$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json) Hash identifier: BXowr+pS3Bp+iuuKvEa/88g6dbcZmtM9fCboUyf6x2Q= Subject key identifier: FB:12:2E:54:76:92:2E:90:FB:B4:A1:2D:3D:A5:F1:0B:BC:20:75:07 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft Manifest number: 0511 Signing time: Sat 12 Apr 2025 23:14:51 +0000 Manifest this update: Sat 12 Apr 2025 23:14:50 +0000 Manifest next update: Sat 19 Apr 2025 23:14:50 +0000 Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: Pk2Hsi6rQgJ0xenEA+j8pNeKPZhJhR05gHlce9NOpdA=) 2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DeWvXrtTOlNASLEtVwCRq5xJVs2BWXsb8zrs6Aq/kZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Apr 12 23:14:50 2025 GMT Not After : Apr 19 23:14:50 2025 GMT Subject: CN=67faf3ea-c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:ab:12:3b:27:85:f6:37:39:93:28:5f:33: 64:1b:3a:be:75:8c:99:76:ff:d1:a0:bd:b3:aa:03: b3:1e:5a:ac:7f:1b:2f:d0:94:fb:6a:1a:0a:36:bb: 19:52:46:b3:7f:11:26:a3:bf:1d:8d:04:a6:23:f8: 60:29:c3:7c:16:f4:33:c0:8d:d7:8c:ca:0e:46:d7: 74:be:e1:d0:7f:e4:24:a9:47:6e:76:06:30:99:47: 86:e3:05:df:5c:54:c9:6d:93:6d:bc:d4:7c:7b:d5: 2c:9a:04:d3:8f:c4:7a:1a:9c:3c:2b:f6:42:b1:f6: d3:2b:d9:93:53:64:33:20:93:a4:f0:e7:f5:d2:84: 4d:c9:27:bd:90:45:1d:96:95:ba:de:3f:0b:b1:05: ed:dd:12:ed:d6:69:1e:05:8c:92:f9:e6:09:4d:8d: 34:3f:b8:00:1c:0e:dd:f0:79:e7:18:e8:44:4c:be: 98:6d:e1:49:f0:77:5c:1a:73:13:bb:97:a6:1f:f8: 68:9d:75:94:ad:8e:18:e5:f9:44:19:70:58:af:7c: e9:51:bd:26:b1:4a:51:45:a9:56:53:94:7c:13:ad: 8d:bd:05:b9:d6:5c:31:9c:8b:ea:f0:60:70:03:c4: 21:47:0c:3b:ba:ee:25:bb:a8:9c:65:c7:5a:69:c6: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:2E:54:76:92:2E:90:FB:B4:A1:2D:3D:A5:F1:0B:BC:20:75:07 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:b9:df:7c:c5:0f:33:77:47:6a:3a:67:a0:0e:8e:2c:e1: 75:08:14:8a:1a:f6:16:5d:e6:ba:52:cc:7e:08:83:05:86:e8: b0:ac:c2:df:1b:71:3c:92:61:c2:40:27:8f:99:8d:ab:9c:34: d9:41:67:b6:2b:d6:3c:2a:b8:3a:c1:f9:cc:3f:bc:fd:d0:78: 5c:1d:0b:64:34:d4:32:ff:b1:9d:f3:b7:62:ce:44:3b:ac:44: cd:fb:39:95:71:8a:2a:c8:84:eb:48:4a:8b:88:11:e6:f8:e8: 13:8a:a5:03:b8:e6:90:98:d6:e5:05:c2:8b:67:ad:8d:91:3b: f0:96:d5:a1:cd:df:66:9a:1d:95:4c:14:3a:f1:8c:26:88:4f: c1:61:58:3f:97:6a:ce:ac:0f:3c:2d:ee:41:bd:5d:e2:db:04: 14:37:0c:e0:38:74:ad:89:bb:27:23:66:c7:34:58:c0:2d:d2: 84:ea:13:54:aa:c4:4e:6f:0e:d0:cf:67:20:89:62:2e:20:d5: 5c:bb:82:07:eb:08:21:b7:45:c3:2f:97:ba:78:d2:13:b0:72: 44:dd:6b:fc:8f:64:2a:97:a3:cf:77:d2:c5:92:eb:1c:b8:31: 53:3e:52:41:78:6d:f2:15:b2:92:ee:17:3c:55:13:3d:e2:c5: c7:6b:6e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUwNDEyMjMxNDUwWhcNMjUwNDE5MjMxNDUwWjAYMRYwFAYD VQQDEw02N2ZhZjNlYS1jNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjqrEjsnhfY3OZMoXzNkGzq+dYyZdv/RoL2zqgOzHlqsfxsv0JT7ahoKNrsZ UkazfxEmo78djQSmI/hgKcN8FvQzwI3XjMoORtd0vuHQf+QkqUdudgYwmUeG4wXf XFTJbZNtvNR8e9UsmgTTj8R6Gpw8K/ZCsfbTK9mTU2QzIJOk8Of10oRNySe9kEUd lpW63j8LsQXt3RLt1mkeBYyS+eYJTY00P7gAHA7d8HnnGOhETL6YbeFJ8HdcGnMT u5emH/honXWUrY4Y5flEGXBYr3zpUb0msUpRRalWU5R8E62NvQW51lwxnIvq8GBw A8QhRww7uu4lu6icZcdaacYumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsSLlR2 ki6Q+7ShLT2l8Qu8IHUHMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2urnffMUPM3dHajpnoA6OLOF1CBSKGvYWXea6Usx+CIMFhuiwrMLf G3E8kmHCQCePmY2rnDTZQWe2K9Y8Krg6wfnMP7z90HhcHQtkNNQy/7Gd87dizkQ7 rETN+zmVcYoqyITrSEqLiBHm+OgTiqUDuOaQmNblBcKLZ62NkTvwltWhzd9mmh2V TBQ68YwmiE/BYVg/l2rOrA88Le5BvV3i2wQUNwzgOHStibsnI2bHNFjALdKE6hNU qsRObw7Qz2cgiWIuINVcu4IH6wght0XDL5e6eNITsHJE3Wv8j2Qql6PPd9LFkusc uDFTPlJBeG3yFbKS7hc8VRM94sXHa24T -----END CERTIFICATE-----Generated at Sun Apr 13 03:23:22 2025 by rpki-client