$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: 4G9G1MJm+gK0Jc3Z1Mz7W0TeKpWfxfRVPLrcxcs1mQ4= Subject key identifier: 32:C9:9A:39:08:56:23:F8:10:0F:F8:D7:11:15:AF:A1:7F:29:FB:F0 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0BC4 Signing time: Fri 04 Apr 2025 18:58:16 +0000 Manifest this update: Fri 04 Apr 2025 18:58:16 +0000 Manifest next update: Fri 11 Apr 2025 18:58:16 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: shTZDAO4vKvwmNDHzmtwZUoGNKx6GYJcHSlwKm/vl9o=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: sv0g0tboRsfsbJ2uarFSxGBIzB+s+V9JKt78rjuG5CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF Validity Not Before: Apr 4 18:58:16 2025 GMT Not After : Apr 11 18:58:16 2025 GMT Subject: CN=67f02bc8-b7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:fd:d5:84:e5:2f:db:cc:f7:79:f8:43:4b: 57:a0:61:91:4f:d5:85:7b:64:53:4e:7d:48:20:bb: 27:84:f8:ac:f3:4f:56:0c:9f:43:46:8b:cd:2f:69: 46:02:ec:14:8b:26:76:09:f5:83:18:f4:67:b5:b3: 03:49:91:08:f0:8d:aa:74:0a:d7:a7:9b:3a:de:d1: 71:21:56:d8:38:2b:4d:4e:0a:ee:7d:70:91:ee:96: d3:99:50:1e:f1:d0:72:e9:99:d6:36:2b:f9:5d:bd: bb:f2:45:55:25:d3:22:70:66:d0:8a:a8:6d:b5:74: 70:c9:9c:19:f3:d1:17:cb:39:97:c3:5b:f4:b7:65: 3c:3c:e3:aa:bd:ec:e9:30:dd:26:65:77:e1:c5:55: 29:99:cb:1d:96:96:09:3d:6d:eb:de:4f:18:8c:af: 17:88:48:df:aa:28:38:f3:cc:18:1e:98:c8:6c:62: db:2e:0c:5f:39:60:58:3b:84:aa:ec:c5:a4:62:d7: 76:55:be:bc:a9:48:d0:78:56:10:08:c7:5d:15:6a: f4:2a:f8:99:bd:b0:22:28:dd:8a:52:f7:6a:41:7c: 96:69:ec:50:70:49:d6:8f:47:d4:16:56:85:92:69: 38:3c:ae:ce:56:a9:e2:01:05:80:1a:08:88:6f:f2: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:9A:39:08:56:23:F8:10:0F:F8:D7:11:15:AF:A1:7F:29:FB:F0 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:e4:4f:77:1d:c0:3e:9b:d6:b5:71:45:f6:ad:48:60:af: 3b:b3:6a:0e:42:49:55:9e:0d:35:cb:70:37:ca:a0:c1:c7:b1: b2:10:79:5e:ff:39:22:81:13:41:bf:e7:f0:51:89:f9:08:c8: 8c:2f:82:b9:d7:d2:91:85:85:af:dc:ec:25:8c:f3:7d:9c:73: cd:5e:f5:5e:27:6f:d6:d8:a6:38:f1:57:b6:dd:6c:18:db:16: d5:51:2d:92:90:94:ee:c9:26:4e:09:74:66:23:bb:36:4e:a7: 87:4f:4c:b0:f0:bc:b2:d8:29:68:fa:87:ae:f4:7f:30:7f:41: 1a:7a:3f:a7:8a:f8:35:12:87:fb:e0:b3:17:68:21:ad:13:a3: af:6b:69:d8:df:d5:41:f5:1b:9e:96:02:2d:10:b2:0d:26:d0: f2:96:c5:de:a1:a4:6f:05:b6:36:1f:55:28:4a:a2:39:4c:0a: cf:52:f3:85:7f:a6:03:47:f3:a1:24:e4:2c:f6:46:eb:0b:eb: 82:fc:4f:33:4e:4a:61:43:62:72:82:3f:ac:9e:0b:fe:65:50: 0c:21:ea:02:0f:e3:df:4f:cf:f2:d1:b6:df:dc:0f:26:4c:3e: c9:31:09:ee:8e:9d:39:ce:62:92:5d:86:1e:9d:a0:72:19:2d: b1:fe:82:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNDA0MTg1ODE2WhcNMjUwNDExMTg1ODE2WjAYMRYwFAYD VQQDEw02N2YwMmJjOC1iN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGf91YTlL9vM93n4Q0tXoGGRT9WFe2RTTn1IILsnhPis809WDJ9DRovNL2lG AuwUiyZ2CfWDGPRntbMDSZEI8I2qdArXp5s63tFxIVbYOCtNTgrufXCR7pbTmVAe 8dBy6ZnWNiv5Xb278kVVJdMicGbQiqhttXRwyZwZ89EXyzmXw1v0t2U8POOqvezp MN0mZXfhxVUpmcsdlpYJPW3r3k8YjK8XiEjfqig488wYHpjIbGLbLgxfOWBYO4Sq 7MWkYtd2Vb68qUjQeFYQCMddFWr0KviZvbAiKN2KUvdqQXyWaexQcEnWj0fUFlaF kmk4PK7OVqniAQWAGgiIb/IFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLJmjkI ViP4EA/41xEVr6F/KfvwMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZSORPdx3APpvWtXFF9q1IYK87s2oOQklVng01y3A3yqDBx7GyEHle /zkigRNBv+fwUYn5CMiML4K519KRhYWv3OwljPN9nHPNXvVeJ2/W2KY48Ve23WwY 2xbVUS2SkJTuySZOCXRmI7s2TqeHT0yw8Lyy2Clo+oeu9H8wf0Eaej+nivg1Eof7 4LMXaCGtE6Ova2nY39VB9RuelgItELINJtDylsXeoaRvBbY2H1UoSqI5TArPUvOF f6YDR/OhJOQs9kbrC+uC/E8zTkphQ2Jygj+sngv+ZVAMIeoCD+PfT8/y0bbf3A8m TD7JMQnujp05zmKSXYYenaByGS2x/oL4 -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:47 2025 by rpki-client