$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft File: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json) Hash identifier: 4xYbjOuC4U+cqMJsh9755r/pp2PEvmZsl4GahmEynG0= Subject key identifier: E3:FA:40:30:99:B0:1A:32:36:4D:83:2F:0D:4C:61:C3:03:94:6F:80 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft Manifest number: 19E7 Signing time: Sat 12 Apr 2025 16:19:34 +0000 Manifest this update: Sat 12 Apr 2025 16:19:34 +0000 Manifest next update: Sat 19 Apr 2025 16:19:34 +0000 Files and hashes: 1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: ofXBFvvZco5mKMGFOEWisZl5UvRpVOgcHgYV0MneasE=) 2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: zSKXyhNbfFoYNCqEVuHbtopb0K0RjSYVs5+6fMK45yM=) 3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: TNm1D3H84N7whf8ekQ/vCF3rhsZGPVYvMkkPOGLONIM=) 4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: 8/w05fSu74dL03k0q9KVl8WrlCWTBNHjvuwvJNrIN8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6665 (0x1a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Apr 12 16:19:34 2025 GMT Not After : Apr 19 16:19:34 2025 GMT Subject: CN=67fa9296-dc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:6a:8a:c3:a3:fa:fb:53:48:50:bf:2d:be: 48:ec:8f:8c:23:54:44:28:3a:9e:bf:80:ec:35:b3: 89:58:e6:e0:d9:47:29:ff:a4:90:e1:cd:af:78:0c: b5:9a:cd:4b:77:53:1a:ee:73:36:7c:dc:c8:8c:01: 52:20:f6:7f:a8:ac:6f:9d:ae:d1:d8:d5:03:52:37: 89:43:5e:91:bd:89:63:44:8c:68:a5:98:c8:04:8b: 57:bf:8d:12:87:b5:36:d2:69:2e:b1:0a:82:f6:17: 75:b1:b5:44:ff:19:38:57:21:4f:c0:eb:f7:2c:67: 2f:32:fa:61:01:3e:f9:01:5d:ce:30:6d:97:ad:54: 9a:fb:ae:8d:41:8c:44:bd:a1:0a:6d:53:e0:e8:45: 81:f6:a4:0a:32:a5:25:7d:64:1b:70:1c:b5:42:55: 3b:45:8f:1e:a3:31:1a:8b:fb:6c:44:75:44:b6:f6: 72:29:5d:22:97:73:b7:dc:0d:5a:28:69:f0:b1:3b: e4:ce:f6:e6:20:b6:0c:31:6a:1a:44:11:3a:c3:16: dd:ce:96:f0:7e:71:6f:15:9a:88:09:29:62:9f:01: 70:2d:25:8a:aa:5a:ec:6b:96:65:9e:2d:c9:93:06: 66:f6:07:08:9f:7c:8c:05:f5:f9:d4:27:42:9f:50: f6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FA:40:30:99:B0:1A:32:36:4D:83:2F:0D:4C:61:C3:03:94:6F:80 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:43:9a:8c:4a:8b:c7:b7:54:7b:de:10:af:ff:69:d4:f0:c5: cd:01:0f:71:4e:b8:d7:51:fb:3a:8b:71:1b:6e:e8:7f:a6:85: ee:a5:48:15:70:70:b7:84:d0:a7:f4:05:d1:6c:c4:72:98:4f: 22:08:59:fe:88:b0:0a:38:12:e2:57:20:4b:d4:07:b2:8d:d6: 09:5b:54:a2:11:0e:01:f2:00:a3:2a:0e:52:df:75:67:93:ef: 12:a4:a2:b1:3d:9d:2f:83:56:22:34:8b:cd:ea:ca:c9:bc:6a: e1:d0:70:92:5c:59:75:75:c2:cb:cd:69:37:35:44:51:b1:2e: 57:9f:1a:87:19:bb:d2:c5:8c:9e:93:4f:ca:2e:28:40:f7:db: 3f:4d:ff:19:92:fa:eb:1b:08:2f:ea:aa:0a:18:ec:17:cb:bb: 98:c0:f0:52:fa:22:fe:32:e1:18:08:20:a7:e8:8a:50:64:62: 23:29:f8:67:ed:ae:9d:26:b7:4e:0a:0b:46:3f:a9:71:30:85: 36:50:83:52:c8:3e:70:f7:b3:a8:a7:31:e8:12:db:6c:ac:e4: f1:7d:89:a3:23:54:4a:d7:c4:c4:f8:a4:74:fe:b3:ea:1a:2a: c7:15:d6:22:42:93:15:8c:ef:4f:84:7f:09:ec:1a:21:52:79: b1:69:97:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwNDEyMTYxOTM0WhcNMjUwNDE5MTYxOTM0WjAYMRYwFAYD VQQDEw02N2ZhOTI5Ni1kYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8xqisOj+vtTSFC/Lb5I7I+MI1REKDqev4DsNbOJWObg2Ucp/6SQ4c2veAy1 ms1Ld1Ma7nM2fNzIjAFSIPZ/qKxvna7R2NUDUjeJQ16RvYljRIxopZjIBItXv40S h7U20mkusQqC9hd1sbVE/xk4VyFPwOv3LGcvMvphAT75AV3OMG2XrVSa+66NQYxE vaEKbVPg6EWB9qQKMqUlfWQbcBy1QlU7RY8eozEai/tsRHVEtvZyKV0il3O33A1a KGnwsTvkzvbmILYMMWoaRBE6wxbdzpbwfnFvFZqICSlinwFwLSWKqlrsa5Zlni3J kwZm9gcIn3yMBfX51CdCn1D2jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP6QDCZ sBoyNk2DLw1MYcMDlG+AMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR WVExVTlJMWJQaHFuUTZJQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Q5qMSovHt1R73hCv/2nU8MXNAQ9xTrjXUfs6i3Ebbuh/poXupUgV cHC3hNCn9AXRbMRymE8iCFn+iLAKOBLiVyBL1AeyjdYJW1SiEQ4B8gCjKg5S33Vn k+8SpKKxPZ0vg1YiNIvN6srJvGrh0HCSXFl1dcLLzWk3NURRsS5XnxqHGbvSxYye k0/KLihA99s/Tf8ZkvrrGwgv6qoKGOwXy7uYwPBS+iL+MuEYCCCn6IpQZGIjKfhn 7a6dJrdOCgtGP6lxMIU2UINSyD5w97OopzHoEttsrOTxfYmjI1RK18TE+KR0/rPq GirHFdYiQpMVjO9PhH8J7BohUnmxaZd+ -----END CERTIFICATE-----Generated at Sun Apr 13 05:43:27 2025 by rpki-client