$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft File: gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json) Hash identifier: GmKNOM2NPX9rivLJHgqR/nEK0vCzuSCXMVq3auQUVQU= Subject key identifier: E9:C8:31:D7:74:76:FC:63:4A:7F:04:4A:4D:AE:4A:51:54:36:9F:D5 Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft Manifest number: 0129 Signing time: Thu 17 Apr 2025 03:38:35 +0000 Manifest this update: Thu 17 Apr 2025 03:38:34 +0000 Manifest next update: Thu 24 Apr 2025 03:38:34 +0000 Files and hashes: 1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: arndpwJAAqoHiiYYdMk7v3Xob2XJKPxjhimPMenjxeo=) 2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: iIgu2YCDJNBMVFAfxHOYOBXqDgtqnG2sQcvAv4/N21A=) 3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: MEW0G3vOg9trhSdFIvvfCuuUeDbhhXHLhPTz+oibzFY=) 4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945 Validity Not Before: Apr 17 03:38:34 2025 GMT Not After : Apr 24 03:38:34 2025 GMT Subject: CN=680077bb-8d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:90:c8:5f:84:16:d3:12:1b:aa:2c:79:d8: bb:59:a5:e9:61:95:96:55:06:ad:16:64:85:e1:28: 02:b0:e8:79:c0:57:6b:73:57:99:bc:58:d8:18:fc: c5:d1:bf:df:30:f7:6d:c0:8f:cb:0b:3a:ec:0f:41: 00:e4:27:df:cc:37:56:47:91:c6:af:26:bf:2d:8b: 08:3b:70:5a:be:eb:07:3b:dc:c3:00:1b:5d:bf:bd: cd:c5:80:66:0a:67:45:d1:25:80:ee:72:db:fc:cc: b0:41:68:6d:75:3b:56:c3:bd:76:d2:dc:b5:c8:5f: 81:80:08:12:73:6d:e4:45:99:2e:fe:39:6c:36:06: d8:c5:a6:71:b8:e8:c6:34:7a:80:d8:7b:6c:97:3d: e9:77:e3:8c:ce:18:8a:00:f1:a9:07:07:90:27:e5: a2:d7:39:c3:9a:80:df:5f:9e:12:57:18:49:5c:f7: 71:3f:e5:37:3a:e6:b4:38:f5:01:f4:57:2d:f7:bf: a5:ec:1e:53:2f:47:25:ad:d3:85:b9:99:63:54:5d: a5:75:c1:8e:24:06:f3:bd:e5:ee:e9:b4:f4:00:37: e2:c2:83:13:3b:19:f6:58:2f:0f:31:26:33:b1:ed: 7c:d4:a4:c8:fe:34:f5:da:f7:12:53:37:a2:71:7a: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:31:D7:74:76:FC:63:4A:7F:04:4A:4D:AE:4A:51:54:36:9F:D5 X509v3 Authority Key Identifier: keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:b3:2e:42:f2:4e:c8:df:03:91:4e:1c:05:c3:b2:db:bc: 43:b0:f4:de:66:48:f4:6a:a2:c3:3d:ed:89:fe:b2:45:86:dc: fa:d0:72:84:82:80:03:3e:d6:6f:0d:a1:eb:ea:24:e7:60:eb: 54:2e:18:eb:36:2d:82:5e:f9:4f:5a:dd:ac:6d:ac:11:4a:32: 00:ab:0c:ed:e1:d3:b8:f8:c2:60:e3:45:df:43:8d:88:79:af: 36:c3:1f:70:e9:67:36:fd:36:45:8e:d0:f2:a1:06:29:a3:41: 5d:32:ab:64:9b:c5:51:5f:93:83:8b:0e:92:22:57:d3:7d:d4: aa:08:9e:4f:00:15:b4:56:fa:42:6b:af:18:5e:66:d8:9b:86: 41:7c:e2:06:76:ab:38:d8:cb:22:48:13:13:07:84:5d:ca:35: 36:aa:c5:7c:9e:02:bc:c8:f4:5a:e0:10:2c:e6:dd:41:6e:f9: 3b:bd:34:e1:f3:fc:f0:3a:a0:f9:60:2a:51:5d:bc:cf:de:b0: 2b:0a:15:24:88:5c:ef:54:91:17:be:d6:52:1b:96:b5:d8:c0: 48:41:66:7d:22:15:28:27:35:70:d1:e0:b8:f0:b1:37:01:91: b5:21:8b:a6:4a:2f:c0:d6:5e:bc:91:48:b8:b4:b5:4a:e2:c4: ec:f2:9b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMzMxMTAvBgNVBAUTKDgwQkU5MzBFMzA2NDlCMTJBQ0VFOERDNDBCNTc1QUI3 RERFNjQ5NDUwHhcNMjUwNDE3MDMzODM0WhcNMjUwNDI0MDMzODM0WjAYMRYwFAYD VQQDEw02ODAwNzdiYi04ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvGQyF+EFtMSG6osedi7WaXpYZWWVQatFmSF4SgCsOh5wFdrc1eZvFjYGPzF 0b/fMPdtwI/LCzrsD0EA5CffzDdWR5HGrya/LYsIO3BavusHO9zDABtdv73NxYBm CmdF0SWA7nLb/MywQWhtdTtWw7120ty1yF+BgAgSc23kRZku/jlsNgbYxaZxuOjG NHqA2Htslz3pd+OMzhiKAPGpBweQJ+Wi1znDmoDfX54SVxhJXPdxP+U3Oua0OPUB 9Fct97+l7B5TL0clrdOFuZljVF2ldcGOJAbzveXu6bT0ADfiwoMTOxn2WC8PMSYz se181KTI/jT12vcSUzeicXofVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnIMdd0 dvxjSn8ESk2uSlFUNp/VMB8GA1UdIwQYMBaAFIC+kw4wZJsSrO6NxAtXWrfd5klF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMzMy81NDI2NUYzNDY2 ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214S3M3bzNFQzFkYXQ5M21T VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dMNlREakJrbXhLczdvM0VDMWRhdDkzbVNVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMzMy81NDI2NUYzNDY2ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214 S3M3bzNFQzFkYXQ5M21TVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfLMuQvJOyN8DkU4cBcOy27xDsPTeZkj0aqLDPe2J/rJFhtz60HKE goADPtZvDaHr6iTnYOtULhjrNi2CXvlPWt2sbawRSjIAqwzt4dO4+MJg40XfQ42I ea82wx9w6Wc2/TZFjtDyoQYpo0FdMqtkm8VRX5ODiw6SIlfTfdSqCJ5PABW0VvpC a68YXmbYm4ZBfOIGdqs42MsiSBMTB4RdyjU2qsV8ngK8yPRa4BAs5t1Bbvk7vTTh 8/zwOqD5YCpRXbzP3rArChUkiFzvVJEXvtZSG5a12MBIQWZ9IhUoJzVw0eC48LE3 AZG1IYumSi/A1l68kUi4tLVK4sTs8pta -----END CERTIFICATE-----Generated at Fri Apr 18 07:05:21 2025 by rpki-client