$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json) Hash identifier: 83Ax6wGM9g9GQuZt8skjVz31vzF7FHtmV9N7KGRozcY= Subject key identifier: 9D:4B:BB:8D:AA:66:EB:CA:2B:3A:71:A3:C8:8F:BE:5D:31:67:CC:02 Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft Manifest number: 0643 Signing time: Sun 06 Apr 2025 22:11:24 +0000 Manifest this update: Sun 06 Apr 2025 22:11:23 +0000 Manifest next update: Sun 13 Apr 2025 22:11:23 +0000 Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: mL50AyZqypNwLy8l2j5HL6R6jAZqw+mOQYhLqQzz+xg=) 2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: HcgEDxfrYAio+J7G5irFx/fARvtD6ikVFfdzvqTa8gA=) 3: 9BAE526A83FB11EBB159507AC4F9AE02.roa (hash: zOpC5DP7O89X6g3e6zF55VWu5l//TefCcP8XgONYfJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 22:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6 Validity Not Before: Apr 6 22:11:23 2025 GMT Not After : Apr 13 22:11:23 2025 GMT Subject: CN=67f2fc0b-c1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fd:70:33:b9:94:e8:45:fe:88:86:9f:83:0d: 13:1e:de:d9:57:70:31:f9:25:d8:4c:ec:90:75:cf: 57:27:82:9d:49:47:9e:62:8e:11:0c:94:3a:ef:9b: bc:02:48:1e:20:cc:8e:db:66:62:48:f0:66:66:93: 40:00:2f:99:1d:29:da:7d:71:d4:eb:fc:23:e2:f6: ab:39:dd:93:cc:0c:dc:e1:b3:ed:ac:21:86:10:e6: 74:91:90:73:d7:97:79:ba:7e:7c:59:46:1c:00:8d: 0a:d7:12:a5:a4:c4:7b:73:e7:38:ec:dd:c4:ae:40: 70:6c:7d:64:0f:9e:9f:6f:f7:e4:58:d9:e7:70:f8: 3d:91:07:c4:65:a2:99:79:71:85:bf:37:ab:c4:5d: 72:17:f0:62:88:a1:c3:45:1f:c7:be:25:cf:a9:33: 46:fc:9a:23:50:c9:b7:ca:f3:9a:7d:9b:bb:eb:29: 23:b3:b5:bb:80:c4:b2:5d:d3:41:82:5a:da:75:30: 60:1f:9f:65:10:06:d4:70:9c:2a:7f:93:3f:fe:bf: 71:ac:57:dd:5d:1c:0d:de:d3:99:5d:c6:34:f0:da: e6:61:14:14:56:73:d0:e6:72:d7:b0:59:9f:4e:cf: cb:dd:64:cc:4b:45:cb:1d:2f:3c:94:75:4a:b0:74: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:BB:8D:AA:66:EB:CA:2B:3A:71:A3:C8:8F:BE:5D:31:67:CC:02 X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6c:4a:f2:6f:23:35:50:1f:41:61:f0:dd:51:24:96:8d:09: 89:af:2e:ef:8f:9b:6c:bd:06:7a:09:ac:ce:59:a8:84:4f:d5: 25:b6:14:14:f3:aa:9e:74:44:63:d1:24:15:0b:eb:c8:8b:0e: 6b:09:a7:8f:81:01:c3:9b:f1:6a:4e:31:be:4c:63:63:76:9c: 34:ef:7d:93:b5:74:e5:bc:9b:7e:32:3b:1a:24:03:94:96:23: 1d:e0:94:7a:c6:58:d6:85:8c:09:91:52:82:97:fb:91:d4:10: e9:7e:bf:a8:32:0e:75:c8:9c:f5:8e:59:b3:d7:d9:94:4c:88: 1e:4a:05:1f:31:3d:d4:ae:3b:41:66:1f:ff:9e:94:49:2f:43: f1:e8:e5:34:c4:90:15:3e:38:91:77:93:2a:5b:51:46:ab:34: 1e:8d:9c:68:2f:69:18:7f:89:58:90:ab:78:86:62:cf:cb:da: 94:0a:90:bb:39:79:97:5e:cd:7f:59:a2:fd:74:9e:f8:db:33: 0f:e0:8b:c9:7c:5e:b0:51:d2:a9:b7:78:17:0b:99:10:20:7e: fb:44:33:db:84:7f:36:06:a8:26:aa:c8:47:c4:03:e5:d2:22: c1:3e:77:8b:c7:22:af:9f:6e:8c:25:bb:44:64:b7:ac:c2:40: 70:c1:94:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwNDA2MjIxMTIzWhcNMjUwNDEzMjIxMTIzWjAYMRYwFAYD VQQDEw02N2YyZmMwYi1jMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8v1wM7mU6EX+iIafgw0THt7ZV3Ax+SXYTOyQdc9XJ4KdSUeeYo4RDJQ675u8 AkgeIMyO22ZiSPBmZpNAAC+ZHSnafXHU6/wj4varOd2TzAzc4bPtrCGGEOZ0kZBz 15d5un58WUYcAI0K1xKlpMR7c+c47N3ErkBwbH1kD56fb/fkWNnncPg9kQfEZaKZ eXGFvzerxF1yF/BiiKHDRR/HviXPqTNG/JojUMm3yvOafZu76ykjs7W7gMSyXdNB glradTBgH59lEAbUcJwqf5M//r9xrFfdXRwN3tOZXcY08NrmYRQUVnPQ5nLXsFmf Ts/L3WTMS0XLHS88lHVKsHRiewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1Lu42q ZuvKKzpxo8iPvl0xZ8wCMB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83 Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQbErybyM1UB9BYfDdUSSWjQmJry7vj5tsvQZ6CazOWaiET9UlthQU 86qedERj0SQVC+vIiw5rCaePgQHDm/FqTjG+TGNjdpw0732TtXTlvJt+MjsaJAOU liMd4JR6xljWhYwJkVKCl/uR1BDpfr+oMg51yJz1jlmz19mUTIgeSgUfMT3UrjtB Zh//npRJL0Px6OU0xJAVPjiRd5MqW1FGqzQejZxoL2kYf4lYkKt4hmLPy9qUCpC7 OXmXXs1/WaL9dJ742zMP4IvJfF6wUdKpt3gXC5kQIH77RDPbhH82BqgmqshHxAPl 0iLBPneLxyKvn26MJbtEZLeswkBwwZQ0 -----END CERTIFICATE-----Generated at Mon Apr 7 04:48:39 2025 by rpki-client