$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: 7oEVDVH1ojYsl45XJvmOi3sfAJcERqbU464yYWUqt+8= Subject key identifier: BC:0B:E5:5A:AD:18:0B:3A:90:34:C4:86:9A:22:7E:16:A9:D7:91:45 Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 44 Signing time: Thu 03 Apr 2025 06:41:05 +0000 Manifest this update: Thu 03 Apr 2025 06:41:05 +0000 Manifest next update: Thu 10 Apr 2025 06:41:04 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: PXb4ZkUNf4B0KWmM66kQMcWHhsCBtbS+8bpTse6yIxM=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: zJ3vBuHNvU2BtLgZ93Uo5Q9St8BhgcO1ynlNtZ1Jaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE Validity Not Before: Apr 3 06:41:05 2025 GMT Not After : Apr 10 06:41:04 2025 GMT Subject: CN=67ee2d81-844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:a2:c2:48:0d:04:2c:90:11:78:46:03:3e: 76:0f:09:60:cb:13:93:6c:86:bb:65:02:ea:bf:f2: 77:93:f1:4e:7c:ee:37:c1:74:53:52:53:95:49:de: 29:18:c1:77:1a:5b:55:28:13:58:cd:35:fe:97:3a: 4d:8a:a3:1d:da:79:22:3d:9c:08:5c:a1:9e:08:0d: c2:44:84:7f:8d:3e:df:2b:84:6c:9c:77:73:64:c1: 4c:42:d1:eb:8f:d2:b7:8e:c9:cc:fc:aa:35:de:67: a6:9f:2e:dc:86:a4:f9:ae:0f:43:28:d7:6c:35:21: aa:b0:ec:7d:77:12:5c:99:0f:00:56:4d:c3:73:b1: f7:6e:12:42:68:cc:c5:35:67:c7:73:e6:91:48:d1: 14:9f:97:2a:d3:64:96:e2:ca:7b:88:97:8e:36:e0: 99:5f:3e:db:06:0a:c9:67:47:31:88:c6:dc:c3:3a: 1b:52:c5:d0:9b:64:cc:76:89:84:72:47:76:10:b0: d5:ff:8c:ee:7c:c5:78:db:e4:04:a5:df:41:a7:fc: 2d:f5:59:19:84:26:73:25:58:f8:36:6a:5b:9f:f4: dd:34:ed:4e:62:28:6f:03:19:fd:58:d0:a2:e7:61: 60:88:8d:0c:cc:1b:ae:a7:19:fb:12:05:d6:9a:e3: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0B:E5:5A:AD:18:0B:3A:90:34:C4:86:9A:22:7E:16:A9:D7:91:45 X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:ba:71:3a:3c:8a:a7:05:ed:81:c3:f2:b7:8b:b0:25:f3: d1:eb:c7:b5:d3:4d:95:b8:51:24:f9:95:2c:eb:2c:f5:0b:97: ea:c7:26:a1:82:b6:af:bb:66:e3:eb:d9:77:35:e4:76:ff:16: 00:3e:15:2c:a2:bd:46:18:96:c6:f7:56:d6:44:ff:74:ee:87: 7f:6c:72:ff:5a:64:03:83:c9:6b:0b:c7:d2:90:e5:31:fb:a3: 47:bd:b1:09:bf:f7:5b:fe:73:1e:97:88:51:29:14:94:67:8e: 99:46:c2:6a:d3:e1:19:dd:35:8b:d8:88:6b:56:f6:9d:29:61: 07:4c:80:51:4d:03:f2:31:7a:b0:7f:ee:f1:4e:5d:78:3e:5b: 6b:e9:a3:95:dd:ac:68:fa:f9:8f:c7:77:6e:4a:91:9a:c4:33: 45:8a:c6:ab:1d:8f:88:ab:f8:d8:ba:fe:ed:69:68:83:15:89: ed:d6:79:ed:d8:87:4b:6e:03:33:54:6a:cd:2b:06:a3:5f:4d: 91:d4:46:3d:11:b1:49:70:13:cc:69:9c:83:47:84:69:1b:3b: 9b:ee:5b:5b:49:b9:4d:0a:5b:71:0d:22:84:2a:3b:10:04:5d: 61:d9:c8:ea:58:74:c7:6a:ec:61:5e:7d:cd:b6:87:4c:25:60: 80:fd:3c:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE NkFEOTVFRDAeFw0yNTA0MDMwNjQxMDVaFw0yNTA0MTAwNjQxMDRaMBgxFjAUBgNV BAMTDTY3ZWUyZDgxLTg0NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqWaLCSA0ELJAReEYDPnYPCWDLE5NshrtlAuq/8neT8U587jfBdFNSU5VJ3ikY wXcaW1UoE1jNNf6XOk2Kox3aeSI9nAhcoZ4IDcJEhH+NPt8rhGycd3NkwUxC0euP 0reOycz8qjXeZ6afLtyGpPmuD0Mo12w1Iaqw7H13ElyZDwBWTcNzsfduEkJozMU1 Z8dz5pFI0RSflyrTZJbiynuIl4424JlfPtsGCslnRzGIxtzDOhtSxdCbZMx2iYRy R3YQsNX/jO58xXjb5ASl30Gn/C31WRmEJnMlWPg2aluf9N007U5iKG8DGf1Y0KLn YWCIjQzMG66nGfsSBdaa452hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvAvlWq0Y CzqQNMSGmiJ+FqnXkUUwHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5 TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJu5unE6PIqnBe2Bw/K3i7Al89Hrx7XTTZW4UST5lSzrLPULl+rHJqGC tq+7ZuPr2Xc15Hb/FgA+FSyivUYYlsb3VtZE/3Tuh39scv9aZAODyWsLx9KQ5TH7 o0e9sQm/91v+cx6XiFEpFJRnjplGwmrT4RndNYvYiGtW9p0pYQdMgFFNA/IxerB/ 7vFOXXg+W2vpo5XdrGj6+Y/Hd25KkZrEM0WKxqsdj4ir+Ni6/u1paIMVie3Wee3Y h0tuAzNUas0rBqNfTZHURj0RsUlwE8xpnINHhGkbO5vuW1tJuU0KW3ENIoQqOxAE XWHZyOpYdMdq7GFefc22h0wlYID9PP0= -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:33 2025 by rpki-client