$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: xxOJN1dmkEdF5dZJkoMVVxnt/pIHEQYjOcj7+Xf3UL0= Subject key identifier: F5:16:4F:0E:74:97:BD:35:62:C9:E1:3B:15:55:1D:62:E4:AF:43:38 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 04D0 Signing time: Fri 04 Apr 2025 23:54:52 +0000 Manifest this update: Fri 04 Apr 2025 23:54:52 +0000 Manifest next update: Fri 11 Apr 2025 23:54:52 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: WPlzFqyflRfP7rJ4v6Kd8WdWK1w9DnIQd153Kaiv1bk=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE Validity Not Before: Apr 4 23:54:52 2025 GMT Not After : Apr 11 23:54:52 2025 GMT Subject: CN=67f0714c-b772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:5e:c1:98:6d:6a:dd:b4:49:1c:9a:90:1b: 4b:ee:06:eb:ee:ac:71:db:c8:ae:b8:e1:b9:6f:08: e0:db:3f:2e:52:6e:f3:5d:da:23:ef:c8:b5:94:15: 97:f5:d1:48:bc:af:82:eb:4a:ba:4b:96:9e:f5:4b: e9:a9:63:ef:58:2c:c7:d8:b6:fd:2f:d1:2c:b2:04: 2d:49:e4:d9:a8:f9:68:17:33:00:a5:d1:b3:b5:68: bd:3d:29:18:ea:35:14:a4:7a:27:2c:df:43:a4:9e: 33:d5:96:a9:80:65:31:b4:0c:4b:8e:5e:e5:cf:d7: a8:1b:6b:13:82:ca:c8:9d:5f:fd:2e:e3:30:80:38: 9c:42:4a:b3:0e:82:85:c8:de:9d:79:9a:31:e6:93: 4a:85:c0:93:26:f6:88:0f:23:49:6c:f7:89:38:08: 11:28:bc:0c:92:19:5f:58:b7:0f:30:fc:a2:a4:5d: a7:5f:5d:d3:a0:2f:54:a6:e2:9e:d9:1c:76:12:96: 6e:77:8f:af:75:90:81:73:c3:82:2a:7a:50:2e:f5: f5:7f:56:2c:93:94:b6:d7:f4:a5:e4:dd:55:c8:fa: e3:b5:f8:4a:5a:e3:48:65:55:90:1b:cb:2f:33:ca: dc:26:77:1c:14:bc:79:cc:ee:91:b7:26:da:8c:14: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:16:4F:0E:74:97:BD:35:62:C9:E1:3B:15:55:1D:62:E4:AF:43:38 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d4:3c:4c:9f:2c:31:0e:ad:5c:85:81:52:b7:8d:60:b9:b5: 24:60:29:a2:bd:f1:e2:56:08:99:be:e9:cc:3c:40:58:7b:86: 7c:73:fa:5d:ee:b4:48:2d:5a:58:c5:44:33:a2:21:05:50:bc: d3:5c:15:48:3d:30:26:f2:ca:be:6e:6c:0e:57:a9:fb:37:65: 34:14:05:b9:c9:1f:89:b9:3d:b2:52:9a:c9:a3:d2:e3:8b:1e: 3d:31:57:c5:a0:b8:ce:a4:2b:28:e6:21:e8:67:f0:4d:9a:a7: 23:5a:f3:a5:ae:7c:49:14:3a:cf:c0:f0:f9:da:9c:d5:93:5d: 32:8d:6d:43:db:38:8e:8d:5f:8d:14:cb:0d:f5:cf:9f:ba:f6: 5f:d6:bf:3e:6a:54:d7:e2:2a:52:ff:51:f0:d8:82:38:ea:25: 14:1e:2a:c1:1e:a3:78:ac:35:7a:3e:85:1b:28:6c:ac:ca:42: ab:e1:9f:57:cc:bb:a1:24:78:e6:02:f3:c0:df:6b:b8:60:e0: b1:47:8b:c5:68:9c:60:a8:8c:68:1b:66:72:b1:2c:e7:71:26: 4e:a4:ff:30:47:50:d4:b9:0a:e9:29:4b:10:db:f0:0d:88:09: 4c:34:c6:f1:43:31:4d:bf:92:4b:b6:c3:99:45:89:01:7d:16: 5d:83:0d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUwNDA0MjM1NDUyWhcNMjUwNDExMjM1NDUyWjAYMRYwFAYD VQQDEw02N2YwNzE0Yy1iNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQhewZhtat20SRyakBtL7gbr7qxx28iuuOG5bwjg2z8uUm7zXdoj78i1lBWX 9dFIvK+C60q6S5ae9UvpqWPvWCzH2Lb9L9EssgQtSeTZqPloFzMApdGztWi9PSkY 6jUUpHonLN9DpJ4z1ZapgGUxtAxLjl7lz9eoG2sTgsrInV/9LuMwgDicQkqzDoKF yN6deZox5pNKhcCTJvaIDyNJbPeJOAgRKLwMkhlfWLcPMPyipF2nX13ToC9UpuKe 2Rx2EpZud4+vdZCBc8OCKnpQLvX1f1Ysk5S21/Sl5N1VyPrjtfhKWuNIZVWQG8sv M8rcJnccFLx5zO6RtybajBTrtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUWTw50 l701YsnhOxVVHWLkr0M4MB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl1DxMnywxDq1chYFSt41gubUkYCmivfHiVgiZvunMPEBYe4Z8c/pd 7rRILVpYxUQzoiEFULzTXBVIPTAm8sq+bmwOV6n7N2U0FAW5yR+JuT2yUprJo9Lj ix49MVfFoLjOpCso5iHoZ/BNmqcjWvOlrnxJFDrPwPD52pzVk10yjW1D2ziOjV+N FMsN9c+fuvZf1r8+alTX4ipS/1Hw2II46iUUHirBHqN4rDV6PoUbKGysykKr4Z9X zLuhJHjmAvPA32u4YOCxR4vFaJxgqIxoG2ZysSzncSZOpP8wR1DUuQrpKUsQ2/AN iAlMNMbxQzFNv5JLtsOZRYkBfRZdgw1d -----END CERTIFICATE-----Generated at Sat Apr 5 11:44:40 2025 by rpki-client