$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft File: Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json) Hash identifier: ABYr5L0rUMuCyuv/X5lxxYhiDmbThkezrDqTwXJNSxs= Subject key identifier: 4F:03:A2:AD:FB:58:A4:CF:EE:8B:C1:1E:A5:A4:2B:45:97:7F:3A:18 Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF Certificate issuer: /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft Manifest number: 0571 Signing time: Sat 12 Apr 2025 22:57:31 +0000 Manifest this update: Sat 12 Apr 2025 22:57:31 +0000 Manifest next update: Sat 19 Apr 2025 22:57:31 +0000 Files and hashes: 1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: YUzSOwKmDbNXvkabmpa/X1Ntg9KXKMsGI6eQhvjgRp4=) 2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: F+eusEd7GL0ODjW6lYLQdd8QnZrTI3K+yhDDHvuA9Zk=) 3: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: j1jidqxJCotjIETFLxyNEiGFOvwt1GdIG0ZptBesQUc=) 4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: ZuWliTIGvlhIvvjXehnw9RrKZY3Tr7AfPlrqcRHIwUM=) 5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: i+5d2nxoXTBSkmi7U0mLeacCYMyYuYpYdzVQzCXwi0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF Validity Not Before: Apr 12 22:57:31 2025 GMT Not After : Apr 19 22:57:31 2025 GMT Subject: CN=67faefdb-95c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1a:77:3a:ef:2b:69:b0:cf:f2:01:41:ec:dc: a5:c2:1b:db:48:53:1c:1e:8e:ba:2c:35:88:52:c9: 54:7c:d5:31:7e:63:1d:c4:b1:ad:fd:de:d1:42:b7: 72:54:37:38:61:76:1a:8e:a6:e4:e7:ed:17:b7:3a: 7b:6c:53:5b:f3:5f:59:e1:08:95:78:7e:c5:39:9b: 72:fc:29:16:ee:cd:2c:88:c9:fa:9e:86:60:4d:4c: b2:a9:6b:6e:a4:73:4e:de:ac:ba:a5:6f:6a:b1:38: 34:f5:71:4b:e9:dd:40:66:4f:1b:46:a4:5e:fe:41: b5:81:c8:55:cd:4b:58:60:66:df:34:fe:21:27:a3: 71:e2:7d:cf:f5:59:44:fb:55:3c:7b:2e:b3:ec:b6: 63:d9:7f:13:82:2b:90:b0:05:29:40:56:5a:b3:8c: 9b:fe:7c:3b:95:dc:1c:c5:87:02:10:99:ca:90:d9: aa:ef:2b:62:14:d2:5b:37:ef:bb:c1:02:09:f1:dc: c0:89:f9:74:9a:a9:01:79:3b:b4:dd:6e:7e:3f:82: 9f:59:02:46:db:89:d5:0b:95:4e:b7:8c:cc:66:dd: d7:34:f1:c3:3b:91:09:05:57:3c:50:7d:9c:bb:b2: b8:4c:85:7b:68:f3:95:61:18:1b:69:a6:e8:9f:5b: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:03:A2:AD:FB:58:A4:CF:EE:8B:C1:1E:A5:A4:2B:45:97:7F:3A:18 X509v3 Authority Key Identifier: keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9a:ea:58:bd:8a:98:98:6b:d6:17:49:8d:c0:48:b6:91:ad: c8:f8:19:b6:10:c6:ff:fc:ae:c5:03:17:f7:69:a8:c0:11:f7: 91:c3:8d:fd:11:4b:51:2a:0f:3a:47:0d:39:0c:35:a7:6e:f3: a2:9e:52:7c:eb:b7:ce:56:ad:8a:bf:f7:fd:70:cf:0e:4a:c5: 51:99:04:84:2a:f6:b3:44:6f:54:92:91:c9:23:49:2b:ea:1f: 6c:37:7e:a3:6e:4e:29:fd:82:4c:04:12:80:0c:04:d3:0e:8c: 5f:6a:66:e3:cb:80:a9:62:1a:8e:bf:fc:07:ae:c9:c8:5d:28: 33:e2:b2:a8:f5:77:f7:f9:37:8d:85:01:1a:76:82:6b:5f:73: 0e:8d:aa:a6:6f:fe:e4:7a:d1:1b:e1:c6:52:df:0a:be:e2:f3: c0:51:49:da:f1:06:5b:2c:cc:3f:bd:78:5b:e8:32:13:fb:8b: 15:8c:77:2d:f0:2c:c8:2a:d1:03:ca:2a:d9:1e:16:cd:20:a0: 4a:ae:89:51:dc:90:c0:06:09:44:10:df:49:f4:50:80:f2:bb: d8:5b:02:ee:7c:47:1b:7a:a2:08:6e:fb:12:54:f3:5d:c1:d8: d6:e2:72:58:64:08:8e:3f:3e:c3:c8:a9:cd:9d:22:9e:47:9a: c6:44:a0:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF RTVBMDFDQkYwHhcNMjUwNDEyMjI1NzMxWhcNMjUwNDE5MjI1NzMxWjAYMRYwFAYD VQQDEw02N2ZhZWZkYi05NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xp3Ou8rabDP8gFB7NylwhvbSFMcHo66LDWIUslUfNUxfmMdxLGt/d7RQrdy VDc4YXYajqbk5+0Xtzp7bFNb819Z4QiVeH7FOZty/CkW7s0siMn6noZgTUyyqWtu pHNO3qy6pW9qsTg09XFL6d1AZk8bRqRe/kG1gchVzUtYYGbfNP4hJ6Nx4n3P9VlE +1U8ey6z7LZj2X8TgiuQsAUpQFZas4yb/nw7ldwcxYcCEJnKkNmq7ytiFNJbN++7 wQIJ8dzAifl0mqkBeTu03W5+P4KfWQJG24nVC5VOt4zMZt3XNPHDO5EJBVc8UH2c u7K4TIV7aPOVYRgbaabon1ubGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8Doq37 WKTP7ovBHqWkK0WXfzoYMB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3 RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0U1NC9CRjlGQ0FGMEQ3RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tF Q3JVbW9VSzExNzN1V2dITDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmupYvYqYmGvWF0mNwEi2ka3I+Bm2EMb//K7FAxf3aajAEfeRw439 EUtRKg86Rw05DDWnbvOinlJ867fOVq2Kv/f9cM8OSsVRmQSEKvazRG9UkpHJI0kr 6h9sN36jbk4p/YJMBBKADATTDoxfambjy4CpYhqOv/wHrsnIXSgz4rKo9Xf3+TeN hQEadoJrX3MOjaqmb/7ketEb4cZS3wq+4vPAUUna8QZbLMw/vXhb6DIT+4sVjHct 8CzIKtEDyirZHhbNIKBKrolR3JDABglEEN9J9FCA8rvYWwLufEcbeqIIbvsSVPNd wdjW4nJYZAiOPz7DyKnNnSKeR5rGRKB1 -----END CERTIFICATE-----Generated at Sun Apr 13 01:50:49 2025 by rpki-client