c:6c:1c:db:7a:d4:49:5a:ac: 1a:7a:39:00:19:97:4f:ec:74:e1:48:0d:e8:4f:5b: 2f:cb:3a:9e:aa:fa:b3:e8:48:af:b0:69:d0:d3:e3: 1c:7f:82:b6:fb:fe:f8:0e:48:ef:c5:b1:9f:eb:9b: 46:4f:4d:86:31:6a:cf:0e:d2:3b:b7:c9:ff:32:7e: fc:de:b3:e4:ff:46:d6:9c:53:78:a2:17:c1:7d:b9: 9a:cb:d0:c6:a4:b5:ef:04:93:63:42:fb:bc:66:37: 68:a0:dc:f5:cd:1b:e3:08:24:e5:5f:a5:91:3c:99: 11:78:84:06:18:10:3f:2e:62:b1:68:97:6f:97:85: 35:82:65:52:17:f5:98:b3:31:7e:9b:9f:fb:dc:68: f5:40:79:3e:77:88:a4:2b:4c:1d:16:e4:48:57:3e: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:A7:56:38:38:BA:96:DD:80:5C:49:B3:E4:97:D1:27:72:A0:FB X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5d:8f:eb:a0:1e:43:34:f2:03:23:14:0e:14:24:33:33:fd: 6b:2a:63:52:3e:83:56:0a:62:ef:6b:71:76:43:42:a0:76:35: 56:f7:74:9e:2f:d1:85:ca:1f:18:ac:8f:27:27:8b:4d:b1:91: 70:a4:90:03:fd:c7:f6:ea:f7:45:36:25:0c:f4:b1:09:78:54: a6:0d:68:cf:e7:5f:e9:e3:0e:21:3e:5e:7a:52:a3:04:7d:4a: 68:db:5e:7d:5d:34:a0:a7:8d:06:36:6b:50:1b:ae:73:83:83: 4c:ed:e8:21:fa:5d:c3:53:78:23:d6:e5:a7:33:07:ea:a8:02: 42:1b:b1:f6:79:19:b1:98:b5:0e:bc:e1:10:ce:75:1c:e6:f3: 43:9e:51:6e:29:a2:4d:e5:26:5c:79:b3:3c:6d:40:2b:b8:6b: 5a:10:c1:47:e1:31:dd:3e:49:36:b6:77:2e:a5:59:04:cc:62: 72:5a:e4:fa:07:f8:36:84:ce:9e:fd:8c:e5:89:d6:73:8f:3c: 56:03:14:01:e5:eb:f6:f2:10:85:4b:92:b9:b6:7c:34:8c:7a: 35:27:24:fb:8e:fb:5c:a0:25:9a:60:30:2b:81:99:14:4a:a7: b0:e9:d6:ff:56:ef:d3:d5:14:92:ed:ee:68:55:03:59:07:59: c1:dc:62:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwNDA0MjEwODM0WhcNMjUwNDExMjEwODM0WjAYMRYwFAYD VQQDEw02N2YwNGE1Mi02MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtieMvajv2qEQ2CMXt2MZY5b9aYiIoDiQjwSlgVhdCSaMy2W3ei3qDvqtdpVN 1rYgW+PLDpJzynDJJ9FHff4g56mhQOXMB4FXJW8sPmxwVQ3yMIXlyVbYRJL2/9eq +LV8bBzbetRJWqwaejkAGZdP7HThSA3oT1svyzqeqvqz6EivsGnQ0+Mcf4K2+/74 DkjvxbGf65tGT02GMWrPDtI7t8n/Mn783rPk/0bWnFN4ohfBfbmay9DGpLXvBJNj Qvu8ZjdooNz1zRvjCCTlX6WRPJkReIQGGBA/LmKxaJdvl4U1gmVSF/WYszF+m5/7 3Gj1QHk+d4ikK0wdFuRIVz57dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByBp1Y4 OLqW3YBcSbPkl9EncqD7MB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzXY/roB5DNPIDIxQOFCQzM/1rKmNSPoNWCmLva3F2Q0KgdjVW93Se L9GFyh8YrI8nJ4tNsZFwpJAD/cf26vdFNiUM9LEJeFSmDWjP51/p4w4hPl56UqME fUpo2159XTSgp40GNmtQG65zg4NM7egh+l3DU3gj1uWnMwfqqAJCG7H2eRmxmLUO vOEQznUc5vNDnlFuKaJN5SZcebM8bUAruGtaEMFH4THdPkk2tncupVkEzGJyWuT6 B/g2hM6e/YzlidZzjzxWAxQB5ev28hCFS5K5tnw0jHo1JyT7jvtcoCWaYDArgZkU Sqew6db/Vu/T1RSS7e5oVQNZB1nB3GIM -----END CERTIFICATE-----Generated at Sat Apr 5 16:56:13 2025 by rpki-client