$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: M1YcS6DIGbJmXj+4ImlRxebClL0Bywgxn7suudZU304= Subject key identifier: 71:BF:43:0A:A4:CD:DD:F2:85:E0:7E:36:E2:5C:AD:67:22:5B:D9:E7 Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 01C4 Signing time: Thu 03 Apr 2025 02:18:31 +0000 Manifest this update: Thu 03 Apr 2025 02:18:31 +0000 Manifest next update: Thu 10 Apr 2025 02:18:31 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: 4prPPcnKBVjQClMUyP2X13amBOtTHCWhTwMpuv9OuY4=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC Validity Not Before: Apr 3 02:18:31 2025 GMT Not After : Apr 10 02:18:31 2025 GMT Subject: CN=67edeff7-0bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:35:1d:7a:e2:25:54:0e:97:7a:91:14:ba: 3f:1e:68:f8:00:94:4a:3b:e8:35:03:25:10:61:0d: 2d:15:ce:e4:6e:c2:27:9f:4e:52:30:23:25:67:91: 62:26:ed:db:4f:3f:3f:fe:4c:a4:02:62:bb:df:81: 4e:dc:12:98:1a:d8:6c:04:51:13:11:29:cb:29:72: c1:ec:56:95:b9:b0:a1:08:95:dd:f1:93:6b:e5:55: 9f:54:56:59:f0:67:68:38:68:fd:f3:1a:22:0f:59: 3a:05:2d:6e:8c:3e:6e:9c:28:a5:92:d5:32:02:28: 11:bd:f7:9f:8c:f0:2e:be:f6:7a:93:c9:67:d8:e2: 61:0f:40:5a:2b:5e:53:77:d1:f7:17:84:18:80:22: 95:d4:e9:40:15:a1:e5:b7:95:c8:40:e4:ce:00:c2: d4:04:5b:69:22:42:42:91:53:2a:6b:f8:94:3a:b8: ba:5f:2d:1c:76:5b:04:5d:54:19:91:7e:63:94:af: b0:3c:15:27:50:3a:38:bf:16:0e:71:9a:e7:7e:bb: 68:80:7f:a7:84:99:fb:ae:36:71:22:2a:0e:5d:a7: 76:c7:8e:28:e5:b3:68:ec:d7:a3:dd:08:a2:71:14: 27:f1:a8:28:84:38:0f:3d:b6:59:dd:ec:88:3a:9a: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BF:43:0A:A4:CD:DD:F2:85:E0:7E:36:E2:5C:AD:67:22:5B:D9:E7 X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b9:be:72:05:94:0d:93:c0:31:a5:01:8c:58:e3:5e:f8:13: a0:a0:7e:a7:cf:ed:4e:52:22:64:3f:37:6c:d4:b3:32:da:00: e7:a7:a0:01:50:0b:89:15:c3:5d:9b:ea:c5:e7:4e:23:4f:42: 8f:cb:1a:f5:48:56:9c:37:c9:78:16:f3:9c:5a:17:b6:f3:ee: e6:d6:b8:72:33:a4:76:31:7f:47:f9:23:11:93:d3:e9:c8:43: f2:6d:f5:83:b1:db:97:43:a0:78:d3:fe:ee:b9:bd:b9:8b:d3: ed:9e:a4:52:12:e0:b8:f5:8c:46:1a:94:01:d1:89:10:6c:19: c7:e1:e7:27:43:c1:c1:01:c7:6f:ef:5a:75:3e:56:bb:0d:83: 0a:6b:3c:f2:79:2a:75:0f:f8:d0:ba:22:e2:14:62:6e:c6:30: dc:5b:f2:b9:a3:a2:e7:13:69:d7:22:9a:4c:c1:ed:6c:f2:ec: d4:ca:95:c9:78:28:65:e9:13:6c:41:34:85:49:fd:38:cc:ac: ec:f5:bb:84:93:cf:2e:21:68:23:c4:19:db:72:00:96:b5:1e: c9:15:ea:67:c1:f6:85:86:1f:02:f5:d6:ea:a9:2f:b2:66:62: ac:ab:72:8a:49:83:3b:f5:ce:1f:f2:1a:c2:dd:d3:50:7a:66: df:b0:25:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUwNDAzMDIxODMxWhcNMjUwNDEwMDIxODMxWjAYMRYwFAYD VQQDEw02N2VkZWZmNy0wYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvg1HXriJVQOl3qRFLo/Hmj4AJRKO+g1AyUQYQ0tFc7kbsInn05SMCMlZ5Fi Ju3bTz8//kykAmK734FO3BKYGthsBFETESnLKXLB7FaVubChCJXd8ZNr5VWfVFZZ 8GdoOGj98xoiD1k6BS1ujD5unCilktUyAigRvfefjPAuvvZ6k8ln2OJhD0BaK15T d9H3F4QYgCKV1OlAFaHlt5XIQOTOAMLUBFtpIkJCkVMqa/iUOri6Xy0cdlsEXVQZ kX5jlK+wPBUnUDo4vxYOcZrnfrtogH+nhJn7rjZxIioOXad2x44o5bNo7Nej3Qii cRQn8agohDgPPbZZ3eyIOpp93wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG/Qwqk zd3yheB+NuJcrWciW9nnMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzub5yBZQNk8AxpQGMWONe+BOgoH6nz+1OUiJkPzds1LMy2gDnp6AB UAuJFcNdm+rF504jT0KPyxr1SFacN8l4FvOcWhe28+7m1rhyM6R2MX9H+SMRk9Pp yEPybfWDsduXQ6B40/7uub25i9PtnqRSEuC49YxGGpQB0YkQbBnH4ecnQ8HBAcdv 71p1Pla7DYMKazzyeSp1D/jQuiLiFGJuxjDcW/K5o6LnE2nXIppMwe1s8uzUypXJ eChl6RNsQTSFSf04zKzs9buEk88uIWgjxBnbcgCWtR7JFepnwfaFhh8C9dbqqS+y ZmKsq3KKSYM79c4f8hrC3dNQembfsCXt -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:07 2025 by rpki-client