$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: BrhV5p/wiqr1fs9AwtW7qQjCDxwJv75FgE++xIrzfxw= Subject key identifier: 68:48:39:4E:5A:21:1F:BD:65:66:3F:A3:0D:A2:CA:C5:A1:13:2B:00 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 01BA Signing time: Mon 07 Apr 2025 02:04:00 +0000 Manifest this update: Mon 07 Apr 2025 02:04:00 +0000 Manifest next update: Mon 14 Apr 2025 02:04:00 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: rcCvnFAFwfbCGMS9UVgHlzYJcYaFu6RrAgAhliezA6Y=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA Validity Not Before: Apr 7 02:04:00 2025 GMT Not After : Apr 14 02:04:00 2025 GMT Subject: CN=67f33290-2495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:68:ad:62:a7:11:aa:25:c6:cc:3a:19:97: af:f8:99:45:d2:78:46:5d:c5:4a:ef:ee:b5:a9:5e: fd:f5:a5:4e:2d:a8:c7:b5:d1:6a:1a:88:a1:3d:bb: 8f:aa:ce:98:1d:dd:47:c5:53:f2:3b:95:6b:ef:49: 93:7a:30:03:68:0a:fd:d1:8d:cf:40:19:20:73:f3: 17:4b:b8:0b:83:26:3a:5f:3d:1c:b4:c9:e5:53:28: 37:20:8e:70:0c:4b:5c:1f:f9:0e:7f:e0:01:2c:9c: 8d:be:26:dd:0a:8f:77:fb:6c:8d:1b:96:9e:1a:0b: 72:f1:06:12:c7:a3:34:1d:5c:ba:ec:b8:69:d8:e9: 11:cf:b8:07:d8:f7:b1:9b:cb:83:f1:1d:db:38:40: 88:eb:1c:e1:39:4e:fe:c4:eb:c7:07:c3:2e:83:f6: e4:14:30:05:73:27:53:24:a2:fd:5d:41:75:4c:98: 95:fa:74:9c:06:62:f1:ad:12:21:3e:74:58:bc:b8: f7:f6:65:bc:3e:67:08:9f:be:6a:d5:49:3f:2e:42: 0f:b7:75:82:4a:f9:87:85:98:c9:78:c9:cf:74:fb: 37:30:a7:21:ec:28:0b:dd:6c:a2:68:33:dd:35:08: 0b:2b:71:87:2d:a2:f3:09:57:6e:c5:15:8f:80:43: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:39:4E:5A:21:1F:BD:65:66:3F:A3:0D:A2:CA:C5:A1:13:2B:00 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:8d:2d:80:c5:4f:aa:36:c3:31:bf:c4:62:89:0e:62:3a:cb: 17:1b:57:3d:16:d9:df:d4:17:08:6a:6b:94:e2:9b:46:9a:34: dd:e0:62:89:31:08:fc:46:da:6b:97:b7:5f:27:d0:42:53:3c: 8e:2c:2d:66:08:44:ae:01:88:55:d3:b3:90:eb:91:01:8a:cb: 66:04:2c:7a:17:19:9e:61:b1:32:bb:7d:bf:44:61:fa:ca:db: f7:19:96:43:8c:5d:d2:81:96:e6:68:47:1c:5a:19:9a:5e:b6: d1:d2:26:3d:58:07:d9:de:6d:39:dc:7b:79:90:f6:4f:f6:9c: 99:b0:75:8c:b1:42:69:53:ba:98:05:c2:63:ac:3d:82:78:77: cc:bf:f2:e3:b4:cf:30:26:cf:67:6d:8f:3b:0f:96:4f:dc:a3: d2:da:6a:61:10:c7:27:17:5e:2b:c1:5e:b1:e2:02:54:52:9a: c0:12:73:a4:0e:ca:2d:d5:f3:5d:80:fa:8a:6d:4d:0e:6e:5d: 80:b3:9a:93:0b:25:b4:e7:50:d9:27:a0:c5:35:3d:11:ed:27: 28:d8:a9:7b:2e:f9:ab:0f:b4:0d:4b:fe:6f:32:ff:d6:ff:56: 09:89:35:c0:fc:9a:93:bd:e3:32:88:0a:39:ff:cd:75:06:08: d2:db:92:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUwNDA3MDIwNDAwWhcNMjUwNDE0MDIwNDAwWjAYMRYwFAYD VQQDEw02N2YzMzI5MC0yNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuztorWKnEaolxsw6GZev+JlF0nhGXcVK7+61qV799aVOLajHtdFqGoihPbuP qs6YHd1HxVPyO5Vr70mTejADaAr90Y3PQBkgc/MXS7gLgyY6Xz0ctMnlUyg3II5w DEtcH/kOf+ABLJyNvibdCo93+2yNG5aeGgty8QYSx6M0HVy67Lhp2OkRz7gH2Pex m8uD8R3bOECI6xzhOU7+xOvHB8Mug/bkFDAFcydTJKL9XUF1TJiV+nScBmLxrRIh PnRYvLj39mW8PmcIn75q1Uk/LkIPt3WCSvmHhZjJeMnPdPs3MKch7CgL3WyiaDPd NQgLK3GHLaLzCVduxRWPgEP5GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhIOU5a IR+9ZWY/ow2iysWhEysAMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjjS2AxU+qNsMxv8RiiQ5iOssXG1c9Ftnf1BcIamuU4ptGmjTd4GKJ MQj8Rtprl7dfJ9BCUzyOLC1mCESuAYhV07OQ65EBistmBCx6FxmeYbEyu32/RGH6 ytv3GZZDjF3SgZbmaEccWhmaXrbR0iY9WAfZ3m053Ht5kPZP9pyZsHWMsUJpU7qY BcJjrD2CeHfMv/LjtM8wJs9nbY87D5ZP3KPS2mphEMcnF14rwV6x4gJUUprAEnOk Dsot1fNdgPqKbU0Obl2As5qTCyW051DZJ6DFNT0R7Sco2Kl7LvmrD7QNS/5vMv/W /1YJiTXA/JqTveMyiAo5/811BgjS25Jl -----END CERTIFICATE-----Generated at Tue Apr 8 19:15:32 2025 by rpki-client