$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: Ap5VDDmpg26yr3Owh5u7V0cBR67PORmyvhDLlgsIL/0= Subject key identifier: 1A:77:FD:63:C7:13:A3:F6:66:C9:9D:5D:18:FB:4B:92:83:2F:4B:51 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 0277 Signing time: Mon 21 Apr 2025 01:17:17 +0000 Manifest this update: Mon 21 Apr 2025 01:17:16 +0000 Manifest next update: Mon 28 Apr 2025 01:17:16 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: 082H20MksI8QT0FRSqtkkeCr+gxUDIlMTX756BhqrG0=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: Apr 21 01:17:16 2025 GMT Not After : Apr 28 01:17:16 2025 GMT Subject: CN=68059c9d-c11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:be:af:67:6d:27:e7:74:b1:aa:f4:9a:98: 5d:3a:e2:4a:a7:13:20:47:9f:77:79:8e:c7:ba:c4: e6:9a:33:37:fd:f6:0a:6d:b5:d0:01:a1:57:5f:76: d2:a8:75:96:82:e3:02:87:52:58:7c:2a:f4:8b:e7: 4d:2c:45:b4:d8:5a:2f:21:ef:20:7c:44:27:96:fc: ae:6d:85:60:30:e1:1d:ed:4a:b6:42:83:a5:72:5d: e9:d5:ca:65:c7:9c:7c:8b:d9:92:8d:60:18:db:95: a9:bc:79:fb:b9:56:f5:e5:b8:9a:da:58:a9:cb:85: 48:3d:be:1b:2c:a1:60:76:d9:40:fd:9e:6e:76:7b: 1c:e0:0b:1d:99:5a:0a:8c:8c:98:1d:25:2a:f4:5f: 4f:12:61:9e:d1:dc:e9:91:d8:a7:37:10:01:60:d8: 8b:be:46:d6:07:d2:de:7f:e6:b7:eb:8c:67:4b:54: fb:92:25:4f:3f:b3:ea:01:e6:a4:64:29:fd:dd:0e: 21:a9:ff:f2:c1:1c:60:40:8e:c8:91:fd:b2:61:94: 10:a4:93:9c:f5:f4:61:9b:76:a6:fe:c0:f5:fd:97: df:89:17:78:9a:41:74:2b:94:d8:5c:44:6d:9b:c1: 05:9b:f2:cc:b2:43:51:ec:cc:48:bc:bb:cd:7e:ce: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:FD:63:C7:13:A3:F6:66:C9:9D:5D:18:FB:4B:92:83:2F:4B:51 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:30:c7:f5:45:b1:bb:89:e6:1d:c0:0d:a8:e1:e8:58:2d:0f: 86:41:4f:2f:aa:5a:28:ae:ef:b6:2e:c1:c0:3d:12:37:60:a4: 12:bd:b2:84:23:e4:6c:11:f8:e6:83:be:d8:ac:09:c7:6e:fd: 93:83:6f:7a:fc:7f:81:25:cf:e7:2b:ba:fd:da:e8:14:be:da: 9b:87:1e:0c:77:27:d2:0e:84:36:72:51:38:77:a0:a6:d6:01: b0:e4:2c:41:b2:c8:a5:d1:3e:cb:a3:1e:e1:a9:24:78:2c:6a: af:7d:a2:5b:09:27:4e:de:73:59:0c:f9:d6:bd:08:f5:73:70: 0d:d3:78:ef:bb:61:75:9f:95:c2:fb:24:4c:e0:c5:27:d5:ea: 1c:b5:2d:de:cf:e7:73:aa:be:53:7f:14:8a:85:1e:8a:7d:4b: 3d:38:c8:d4:70:8e:4d:33:4e:cd:56:af:f2:ec:2b:00:1a:b5: af:54:3b:be:21:80:29:80:c6:df:05:65:8b:8b:39:65:88:78: d0:09:4b:f1:71:3f:ea:a0:60:83:86:61:6e:2b:c4:f8:b4:8a: ac:6f:a6:78:04:bd:6f:40:05:51:06:e8:e9:54:8b:63:19:80: a1:f8:43:4a:82:48:ea:4e:04:6a:09:5b:06:ba:d1:d5:3e:04: 06:5b:05:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUwNDIxMDExNzE2WhcNMjUwNDI4MDExNzE2WjAYMRYwFAYD VQQDEw02ODA1OWM5ZC1jMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIi+r2dtJ+d0sar0mphdOuJKpxMgR593eY7HusTmmjM3/fYKbbXQAaFXX3bS qHWWguMCh1JYfCr0i+dNLEW02FovIe8gfEQnlvyubYVgMOEd7Uq2QoOlcl3p1cpl x5x8i9mSjWAY25WpvHn7uVb15bia2lipy4VIPb4bLKFgdtlA/Z5udnsc4AsdmVoK jIyYHSUq9F9PEmGe0dzpkdinNxABYNiLvkbWB9Lef+a364xnS1T7kiVPP7PqAeak ZCn93Q4hqf/ywRxgQI7Ikf2yYZQQpJOc9fRhm3am/sD1/ZffiRd4mkF0K5TYXERt m8EFm/LMskNR7MxIvLvNfs7j6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp3/WPH E6P2ZsmdXRj7S5KDL0tRMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbMMf1RbG7ieYdwA2o4ehYLQ+GQU8vqlooru+2LsHAPRI3YKQSvbKE I+RsEfjmg77YrAnHbv2Tg296/H+BJc/nK7r92ugUvtqbhx4MdyfSDoQ2clE4d6Cm 1gGw5CxBssil0T7Lox7hqSR4LGqvfaJbCSdO3nNZDPnWvQj1c3AN03jvu2F1n5XC +yRM4MUn1eoctS3ez+dzqr5TfxSKhR6KfUs9OMjUcI5NM07NVq/y7CsAGrWvVDu+ IYApgMbfBWWLizlliHjQCUvxcT/qoGCDhmFuK8T4tIqsb6Z4BL1vQAVRBujpVItj GYCh+ENKgkjqTgRqCVsGutHVPgQGWwXg -----END CERTIFICATE-----Generated at Mon Apr 21 04:48:29 2025 by rpki-client