$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: 1gyFgIdtP5RXk8xpx32YAJl1gJplXTHORKwBixQ9SLA= Subject key identifier: 68:3A:03:5E:6C:2F:8D:82:5F:43:86:19:0A:FD:8A:AF:23:9D:98:72 Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 0414 Signing time: Sat 29 Mar 2025 00:44:03 +0000 Manifest this update: Sat 29 Mar 2025 00:44:02 +0000 Manifest next update: Sat 05 Apr 2025 00:44:02 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: 1PSbe/uqN2FYVcKsmQ9EFksA68sbgMUHH98X5tJjXN4=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D Validity Not Before: Mar 29 00:44:02 2025 GMT Not After : Apr 5 00:44:02 2025 GMT Subject: CN=67e74252-60f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:ec:6b:87:d6:0b:dc:4c:e2:62:ad:76:5f: 0c:e2:d9:95:35:fe:8e:99:f9:fc:44:fc:e3:60:91: 52:7b:6b:a2:d7:29:64:79:8a:32:50:90:85:7f:1a: ab:ca:67:79:94:e5:9c:fc:53:21:1b:47:d2:f4:4f: fb:4f:f0:a4:81:ef:52:8f:b4:2d:5f:da:d1:6e:a7: ee:42:c4:d8:49:9a:9f:d5:0d:ac:3d:88:22:ac:0b: 87:d8:ba:1d:40:42:96:90:2a:bd:a7:b4:cc:95:42: b7:7c:22:6c:e9:c0:8d:81:ac:3e:41:76:d0:a8:01: 77:2a:5a:36:af:3d:cc:43:84:0b:94:47:54:eb:6f: 4a:bc:c3:df:6a:75:ec:6c:8e:e3:06:a7:5a:4f:31: a8:16:48:07:02:a5:10:10:c2:da:be:37:b2:cb:15: 8a:2c:0c:40:e1:92:2c:1d:b7:be:7e:6b:e0:a6:76: a7:b0:d2:77:96:ad:80:28:d5:64:39:95:8f:10:ce: 24:46:1c:95:0f:84:6f:e9:f1:f1:64:07:a4:4b:3f: 86:af:85:48:12:37:61:b0:c5:23:06:a9:da:94:93: a9:c6:ed:18:ea:53:44:66:4f:56:47:7a:19:d0:68: 9c:7d:2f:30:c6:19:1d:0a:14:d4:ea:57:7a:5c:f5: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3A:03:5E:6C:2F:8D:82:5F:43:86:19:0A:FD:8A:AF:23:9D:98:72 X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d7:94:83:e7:10:8a:7f:48:c6:c1:62:00:b5:30:b8:b3:3f: 8e:6a:14:45:b7:6b:2c:68:6a:ab:d2:f4:da:c9:5d:15:e3:37: 0b:42:40:f4:d2:fc:7f:88:80:bd:9b:fb:bd:a7:34:8a:8c:5c: c6:31:c4:be:b1:93:21:9c:a1:66:ce:44:b7:58:91:40:9b:04: b9:3d:9b:3c:09:2d:99:5e:0f:45:5e:9f:41:08:66:b5:ba:85: 02:4c:b5:7f:21:68:d9:17:20:2b:41:63:99:ad:21:56:23:29: 35:53:a0:66:d5:e9:e0:74:f9:38:0f:73:2c:a1:96:a9:91:80: ec:11:21:c5:47:48:10:56:0e:4f:a3:78:90:36:7e:a2:6c:c8: 08:2b:46:04:d6:a5:25:66:f7:d0:da:e6:96:cf:3f:81:8b:75: b9:8c:f1:bf:d7:cf:f6:5a:20:58:9f:31:88:71:e6:11:b7:21: 7a:fb:d6:dd:26:79:b2:bc:ce:22:59:82:47:f4:80:c2:5f:84: 9e:bc:8d:52:46:f0:cf:a5:d7:ba:c1:f6:f9:97:df:18:72:80: 5a:03:66:a5:fc:4f:4f:b1:0d:82:28:2c:c8:a6:aa:a3:c7:8a: 1a:14:d0:b1:1d:99:52:d8:93:4d:6e:bf:5e:bb:c3:9c:c0:2f: 8d:9d:01:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwMzI5MDA0NDAyWhcNMjUwNDA1MDA0NDAyWjAYMRYwFAYD VQQDEw02N2U3NDI1Mi02MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFLsa4fWC9xM4mKtdl8M4tmVNf6Omfn8RPzjYJFSe2ui1ylkeYoyUJCFfxqr ymd5lOWc/FMhG0fS9E/7T/Ckge9Sj7QtX9rRbqfuQsTYSZqf1Q2sPYgirAuH2Lod QEKWkCq9p7TMlUK3fCJs6cCNgaw+QXbQqAF3Klo2rz3MQ4QLlEdU629KvMPfanXs bI7jBqdaTzGoFkgHAqUQEMLavjeyyxWKLAxA4ZIsHbe+fmvgpnansNJ3lq2AKNVk OZWPEM4kRhyVD4Rv6fHxZAekSz+Gr4VIEjdhsMUjBqnalJOpxu0Y6lNEZk9WR3oZ 0GicfS8wxhkdChTU6ld6XPWEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg6A15s L42CX0OGGQr9iq8jnZhyMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi15SD5xCKf0jGwWIAtTC4sz+OahRFt2ssaGqr0vTayV0V4zcLQkD0 0vx/iIC9m/u9pzSKjFzGMcS+sZMhnKFmzkS3WJFAmwS5PZs8CS2ZXg9FXp9BCGa1 uoUCTLV/IWjZFyArQWOZrSFWIyk1U6Bm1engdPk4D3MsoZapkYDsESHFR0gQVg5P o3iQNn6ibMgIK0YE1qUlZvfQ2uaWzz+Bi3W5jPG/18/2WiBYnzGIceYRtyF6+9bd JnmyvM4iWYJH9IDCX4SevI1SRvDPpde6wfb5l98YcoBaA2al/E9PsQ2CKCzIpqqj x4oaFNCxHZlS2JNNbr9eu8OcwC+NnQHZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:00 2025 by rpki-client