$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: bZ7Rc+1cQRJQ5PLHMNGvzBkPX77966c0AxV/f78hLfQ= Subject key identifier: 83:13:4F:0A:C1:60:EB:11:FC:0C:EF:A1:F9:87:FE:91:93:AD:89:A2 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: 8A Signing time: Thu 17 Apr 2025 05:19:43 +0000 Manifest this update: Thu 17 Apr 2025 05:19:43 +0000 Manifest next update: Thu 24 Apr 2025 05:19:43 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: 4UEz6RpZRg7VfSMGEbNVDvoMh5V1FBnmNys6T+KS01A=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 9XdOr8ci0XxQ25MZorUAalomR3Uhklj1yk5ZzWVz3NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: Apr 17 05:19:43 2025 GMT Not After : Apr 24 05:19:43 2025 GMT Subject: CN=68008f6f-dc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:29:43:24:79:74:ff:09:bd:c7:5c:67:82: c5:3f:3c:0c:e5:f9:ec:13:de:c2:5e:e6:09:7b:27: b3:6f:18:c8:db:34:a3:a3:e7:95:97:b5:09:ff:b2: b0:93:cd:3c:48:d0:9f:f9:60:22:c4:01:2b:bd:47: 20:25:94:11:3a:d8:cd:79:0b:62:0f:76:15:52:ae: c7:7c:16:8c:77:ca:09:93:14:24:d6:10:78:28:4b: 31:aa:44:41:cc:7d:7e:93:3e:6e:9b:cb:e0:3a:bc: 5e:77:79:9f:8b:8b:f6:d5:4e:12:77:62:bd:8e:5e: 2c:a2:7f:8d:2d:ab:2e:4c:4f:a7:71:47:78:6d:60: e0:3c:19:ae:a1:28:0e:f2:07:0f:46:7c:6b:3e:66: 2d:66:b0:96:08:59:dd:2b:23:9e:80:de:fe:11:57: 35:3a:f7:8f:36:0e:e7:0f:02:f0:db:f1:99:50:92: ed:8f:75:c4:88:fa:61:6c:bb:8a:90:38:14:be:ee: e4:1c:dc:b5:ed:91:3a:cf:b0:3a:77:31:d5:14:66: e5:4a:b9:f6:af:72:e5:d1:4f:02:5e:37:ba:d4:41: 44:99:f1:28:57:9d:15:c0:45:90:33:13:b4:5f:fb: 35:39:46:17:7f:d5:0b:ee:53:dd:35:f4:92:c1:5d: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:13:4F:0A:C1:60:EB:11:FC:0C:EF:A1:F9:87:FE:91:93:AD:89:A2 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:5c:00:ac:bf:05:c2:cb:8a:a6:8a:ef:c0:c0:ae:82:b4:ab: 8c:1e:10:e9:90:3a:87:d2:ee:8d:cb:27:7e:04:2f:87:e8:cc: 1c:8d:57:71:32:56:5c:15:b0:df:59:92:07:be:3c:7c:dd:f7: f6:3e:c3:3a:50:6f:dc:6d:db:8a:66:9f:a3:39:bb:3d:e8:74: 58:a1:3a:8c:7e:c5:5a:f9:89:ae:7e:b5:22:e7:2e:0c:82:de: c2:62:8f:91:b7:70:f9:f7:d0:17:3c:84:3a:31:9c:48:2a:97: ac:95:fc:59:34:1d:73:3d:51:a4:ff:a5:92:cc:28:7d:16:67: 80:8b:60:85:88:4c:9b:3f:f8:de:b9:df:4a:4a:ea:73:e1:97: 25:d1:8c:3f:f3:22:c8:e8:30:d6:68:35:51:b0:b6:d4:75:18: 97:14:c4:35:c5:2d:4f:31:3b:b5:48:56:bb:a1:a8:95:30:02: 46:72:50:38:0c:ca:4e:0d:60:83:49:20:9b:bd:c4:5b:9e:7e: 67:61:c4:f1:8a:41:e4:01:77:4a:c5:7a:62:b7:57:b1:f3:71: 6b:70:f3:07:05:7e:c2:52:46:34:53:c9:3d:72:3e:94:9c:c7: 51:0a:f3:08:3b:54:02:7a:97:b1:3f:51:4e:c0:cc:2a:40:78: 7f:d0:94:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUwNDE3MDUxOTQzWhcNMjUwNDI0MDUxOTQzWjAYMRYwFAYD VQQDEw02ODAwOGY2Zi1kYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB0pQyR5dP8JvcdcZ4LFPzwM5fnsE97CXuYJeyezbxjI2zSjo+eVl7UJ/7Kw k808SNCf+WAixAErvUcgJZQROtjNeQtiD3YVUq7HfBaMd8oJkxQk1hB4KEsxqkRB zH1+kz5um8vgOrxed3mfi4v21U4Sd2K9jl4son+NLasuTE+ncUd4bWDgPBmuoSgO 8gcPRnxrPmYtZrCWCFndKyOegN7+EVc1OvePNg7nDwLw2/GZUJLtj3XEiPphbLuK kDgUvu7kHNy17ZE6z7A6dzHVFGblSrn2r3Ll0U8CXje61EFEmfEoV50VwEWQMxO0 X/s1OUYXf9UL7lPdNfSSwV1F3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMTTwrB YOsR/AzvofmH/pGTrYmiMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByXACsvwXCy4qmiu/AwK6CtKuMHhDpkDqH0u6Nyyd+BC+H6MwcjVdx MlZcFbDfWZIHvjx83ff2PsM6UG/cbduKZp+jObs96HRYoTqMfsVa+YmufrUi5y4M gt7CYo+Rt3D599AXPIQ6MZxIKpeslfxZNB1zPVGk/6WSzCh9FmeAi2CFiEybP/je ud9KSupz4Zcl0Yw/8yLI6DDWaDVRsLbUdRiXFMQ1xS1PMTu1SFa7oaiVMAJGclA4 DMpODWCDSSCbvcRbnn5nYcTxikHkAXdKxXpit1ex83FrcPMHBX7CUkY0U8k9cj6U nMdRCvMIO1QCepexP1FOwMwqQHh/0JRb -----END CERTIFICATE-----Generated at Fri Apr 18 11:16:56 2025 by rpki-client