$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft File: GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json) Hash identifier: jyqnfLkbPAftilvY/QvyXNwKzY8wnmihtifDHek2lCk= Subject key identifier: 40:8E:D5:9C:4F:1C:6C:64:9E:0F:B6:78:BB:AD:AD:76:48:45:36:A6 Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 Certificate issuer: /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft Manifest number: 01A4 Signing time: Sat 29 Mar 2025 02:50:54 +0000 Manifest this update: Sat 29 Mar 2025 02:50:53 +0000 Manifest next update: Sat 05 Apr 2025 02:50:53 +0000 Files and hashes: 1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: Vznm56Bl8E+JRS8MZyJ6PvyLHVMVqGysWedIQkelYDU=) 2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: ZsCxHaQ7s0gEoQ1Y8qF+doxJ6vZnHqWDBkgsvdeKdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D194C Validity Not Before: Mar 29 02:50:53 2025 GMT Not After : Apr 5 02:50:53 2025 GMT Subject: CN=67e7600e-e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:39:4f:e7:66:75:c6:fb:63:ed:7c:e8:fe:5b: e6:b6:2f:2d:62:f9:ce:c3:96:1e:a1:03:f3:ab:7b: 86:77:69:d7:e4:c5:13:9e:50:47:b6:4f:99:a5:bd: 1b:e4:66:50:70:9a:50:b9:2d:40:b0:a0:5a:fe:41: 02:f5:95:95:66:9d:c6:45:c8:f0:50:de:78:d3:08: d6:7d:9b:69:42:52:94:a2:27:d6:20:e3:1c:5d:c3: 16:0a:99:38:60:a5:35:28:70:aa:8e:cf:3a:03:e4: 88:89:cb:27:d2:5b:9e:23:6c:df:35:e8:66:cc:2e: 53:00:67:d4:9e:81:90:c0:d0:b6:f2:08:58:32:03: 4f:c4:a2:6e:f4:73:72:8c:41:02:ff:90:35:6f:4a: 9a:36:89:ec:c2:b5:42:1a:13:02:60:5b:a2:89:7b: 1b:3a:b2:8e:ac:67:c5:78:c2:1f:29:bd:66:7c:86: ee:58:4d:fa:57:1a:6b:ba:20:3c:3b:39:5f:19:ae: c3:96:fb:dd:10:84:24:fd:f5:9d:b1:a5:8e:28:92: 21:c2:76:74:d7:d2:c6:5e:34:b2:3f:6c:33:87:df: a2:af:19:00:9f:68:05:62:7b:f3:54:c1:de:bd:4b: b4:c6:c5:6b:d8:c8:7a:e4:ec:72:a6:d3:4a:0c:4d: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8E:D5:9C:4F:1C:6C:64:9E:0F:B6:78:BB:AD:AD:76:48:45:36:A6 X509v3 Authority Key Identifier: keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:11:2e:22:19:40:8e:52:ae:76:48:9b:cf:ef:ee:03:d1:97: c1:5e:fd:5c:59:d1:53:16:b6:c2:24:8f:a3:c4:e1:bd:8a:03: 69:b6:3d:af:55:1e:fe:06:69:43:08:94:56:79:40:ea:be:10: 10:8a:7c:38:eb:8f:b8:69:88:d5:d3:52:f7:4c:cd:88:64:99: a0:01:79:59:a0:1b:83:32:55:b6:c7:38:2d:08:cb:4e:35:83: a0:40:8d:40:2d:cf:c7:26:a8:57:4f:89:ee:32:d8:3b:eb:ee: c9:02:94:86:79:da:57:cf:69:9a:1d:24:e6:2c:9b:cf:3a:38: 68:79:e6:6f:9e:ba:be:06:53:6f:f0:f2:15:03:07:f8:03:2b: c6:8a:41:4b:20:86:20:57:67:ba:82:ea:b4:23:dc:f7:d7:07: 08:02:e1:dc:e6:c4:db:b5:f0:4e:e7:ef:04:2d:8c:6f:3b:ef: 29:8c:1b:68:2e:73:9f:d8:65:5c:82:bd:57:0e:0b:7d:c4:ac: c8:69:45:d3:61:04:a3:a8:8c:92:31:9c:58:90:5e:86:a6:d6: 80:f2:23:3d:2a:38:01:2d:b9:97:a2:e0:68:00:e0:9c:67:86: 21:b6:35:5b:5e:75:0c:18:ea:1c:b7:45:62:13:29:44:27:8a: b3:07:e7:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5NEMxMTAvBgNVBAUTKDFBRTlBRjNBQkI4QTczRUYyNkY5MzRGOThCM0E2Q0FC OTUxN0FDQTYwHhcNMjUwMzI5MDI1MDUzWhcNMjUwNDA1MDI1MDUzWjAYMRYwFAYD VQQDEw02N2U3NjAwZS1lNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+jlP52Z1xvtj7Xzo/lvmti8tYvnOw5YeoQPzq3uGd2nX5MUTnlBHtk+Zpb0b 5GZQcJpQuS1AsKBa/kEC9ZWVZp3GRcjwUN540wjWfZtpQlKUoifWIOMcXcMWCpk4 YKU1KHCqjs86A+SIicsn0lueI2zfNehmzC5TAGfUnoGQwNC28ghYMgNPxKJu9HNy jEEC/5A1b0qaNonswrVCGhMCYFuiiXsbOrKOrGfFeMIfKb1mfIbuWE36VxpruiA8 OzlfGa7DlvvdEIQk/fWdsaWOKJIhwnZ019LGXjSyP2wzh9+irxkAn2gFYnvzVMHe vUu0xsVr2Mh65OxyptNKDE1mrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECO1ZxP HGxkng+2eLutrXZIRTamMB8GA1UdIwQYMBaAFBrprzq7inPvJvk0+Ys6bKuVF6ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTk0Qy8xMTlGRUI0ODhB NzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2MtOG0tVFQ1aXpwc3E1VVhy S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1bXZPcnVLYy04bS1UVDVpenBzcTVVWHJLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTk0Qy8xMTlGRUI0ODhBNzQxMUVEQjMyMTNFM0RDNEY5QUUwMi9HdW12T3J1S2Mt OG0tVFQ1aXpwc3E1VVhyS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoES4iGUCOUq52SJvP7+4D0ZfBXv1cWdFTFrbCJI+jxOG9igNptj2v VR7+BmlDCJRWeUDqvhAQinw464+4aYjV01L3TM2IZJmgAXlZoBuDMlW2xzgtCMtO NYOgQI1ALc/HJqhXT4nuMtg76+7JApSGedpXz2maHSTmLJvPOjhoeeZvnrq+BlNv 8PIVAwf4AyvGikFLIIYgV2e6guq0I9z31wcIAuHc5sTbtfBO5+8ELYxvO+8pjBto LnOf2GVcgr1XDgt9xKzIaUXTYQSjqIySMZxYkF6GptaA8iM9KjgBLbmXouBoAOCc Z4YhtjVbXnUMGOoct0ViEylEJ4qzB+fL -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:10 2025 by rpki-client