$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: QFfHiKICW3+FoFeO6YJluDuGuZKoYerBos0R/x4QW6A= Subject key identifier: 62:F7:44:81:A7:EA:70:64:CF:78:8E:7E:E4:BB:04:7D:D3:D0:3E:3F Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 044E Signing time: Sun 20 Apr 2025 23:50:37 +0000 Manifest this update: Sun 20 Apr 2025 23:50:36 +0000 Manifest next update: Sun 27 Apr 2025 23:50:36 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: bhO1t90KwadBHWektDQtKx54/aopGOayGLU6jIR+lIE=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Apr 20 23:50:36 2025 GMT Not After : Apr 27 23:50:36 2025 GMT Subject: CN=6805884c-f9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:25:d5:6d:25:a9:15:76:57:ef:a8:32:a5: 72:2a:00:eb:ff:bc:3d:72:12:97:fa:b0:4a:00:88: 2d:ac:1a:6d:55:f6:fc:9d:32:2e:6b:7c:63:61:6f: 87:66:4d:de:3e:e3:74:14:c9:78:e0:e3:b7:31:ec: f5:fb:13:89:cf:21:97:bb:07:e8:84:89:5a:93:f0: 48:c7:4e:26:6b:41:36:cb:1c:6f:52:eb:9c:19:1a: c1:cf:24:52:01:b7:60:05:94:30:1e:7f:28:3f:8a: 9c:f1:e8:a4:43:66:0c:f3:fb:0a:90:65:83:8b:a4: cb:18:e8:41:d3:a3:53:2f:04:00:ee:0e:65:c3:69: 83:21:6f:21:ae:88:20:cb:76:23:19:1b:14:91:ab: 94:87:71:ea:06:7d:76:e1:04:81:cf:d2:db:f5:72: 7b:13:4a:dc:d8:11:33:c9:1d:88:5a:70:85:14:a4: c9:ed:27:b3:34:74:4d:1c:05:e2:70:9b:ef:be:14: c8:1c:a5:a8:d5:60:9c:0c:54:f5:bb:b8:86:24:6d: 6d:5b:4b:11:70:61:b9:cd:c5:02:80:e4:95:73:c2: ae:20:63:a1:22:50:05:e3:97:40:b6:47:ab:77:66: dc:ef:0b:83:15:75:73:f2:67:f1:f7:88:19:0b:5d: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:44:81:A7:EA:70:64:CF:78:8E:7E:E4:BB:04:7D:D3:D0:3E:3F X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9d:de:df:71:45:32:c3:f2:ed:8b:98:85:34:82:15:40:c4: ec:16:2e:e3:8c:c8:33:c0:8e:86:15:d2:87:88:0b:d2:8d:7b: a1:77:60:ea:d5:13:d8:8b:c5:61:01:ee:81:1d:c3:00:5d:2e: d0:71:d3:de:9c:7e:26:c7:9b:33:d0:65:40:3e:22:98:88:59: d4:43:e1:8e:53:3d:64:95:06:f3:e6:03:d4:8b:bd:65:2d:82: a8:0d:89:02:3f:db:8d:6f:9b:eb:2d:d8:d5:1c:6e:f1:c5:65: 92:83:e7:92:78:2e:0a:06:89:c7:f3:9e:9f:cb:0f:62:b7:74: 78:08:f0:28:69:2c:cc:12:23:36:99:cc:4f:cb:30:1c:42:61: b7:84:57:2a:9d:7a:74:c7:ac:16:d5:96:42:7c:36:57:91:20: bb:a6:ee:3b:c3:0c:65:c0:aa:45:6e:e0:e4:33:95:40:fc:82: a7:57:f0:30:1a:33:b5:40:72:e3:39:78:f2:6c:37:fe:23:2c: 54:38:74:3f:c1:33:b8:c2:c4:fd:96:35:7e:97:f2:12:b6:aa: 95:12:a6:c0:fd:ed:b9:6e:c6:33:b2:e5:08:87:e6:10:a9:1d: 60:c1:ea:45:af:79:45:db:66:1c:a4:87:ef:d8:07:dd:7b:55: b7:fe:9d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwNDIwMjM1MDM2WhcNMjUwNDI3MjM1MDM2WjAYMRYwFAYD VQQDEw02ODA1ODg0Yy1mOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5sl1W0lqRV2V++oMqVyKgDr/7w9chKX+rBKAIgtrBptVfb8nTIua3xjYW+H Zk3ePuN0FMl44OO3Mez1+xOJzyGXuwfohIlak/BIx04ma0E2yxxvUuucGRrBzyRS AbdgBZQwHn8oP4qc8eikQ2YM8/sKkGWDi6TLGOhB06NTLwQA7g5lw2mDIW8hrogg y3YjGRsUkauUh3HqBn124QSBz9Lb9XJ7E0rc2BEzyR2IWnCFFKTJ7SezNHRNHAXi cJvvvhTIHKWo1WCcDFT1u7iGJG1tW0sRcGG5zcUCgOSVc8KuIGOhIlAF45dAtker d2bc7wuDFXVz8mfx94gZC10y0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL3RIGn 6nBkz3iOfuS7BH3T0D4/MB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLnd7fcUUyw/Lti5iFNIIVQMTsFi7jjMgzwI6GFdKHiAvSjXuhd2Dq 1RPYi8VhAe6BHcMAXS7QcdPenH4mx5sz0GVAPiKYiFnUQ+GOUz1klQbz5gPUi71l LYKoDYkCP9uNb5vrLdjVHG7xxWWSg+eSeC4KBonH856fyw9it3R4CPAoaSzMEiM2 mcxPyzAcQmG3hFcqnXp0x6wW1ZZCfDZXkSC7pu47wwxlwKpFbuDkM5VA/IKnV/Aw GjO1QHLjOXjybDf+IyxUOHQ/wTO4wsT9ljV+l/IStqqVEqbA/e25bsYzsuUIh+YQ qR1gwepFr3lF22YcpIfv2Afde1W3/p2y -----END CERTIFICATE-----Generated at Tue Apr 22 23:17:48 2025 by rpki-client