$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json) Hash identifier: 98DZM6YYYlHeALQljIfD5he+o32aznj2NMgIxi5S6Kw= Subject key identifier: D2:F8:0C:10:2B:81:62:8D:E1:63:AD:56:46:4C:50:01:0C:D9:79:9D Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft Manifest number: 87 Signing time: Sat 05 Apr 2025 05:52:01 +0000 Manifest this update: Sat 05 Apr 2025 05:52:00 +0000 Manifest next update: Sat 12 Apr 2025 05:52:00 +0000 Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: gVHVpzcsqubQB6VpVR144p6Y1nqQ69Ed+NgRAQF/Bl8=) 2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: zLr4joEY+P4VPtuV8/aIjLwuAD3fE/qCh+JRJT72wJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B Validity Not Before: Apr 5 05:52:00 2025 GMT Not After : Apr 12 05:52:00 2025 GMT Subject: CN=67f0c500-71a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:9d:31:fa:cb:ea:44:8e:af:77:aa:c0:e6: 30:b4:dd:1b:6e:f1:27:db:5f:b2:82:fa:d9:c3:fe: f7:2d:74:8d:4e:0e:ab:34:a0:ff:2a:7a:b3:51:a1: 57:1e:0e:81:51:f0:8c:cf:4b:89:d5:31:3e:ef:ba: 27:06:71:df:fd:7c:5e:4c:ec:a8:8b:4f:e2:64:fa: 75:48:c7:a2:73:a8:cf:04:c2:12:ca:51:f5:82:23: 50:07:ce:8d:28:3e:bc:fb:08:16:26:ac:b1:dd:1e: 12:98:39:a1:30:0e:d8:02:3f:07:37:15:e1:53:4c: f1:94:0d:e2:30:f6:da:af:32:b7:19:68:ec:12:5b: c7:ca:ee:ad:48:c3:d1:ee:90:fe:9a:8f:5d:fc:06: 8a:48:5f:16:da:3a:17:46:69:bd:45:34:50:91:dd: 56:76:a1:b4:9d:a9:b0:72:6a:9b:47:77:fa:bc:4b: cd:85:5f:98:03:c1:56:72:49:3d:b2:49:06:24:57: 1c:04:3d:8e:5d:5d:be:5f:0f:1a:8f:f4:0c:13:ad: c7:e5:06:d5:5a:81:29:0d:fd:c0:f8:10:7d:f1:68: 31:0d:e2:9f:ed:f4:4a:05:61:aa:eb:d8:de:45:f0: fe:45:08:40:65:48:0e:4d:2e:9f:d5:46:10:95:9f: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:0C:10:2B:81:62:8D:E1:63:AD:56:46:4C:50:01:0C:D9:79:9D X509v3 Authority Key Identifier: keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d1:91:66:af:bb:3e:2d:e8:df:1c:c7:25:98:b2:71:6f:4c: 83:47:9d:98:05:dc:41:af:cb:05:2c:3a:0c:9e:79:0a:8e:b1: 5b:1d:af:ea:92:d4:49:34:24:00:58:e4:32:e4:12:9e:b0:c4: bf:b0:65:4c:84:9b:e3:de:26:29:ab:b9:38:03:ac:91:03:de: 81:dd:5d:cf:85:39:09:e3:47:9b:43:d4:38:18:b6:eb:bd:33: 80:d8:94:d5:ba:14:8f:f8:c0:69:5e:0d:51:8f:99:31:51:24: 07:59:16:de:69:88:b2:86:82:a9:c7:fe:e5:5e:08:23:05:e4: 27:47:ce:61:f9:1a:bf:f3:b4:b8:40:c0:1f:06:9f:09:2e:ed: 29:cb:89:1f:c4:02:d1:c9:d7:32:ba:bb:02:bb:47:c8:73:20: 3b:da:7c:7d:a5:77:32:df:70:a5:47:b4:6b:14:e5:31:0a:f2: 38:fa:8d:23:bf:a4:41:48:43:f6:26:ae:5a:27:38:8a:4e:f2: 75:18:c8:b1:31:a6:aa:01:56:3c:54:10:4f:35:84:b7:31:72: 06:68:d2:ad:6b:9d:6c:9f:a8:a1:3c:12:b2:91:42:fc:c9:d7: 10:81:e9:ef:7d:17:45:f3:a4:58:89:18:cb:b8:ea:b8:1c:21: 6e:03:d7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKDgwRTkyNzVCNkU2RUJDNkFENzU4NUQ3NkFGQjZBNDAw QjUxNDJDM0YwHhcNMjUwNDA1MDU1MjAwWhcNMjUwNDEyMDU1MjAwWjAYMRYwFAYD VQQDEw02N2YwYzUwMC03MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqOdMfrL6kSOr3eqwOYwtN0bbvEn21+ygvrZw/73LXSNTg6rNKD/KnqzUaFX Hg6BUfCMz0uJ1TE+77onBnHf/XxeTOyoi0/iZPp1SMeic6jPBMISylH1giNQB86N KD68+wgWJqyx3R4SmDmhMA7YAj8HNxXhU0zxlA3iMPbarzK3GWjsElvHyu6tSMPR 7pD+mo9d/AaKSF8W2joXRmm9RTRQkd1WdqG0namwcmqbR3f6vEvNhV+YA8FWckk9 skkGJFccBD2OXV2+Xw8aj/QME63H5QbVWoEpDf3A+BB98WgxDeKf7fRKBWGq69je RfD+RQhAZUgOTS6f1UYQlZ/WNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL4DBAr gWKN4WOtVkZMUAEM2XmdMB8GA1UdIwQYMBaAFIDpJ1tubrxq11hddq+2pAC1FCw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9DQ0U5OUQ3RTQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZHclhXRjEycjdha0FMVVVM RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dPa25XMjV1dkdyWFdGMTJyN2FrQUxVVUxEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9DQ0U5OUQ3RTQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZH clhXRjEycjdha0FMVVVMRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA30ZFmr7s+LejfHMclmLJxb0yDR52YBdxBr8sFLDoMnnkKjrFbHa/q ktRJNCQAWOQy5BKesMS/sGVMhJvj3iYpq7k4A6yRA96B3V3PhTkJ40ebQ9Q4GLbr vTOA2JTVuhSP+MBpXg1Rj5kxUSQHWRbeaYiyhoKpx/7lXggjBeQnR85h+Rq/87S4 QMAfBp8JLu0py4kfxALRydcyursCu0fIcyA72nx9pXcy33ClR7RrFOUxCvI4+o0j v6RBSEP2Jq5aJziKTvJ1GMixMaaqAVY8VBBPNYS3MXIGaNKta51sn6ihPBKykUL8 ydcQgenvfRdF86RYiRjLuOq4HCFuA9dw -----END CERTIFICATE-----Generated at Sun Apr 6 00:14:58 2025 by rpki-client