$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: DOjqPx34NdKPDRFSN/UgWbN6K24/1z4w0jWBs4U04zM= Subject key identifier: 3C:E5:7E:E4:D8:A9:86:6F:DC:4C:5D:34:5E:C1:CD:25:78:A3:31:3A Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 03E6 Signing time: Thu 03 Apr 2025 00:40:40 +0000 Manifest this update: Thu 03 Apr 2025 00:40:39 +0000 Manifest next update: Thu 10 Apr 2025 00:40:39 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: 41/umIbsSeeJjJ1C6ILY2CKjWUMqYixqSZHLnHKTfY0=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: oVUb29+C/dpDmyrIQ/S9XmPyQiqyJJ84om1g2jTlU5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D Validity Not Before: Apr 3 00:40:39 2025 GMT Not After : Apr 10 00:40:39 2025 GMT Subject: CN=67edd908-2476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:5f:4c:a8:f4:f0:ac:61:1a:96:e2:ef:1a: 4f:1f:be:52:81:e7:72:e1:04:d0:e9:33:da:1c:e1: 88:d0:66:50:21:36:00:f8:71:03:1f:0b:55:ec:a7: 56:a6:2c:db:2d:f1:02:f6:79:60:15:07:91:e0:81: f9:ae:6c:ed:18:a9:c5:01:fb:98:7e:db:d3:c2:98: 60:2b:84:d9:8f:01:f3:39:09:1a:25:da:2b:bc:ad: a9:c0:7e:b8:c1:d2:e7:26:85:c5:9d:85:8b:94:44: 1d:b4:a0:eb:c2:82:14:57:f5:30:d7:4e:39:a5:a9: 58:e2:7b:87:68:89:7c:27:a1:4f:c2:cd:0c:66:a4: 09:6a:9a:b7:d3:94:4b:dd:de:d9:d6:e0:87:66:f4: 3c:92:bf:76:9d:73:d7:ee:8a:e2:96:04:ad:c1:58: 0e:ca:6f:20:aa:85:91:95:27:21:ab:c2:f3:07:58: 63:e1:16:19:c0:6b:60:3f:01:83:b9:35:cc:c3:72: cd:dd:d5:e9:c1:72:2a:07:84:0d:0c:d8:9c:6b:15: a6:40:f6:5c:37:2c:ee:1e:d6:88:bb:26:65:8b:70: ab:f1:e0:e6:0a:2a:89:0c:ac:14:97:20:1c:3b:ea: 0f:aa:37:91:c4:50:42:bc:ad:da:ef:ec:c4:08:85: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:7E:E4:D8:A9:86:6F:DC:4C:5D:34:5E:C1:CD:25:78:A3:31:3A X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:47:1f:3d:fe:59:22:0d:d2:9c:d3:13:84:2b:4b:24:8a:90: 72:36:fb:e9:70:21:26:e0:7e:3a:b1:73:55:e9:a0:37:10:25: 6f:b7:ec:06:df:61:d3:ad:b6:30:b1:ff:35:ca:d2:a3:20:39: e2:7f:df:d3:04:97:fd:03:14:e1:8d:e1:c0:2c:e7:c3:41:1f: 1b:13:7f:07:bb:99:c3:59:a9:a5:a3:21:33:4c:fb:b7:76:24: 78:89:c1:ba:c6:b0:51:8b:67:69:f3:fc:50:66:3b:6e:fa:2f: b6:47:14:e4:55:df:5b:e3:6a:13:d2:b3:85:9b:a3:a3:cc:28: fa:de:48:3a:09:41:01:55:a7:be:58:61:5d:82:66:a9:45:5d: 10:da:be:49:c5:7b:9f:98:69:0f:63:fd:fb:90:cb:9b:b4:27: ed:3b:d7:2e:dc:26:cf:f9:26:57:ed:09:a0:4b:03:28:5a:42: f6:e9:f6:62:69:9e:ee:cd:b9:a1:96:6d:7b:58:0e:89:fe:c5: ca:e1:45:0a:9a:3f:0c:ea:73:6f:59:26:1e:4e:53:a5:db:df: 00:e9:a6:c5:a2:88:5a:80:90:6a:73:f2:2d:25:56:84:6f:d4: bd:65:e4:77:3a:e8:98:94:fb:80:5d:93:8d:41:bd:08:2e:58: cf:26:f9:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA0MDMwMDQwMzlaFw0yNTA0MTAwMDQwMzlaMBgxFjAUBgNV BAMTDTY3ZWRkOTA4LTI0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7RF9MqPTwrGEaluLvGk8fvlKB53LhBNDpM9oc4YjQZlAhNgD4cQMfC1Xsp1am LNst8QL2eWAVB5HggfmubO0YqcUB+5h+29PCmGArhNmPAfM5CRol2iu8ranAfrjB 0ucmhcWdhYuURB20oOvCghRX9TDXTjmlqVjie4doiXwnoU/CzQxmpAlqmrfTlEvd 3tnW4Idm9DySv3adc9fuiuKWBK3BWA7KbyCqhZGVJyGrwvMHWGPhFhnAa2A/AYO5 NczDcs3d1enBcioHhA0M2JxrFaZA9lw3LO4e1oi7JmWLcKvx4OYKKokMrBSXIBw7 6g+qN5HEUEK8rdrv7MQIhRDfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPOV+5Nip hm/cTF00XsHNJXijMTowHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhHHz3+WSIN0pzTE4QrSySKkHI2++lwISbgfjqxc1XpoDcQJW+37Abf YdOttjCx/zXK0qMgOeJ/39MEl/0DFOGN4cAs58NBHxsTfwe7mcNZqaWjITNM+7d2 JHiJwbrGsFGLZ2nz/FBmO276L7ZHFORV31vjahPSs4Wbo6PMKPreSDoJQQFVp75Y YV2CZqlFXRDavknFe5+YaQ9j/fuQy5u0J+071y7cJs/5JlftCaBLAyhaQvbp9mJp nu7NuaGWbXtYDon+xcrhRQqaPwzqc29ZJh5OU6Xb3wDppsWiiFqAkGpz8i0lVoRv 1L1l5Hc66JiU+4Bdk41BvQguWM8m+Sw= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:29 2025 by rpki-client