$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: uT/0dBToAUayANZ96D1VDWobYvu0n8VdCzHrPzdzDTs= Subject key identifier: 28:F4:E0:D6:88:44:3D:0A:8A:79:03:A5:E1:67:C9:FB:97:0C:01:E1 Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 01B7 Signing time: Thu 03 Apr 2025 02:26:52 +0000 Manifest this update: Thu 03 Apr 2025 02:26:52 +0000 Manifest next update: Thu 10 Apr 2025 02:26:52 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: m5a6eX1rBCGukm0MFMZwxbjOZotXNvc2VAzJ9WTs9CM=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4 Validity Not Before: Apr 3 02:26:52 2025 GMT Not After : Apr 10 02:26:52 2025 GMT Subject: CN=67edf1ec-9838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:62:58:49:ef:98:ac:11:d3:41:d3:31:a0: 69:75:9d:62:20:04:f6:a6:e3:ae:a2:73:dd:c4:90: e0:93:f1:bd:d9:e8:d3:e1:f3:3d:fc:7c:ff:a4:20: ee:bd:2b:96:59:d6:f6:85:ed:ac:f6:1e:58:63:35: a4:65:60:e2:32:c1:d9:34:66:6a:d0:ae:6e:dc:37: 68:23:ca:c6:c0:f5:12:f8:8c:b2:5f:29:22:9f:d9: 68:12:e2:2a:c1:d4:06:d9:83:07:ce:33:60:60:f0: 18:0d:0c:c0:1d:2a:e3:8a:42:40:12:f2:6f:a5:8a: 79:ed:84:9a:fa:fd:0d:09:52:f1:a2:6a:1b:b0:26: 96:87:71:fb:13:51:e9:5b:30:49:4e:c9:9a:7d:54: 2e:d3:9a:98:84:3a:18:eb:27:cc:d9:fb:a3:94:be: ea:7d:d8:63:17:78:ca:fe:1e:8c:c4:ee:2c:02:8e: 73:42:fa:27:7e:cc:cf:11:a2:97:a3:ed:c8:21:82: 41:92:c7:b0:83:9a:2a:62:6a:b3:2d:06:1f:c0:06: 89:bd:9a:cf:35:57:55:81:7a:4e:c4:17:a9:2e:f1: 4c:39:a5:51:99:d2:a1:c0:e8:0e:c7:93:76:89:69: 84:0b:c3:8a:73:77:a0:f1:e0:7f:e8:79:e5:ea:78: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F4:E0:D6:88:44:3D:0A:8A:79:03:A5:E1:67:C9:FB:97:0C:01:E1 X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1e:fb:48:7f:f2:21:ce:2b:1f:69:96:6d:7a:f8:27:db:f8: 99:a0:d5:cc:fb:47:b4:91:f6:9c:45:89:fb:12:54:2d:75:1b: 9b:77:fa:2c:de:0f:ad:87:d5:02:9d:90:78:a4:82:8e:7e:da: 4d:0e:35:c3:b6:67:02:70:9e:f6:f9:e1:a7:70:63:8b:e8:d9: 19:9e:d1:d1:a5:45:9f:ab:84:b7:09:cb:7f:21:1c:a3:0f:17: 92:23:a6:04:b2:c6:6c:8c:57:f2:9e:97:ed:01:09:a0:d6:1c: c5:5a:57:c7:3f:40:29:96:3a:35:80:05:56:cb:bd:f1:f7:20: 1f:c0:03:0a:86:e1:c6:1e:24:dd:a2:f8:fd:f9:71:ba:7a:4f: e5:35:6d:ca:de:78:ca:3a:52:9e:9a:bf:98:07:83:13:c9:7b: 60:19:66:c1:94:70:9a:d2:9d:28:aa:b5:39:83:b5:f7:50:80: 6c:3e:9d:08:5d:b3:31:0a:e2:4f:02:da:20:52:1e:cd:00:4c: 09:9f:33:a5:32:3b:2b:0e:c5:04:1a:c4:33:94:8c:25:ad:17: 83:1e:0b:4c:b4:da:ab:86:c1:a1:d7:f1:70:bd:c5:e0:54:b7: 1a:c2:ba:6c:74:59:ef:b9:54:15:65:32:cc:51:b9:91:40:ef: a4:d6:c8:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUwNDAzMDIyNjUyWhcNMjUwNDEwMDIyNjUyWjAYMRYwFAYD VQQDEw02N2VkZjFlYy05ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSpiWEnvmKwR00HTMaBpdZ1iIAT2puOuonPdxJDgk/G92ejT4fM9/Hz/pCDu vSuWWdb2he2s9h5YYzWkZWDiMsHZNGZq0K5u3DdoI8rGwPUS+IyyXykin9loEuIq wdQG2YMHzjNgYPAYDQzAHSrjikJAEvJvpYp57YSa+v0NCVLxomobsCaWh3H7E1Hp WzBJTsmafVQu05qYhDoY6yfM2fujlL7qfdhjF3jK/h6MxO4sAo5zQvonfszPEaKX o+3IIYJBksewg5oqYmqzLQYfwAaJvZrPNVdVgXpOxBepLvFMOaVRmdKhwOgOx5N2 iWmEC8OKc3eg8eB/6Hnl6niwpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj04NaI RD0KinkDpeFnyfuXDAHhMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMHvtIf/IhzisfaZZtevgn2/iZoNXM+0e0kfacRYn7ElQtdRubd/os 3g+th9UCnZB4pIKOftpNDjXDtmcCcJ72+eGncGOL6NkZntHRpUWfq4S3Cct/IRyj DxeSI6YEssZsjFfynpftAQmg1hzFWlfHP0Apljo1gAVWy73x9yAfwAMKhuHGHiTd ovj9+XG6ek/lNW3K3njKOlKemr+YB4MTyXtgGWbBlHCa0p0oqrU5g7X3UIBsPp0I XbMxCuJPAtogUh7NAEwJnzOlMjsrDsUEGsQzlIwlrReDHgtMtNqrhsGh1/FwvcXg VLcawrpsdFnvuVQVZTLMUbmRQO+k1sja -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:47 2025 by rpki-client