$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: bQf1svR6DSyUsiGPCU2Ldkug/ThKTBi0Vhg0k7G1ygQ= Subject key identifier: 68:1A:D8:44:9E:25:E3:B8:36:28:D1:80:4A:AB:0F:3B:EF:B9:F4:62 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 03B1 Signing time: Thu 03 Apr 2025 00:42:50 +0000 Manifest this update: Thu 03 Apr 2025 00:42:49 +0000 Manifest next update: Thu 10 Apr 2025 00:42:49 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: ptX8fGw+Gv3j0AWMEH3WKX2M/2eXGHyz161MS54tNdw=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0 Validity Not Before: Apr 3 00:42:49 2025 GMT Not After : Apr 10 00:42:49 2025 GMT Subject: CN=67edd98a-d770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:da:f7:03:8d:72:f1:85:a6:0b:2a:24:12: 02:ea:d2:e8:18:cd:37:f7:70:38:d8:3f:2b:80:23: 81:12:68:23:86:d5:5f:ca:01:c9:5e:a2:25:3e:f0: 44:5b:56:4c:2f:c1:8b:dc:fc:dc:2f:a2:94:bd:5c: 5b:d3:f0:1e:14:ee:82:ce:d8:fd:77:37:2b:ee:b3: 29:f6:44:63:cb:db:99:15:58:bc:91:9e:8e:9c:30: f6:40:25:81:e2:90:57:99:9e:26:be:0b:73:d4:04: 36:b0:68:5f:e2:bf:37:f4:59:8a:08:67:52:c2:bd: 55:f1:c4:57:63:5e:65:c3:d5:e4:17:d9:b8:dc:89: f4:d4:fd:75:cc:a4:b6:a3:a5:29:ae:38:53:a2:af: ca:8d:ab:5e:e5:98:c7:46:9f:72:ac:56:db:97:31: 88:c1:5d:47:0a:a8:42:ca:85:65:49:40:c9:a5:71: c5:84:ab:1f:8b:b0:dd:a0:69:c2:df:81:28:8f:bb: 2d:2c:27:3a:e2:24:7e:ab:95:6e:36:bc:c2:fe:67: 87:b9:59:8d:f3:4f:29:cb:82:19:0e:a6:0c:fd:3e: 8c:48:8a:28:50:bf:97:63:ce:a4:e7:d9:3a:c4:62: e2:33:3d:5c:d2:13:5e:94:a6:5a:e5:85:3b:2f:91: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:D8:44:9E:25:E3:B8:36:28:D1:80:4A:AB:0F:3B:EF:B9:F4:62 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:ff:9e:8d:8b:fb:5e:a4:13:4e:f1:ad:31:55:ca:81:99: 99:8e:4b:e1:2f:16:b6:5d:c5:08:89:e0:13:aa:ea:58:84:6f: 22:9d:da:6f:c6:62:aa:29:66:3a:41:5d:52:e7:18:de:2d:9a: 34:7b:4e:63:87:9b:f7:70:51:46:d6:31:8d:26:88:fc:46:32: d9:e3:b8:63:4b:f0:4c:89:43:3f:1a:23:75:86:e6:13:09:c8: 25:25:82:e5:83:8d:a7:09:f6:f4:8d:f1:d2:d9:fd:2c:23:8c: af:f8:3e:a4:5c:43:48:8c:87:2e:ae:35:01:69:68:21:ba:31: ff:0f:b4:7c:1e:49:5a:a9:7a:24:9c:59:4e:aa:48:e5:bc:df: 2d:ee:3f:a1:6d:b3:8e:8d:79:77:b5:06:b3:9b:64:ed:53:68: d0:e0:bd:b1:85:2d:3c:ee:5c:53:c2:d9:fa:85:40:63:c5:de: 59:c0:25:11:3b:a5:1a:1f:5c:05:61:f8:37:f6:38:17:63:12: 97:b4:85:e5:59:b5:99:1b:5d:42:92:0b:a7:3c:d9:b5:4c:c2: 77:84:5b:9c:f9:d8:62:74:78:f7:e1:e8:d5:d7:12:14:44:06: de:c1:f8:3a:dd:ee:5f:0f:f5:a3:55:34:8f:35:76:54:53:8d: ec:ee:1d:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUwNDAzMDA0MjQ5WhcNMjUwNDEwMDA0MjQ5WjAYMRYwFAYD VQQDEw02N2VkZDk4YS1kNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3ba9wONcvGFpgsqJBIC6tLoGM0393A42D8rgCOBEmgjhtVfygHJXqIlPvBE W1ZML8GL3PzcL6KUvVxb0/AeFO6Cztj9dzcr7rMp9kRjy9uZFVi8kZ6OnDD2QCWB 4pBXmZ4mvgtz1AQ2sGhf4r839FmKCGdSwr1V8cRXY15lw9XkF9m43In01P11zKS2 o6UprjhToq/Kjate5ZjHRp9yrFbblzGIwV1HCqhCyoVlSUDJpXHFhKsfi7DdoGnC 34Eoj7stLCc64iR+q5VuNrzC/meHuVmN808py4IZDqYM/T6MSIooUL+XY86k59k6 xGLiMz1c0hNelKZa5YU7L5FxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGga2ESe JeO4NijRgEqrDzvvufRiMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLYv+ejYv7XqQTTvGtMVXKgZmZjkvhLxa2XcUIieATqupYhG8indpv xmKqKWY6QV1S5xjeLZo0e05jh5v3cFFG1jGNJoj8RjLZ47hjS/BMiUM/GiN1huYT CcglJYLlg42nCfb0jfHS2f0sI4yv+D6kXENIjIcurjUBaWghujH/D7R8HklaqXok nFlOqkjlvN8t7j+hbbOOjXl3tQazm2TtU2jQ4L2xhS087lxTwtn6hUBjxd5ZwCUR O6UaH1wFYfg39jgXYxKXtIXlWbWZG11CkgunPNm1TMJ3hFuc+dhidHj34ejV1xIU RAbewfg63e5fD/WjVTSPNXZUU43s7h2v -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:47 2025 by rpki-client