$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: yifDGKNP5RcpufnTXVlW9OqkOQ4bVd64Xdoz759m6Gg= Subject key identifier: 6F:2C:C0:B4:77:7E:62:5E:18:D0:21:02:63:4B:1B:E0:4C:39:3E:2F Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0125 Signing time: Sat 29 Mar 2025 04:07:26 +0000 Manifest this update: Sat 29 Mar 2025 04:07:25 +0000 Manifest next update: Sat 05 Apr 2025 04:07:25 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: NpH1p6KVhZy+tpgqE4OOGZXhxJqmFVZpb6bg02wMPvE=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: W2nP9JOONlKqK4NCPj/Qx89sx6/xDl/kU79SU2cQL5s=) 3: 6171A1E0F3FC11EF8D463030C4F9AE02.roa (hash: SaPyXfhw3tZDk0uJ1qGtWHP6Pbo8zXu054TW5a1GfAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E Validity Not Before: Mar 29 04:07:25 2025 GMT Not After : Apr 5 04:07:25 2025 GMT Subject: CN=67e771fd-073d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:ab:db:6a:ee:fc:7d:8f:be:d8:4c:bb:3e: f8:81:ab:36:89:e9:5f:15:8c:40:8e:8c:77:fc:09: 37:53:70:2a:cf:ce:a9:61:42:d1:59:93:75:f8:26: 04:fe:2c:75:08:9e:5a:b9:17:0c:d4:56:6b:31:a5: fd:d3:1c:99:1b:31:d2:64:38:4c:d7:07:1d:1e:d1: 27:e3:3d:36:7e:2b:05:32:c1:1d:3f:2c:ed:7c:2f: ad:ef:f7:d4:29:60:25:b7:0c:43:59:a5:2b:69:8b: 5c:a5:2e:7f:e4:36:c7:d4:90:fd:ae:30:aa:f7:49: 54:03:44:08:7c:12:97:7e:2e:0f:35:84:b2:df:96: 0a:c4:81:f9:9d:30:4e:ad:7a:e8:61:00:80:48:87: 3d:6a:ba:a5:0b:2d:e3:48:3a:26:05:d2:e7:a7:5f: 7f:1d:a7:7a:85:32:a3:fd:7b:2a:ce:4d:dc:9c:8c: 7b:7b:6b:8c:b1:3d:23:7c:4d:61:56:b7:6b:52:d4: 6f:3f:a2:60:2f:f9:25:36:2d:66:52:4b:4d:2d:ec: e5:1d:a0:bf:9a:01:b2:6d:25:ac:34:5d:61:3e:2f: 93:35:06:28:1f:8c:f6:e8:29:45:36:60:e7:61:b9: 05:fc:23:1d:59:a7:f4:b9:e3:05:9c:36:d7:b5:7a: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:C0:B4:77:7E:62:5E:18:D0:21:02:63:4B:1B:E0:4C:39:3E:2F X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b8:35:b4:06:2c:fb:3e:15:ed:86:09:de:30:54:25:bf:e4: 1f:3b:b5:d0:97:a8:f2:e9:f5:0d:35:88:fa:e5:ae:ee:25:83: 01:9e:96:b8:6b:b9:e8:6e:5b:0a:79:32:46:9c:6d:e8:df:35: 41:7a:64:8a:08:a0:c9:bd:c5:00:92:cb:5e:27:62:3e:ff:a6: 4b:15:9c:6f:f7:67:d9:67:4e:12:51:de:79:0e:30:fe:8a:a5: ce:b5:27:32:34:83:73:42:4a:7d:fe:74:0e:d5:5d:a5:c5:d3: 3d:a7:bb:00:ab:5e:df:77:53:98:ec:44:f4:b9:49:9a:07:c2: bd:47:42:41:78:06:6d:34:2e:d6:3a:5c:11:c8:9e:6c:07:7e: f9:d8:d7:e3:09:b2:19:cc:ad:c1:36:3e:5a:a2:cf:92:4a:2d: b5:d7:04:d1:93:12:2d:aa:ac:11:50:af:dc:34:2d:db:cd:73: 1a:96:8a:0b:b6:b7:55:c0:ac:a9:fb:03:52:f1:4d:f6:19:57: bc:80:1b:f3:69:33:21:57:4e:7d:e9:9e:17:d9:c1:ac:2a:a1: 3c:ef:1b:16:1c:9a:50:f4:d9:d3:45:f6:75:2a:a6:30:a9:52: df:cc:d0:e9:45:0e:85:78:66:67:30:e4:02:d9:37:62:91:ff: ac:0d:ae:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUwMzI5MDQwNzI1WhcNMjUwNDA1MDQwNzI1WjAYMRYwFAYD VQQDEw02N2U3NzFmZC0wNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1Or22ru/H2PvthMuz74gas2ielfFYxAjox3/Ak3U3Aqz86pYULRWZN1+CYE /ix1CJ5auRcM1FZrMaX90xyZGzHSZDhM1wcdHtEn4z02fisFMsEdPyztfC+t7/fU KWAltwxDWaUraYtcpS5/5DbH1JD9rjCq90lUA0QIfBKXfi4PNYSy35YKxIH5nTBO rXroYQCASIc9arqlCy3jSDomBdLnp19/Had6hTKj/Xsqzk3cnIx7e2uMsT0jfE1h VrdrUtRvP6JgL/klNi1mUktNLezlHaC/mgGybSWsNF1hPi+TNQYoH4z26ClFNmDn YbkF/CMdWaf0ueMFnDbXtXr6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8swLR3 fmJeGNAhAmNLG+BMOT4vMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCuDW0Biz7PhXthgneMFQlv+QfO7XQl6jy6fUNNYj65a7uJYMBnpa4 a7noblsKeTJGnG3o3zVBemSKCKDJvcUAksteJ2I+/6ZLFZxv92fZZ04SUd55DjD+ iqXOtScyNINzQkp9/nQO1V2lxdM9p7sAq17fd1OY7ET0uUmaB8K9R0JBeAZtNC7W OlwRyJ5sB3752NfjCbIZzK3BNj5aos+SSi211wTRkxItqqwRUK/cNC3bzXMalooL trdVwKyp+wNS8U32GVe8gBvzaTMhV0596Z4X2cGsKqE87xsWHJpQ9NnTRfZ1KqYw qVLfzNDpRQ6FeGZnMOQC2Tdikf+sDa4b -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:07 2025 by rpki-client