$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json) Hash identifier: SJR92zgygVt8xj+o5COk7ZhdFYFEsosG4nszBvQz9Ew= Subject key identifier: 56:5B:8B:07:CD:C2:3F:80:AE:6A:BC:E8:3B:3F:10:8C:68:66:93:04 Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft Manifest number: 012C Signing time: Thu 03 Apr 2025 03:59:17 +0000 Manifest this update: Thu 03 Apr 2025 03:59:17 +0000 Manifest next update: Thu 10 Apr 2025 03:59:17 +0000 Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: gfkZriooreNltFdBCWLn8oQvS7aQgdruexzxqq7uc/0=) 2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 7xbva2x/2mRF/+1fr2KpL4N7Zq29lf7peyPdqH7ozvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD09B Validity Not Before: Apr 3 03:59:17 2025 GMT Not After : Apr 10 03:59:17 2025 GMT Subject: CN=67ee0795-74c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:e0:62:07:96:56:66:6e:f5:6e:de:80:43: 9d:da:3f:65:89:f5:22:fd:9c:79:0d:88:bf:07:cf: ee:00:a5:74:37:46:a7:8a:31:f2:51:11:47:93:95: ee:f9:8a:a7:e3:3e:6f:51:75:18:2b:47:99:42:ae: 8f:c3:de:63:2f:f6:30:88:08:df:b9:9a:83:0b:af: c5:97:d8:ad:81:3a:7f:76:f0:84:73:dd:77:f5:ba: ce:f2:4f:e8:0d:13:ea:40:8e:f6:de:0c:a0:18:e1: f2:56:80:ba:0c:f0:45:05:96:33:07:c0:ec:ff:ff: 07:9b:19:5d:6e:98:51:0e:0e:ef:04:44:54:d7:54: 1b:c9:e6:89:52:c9:16:78:09:2a:2b:ec:ec:41:2c: 07:7c:22:f4:7e:e0:d0:39:b3:28:2b:70:96:92:8e: 23:4b:a3:5c:8f:22:dc:7a:72:1b:85:59:a6:bf:51: 2d:31:15:29:cb:9d:79:9e:57:4d:b7:c4:db:67:af: 62:ff:12:11:61:ac:de:6d:05:ff:22:67:52:cf:a3: 0a:73:a1:50:7f:99:67:a4:95:9f:8c:15:11:1a:65: fd:b9:66:16:a9:ba:dc:4e:a3:ae:ff:6c:cc:02:9b: a5:15:86:8e:9d:49:2a:a6:0b:45:4e:1f:3e:ee:53: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5B:8B:07:CD:C2:3F:80:AE:6A:BC:E8:3B:3F:10:8C:68:66:93:04 X509v3 Authority Key Identifier: keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:68:f6:18:32:8d:e4:9c:c6:b6:f9:14:59:92:4f:22:f7:88: af:fd:67:cf:16:aa:3e:70:1b:49:e8:7d:8d:17:29:7c:23:9c: 8f:3a:1f:9f:66:1f:c6:45:a4:6e:0a:ba:2f:ee:15:32:fd:21: 48:6d:9b:e8:83:87:b9:9b:7f:69:a9:16:9c:09:6b:2e:02:6b: e6:6c:35:c6:16:f0:9b:72:b6:14:e5:82:25:a7:f9:ba:67:a0: 27:91:87:2d:77:08:40:18:39:f7:3b:2a:c4:44:f0:48:52:c3: 52:c9:55:ad:ad:c1:8d:4f:2e:c5:9e:d2:81:c3:6b:8a:25:f3: bf:49:e4:0a:b6:43:70:24:30:43:f4:15:1b:bb:ab:e0:42:d0: d5:a0:d0:cd:88:41:9c:b8:fb:37:07:8f:8d:bf:12:31:32:cb: 83:4a:38:67:e7:a1:e5:8f:3b:36:bd:11:76:92:fe:68:63:45: 8c:d5:20:bd:13:e5:a0:a3:2a:36:f0:d7:e0:b1:f5:c7:1b:a1: 98:7d:71:87:49:08:a6:7a:11:f5:78:a7:65:da:65:11:fd:f6: e7:94:0b:06:54:d9:4f:c8:c9:4f:d2:49:4b:49:c0:be:c7:82: 31:4a:53:9f:52:93:3b:59:3c:ac:a9:11:d1:8b:da:27:24:eb: ba:a7:a2:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE Mzg3MjYzQjgwHhcNMjUwNDAzMDM1OTE3WhcNMjUwNDEwMDM1OTE3WjAYMRYwFAYD VQQDEw02N2VlMDc5NS03NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8HgYgeWVmZu9W7egEOd2j9lifUi/Zx5DYi/B8/uAKV0N0anijHyURFHk5Xu +Yqn4z5vUXUYK0eZQq6Pw95jL/YwiAjfuZqDC6/Fl9itgTp/dvCEc9139brO8k/o DRPqQI723gygGOHyVoC6DPBFBZYzB8Ds//8HmxldbphRDg7vBERU11QbyeaJUskW eAkqK+zsQSwHfCL0fuDQObMoK3CWko4jS6NcjyLcenIbhVmmv1EtMRUpy515nldN t8TbZ69i/xIRYazebQX/ImdSz6MKc6FQf5lnpJWfjBURGmX9uWYWqbrcTqOu/2zM ApulFYaOnUkqpgtFTh8+7lOr3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZbiwfN wj+Armq86Ds/EIxoZpMEMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2 NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVaPYYMo3knMa2+RRZkk8i94iv/WfPFqo+cBtJ6H2NFyl8I5yPOh+f Zh/GRaRuCrov7hUy/SFIbZvog4e5m39pqRacCWsuAmvmbDXGFvCbcrYU5YIlp/m6 Z6AnkYctdwhAGDn3OyrERPBIUsNSyVWtrcGNTy7FntKBw2uKJfO/SeQKtkNwJDBD 9BUbu6vgQtDVoNDNiEGcuPs3B4+NvxIxMsuDSjhn56Hljzs2vRF2kv5oY0WM1SC9 E+Wgoyo28NfgsfXHG6GYfXGHSQimehH1eKdl2mUR/fbnlAsGVNlPyMlP0klLScC+ x4IxSlOfUpM7WTysqRHRi9onJOu6p6K6 -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:18 2025 by rpki-client