$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: Tkbp/cKYy8d6/nrpzJrUDTZ8jEt/uV3MzqFnQ5lpsWQ= Subject key identifier: FC:B2:64:C5:39:FB:45:E4:87:3E:5B:8B:0A:2C:F8:C1:5B:73:39:CA Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 111B Signing time: Fri 04 Apr 2025 17:22:09 +0000 Manifest this update: Fri 04 Apr 2025 17:22:08 +0000 Manifest next update: Fri 11 Apr 2025 17:22:08 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 9ydj5wwNhGCL/8t5pLkFTBd7ozCsJtTiR0VMKpypH1E=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4418 (0x1142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB Validity Not Before: Apr 4 17:22:08 2025 GMT Not After : Apr 11 17:22:08 2025 GMT Subject: CN=67f01540-7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:c1:7e:ed:4d:48:a0:43:03:44:1f:3f:7c: 5b:83:a9:7f:d5:df:85:8d:11:0c:30:62:1b:f2:3e: 62:51:ac:16:f2:f2:4a:0e:9a:fd:db:a1:56:c5:d9: 3a:39:1f:72:24:dc:db:01:f0:6f:f8:a2:8b:47:b6: 59:50:47:15:57:4b:c8:ff:b5:4b:5d:67:22:e0:d4: 42:09:68:c2:f7:aa:a3:f4:32:ac:bb:5a:ef:e1:8e: 48:1d:db:11:1a:2c:72:f6:22:90:47:21:32:b1:53: 7c:3c:71:c0:88:43:13:27:0d:50:55:fd:3c:fb:4a: 1c:d6:f3:b4:51:49:15:99:bc:2f:1d:bb:7e:a9:3e: 6e:71:ef:b1:51:30:0e:0c:cd:2b:b6:56:4b:a1:07: 64:77:02:19:c4:a9:c0:85:cb:b1:7b:4e:98:e1:05: f7:b0:f0:c5:aa:5a:b7:c5:68:c4:61:0d:4a:38:e0: b8:c2:b5:b4:2d:35:45:72:ba:e4:d8:1b:a9:6c:1e: 4f:cb:e7:d1:80:81:92:a6:7b:3f:7e:8f:e4:47:9a: b6:ea:49:8b:c9:e4:d1:d0:02:4a:71:3a:ca:24:69: 53:8f:a9:47:87:09:d4:93:cf:8c:0d:62:56:d0:f2: ae:ae:5e:2d:54:b0:5e:b5:4d:65:b1:3f:2e:d6:15: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:64:C5:39:FB:45:E4:87:3E:5B:8B:0A:2C:F8:C1:5B:73:39:CA X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:89:70:51:f9:cd:64:90:df:ab:09:de:e0:41:b2:8f:67:0c: f9:38:c4:74:0f:48:83:fe:97:35:9a:3a:b4:05:36:be:d1:6e: 57:ec:3a:55:de:f5:ee:9d:15:08:48:7a:ca:f9:d1:86:33:8a: c2:2d:a7:9f:00:33:0b:59:88:1c:56:b9:0a:f3:75:70:77:7d: 18:64:35:af:f3:0f:6d:40:06:97:3f:85:42:4b:93:26:36:08: 08:9a:10:50:0b:98:c9:61:85:5b:ee:02:b3:04:18:f8:b3:15: 0a:40:34:00:22:07:e7:97:07:87:18:30:97:61:c7:91:2c:fc: f4:73:56:a5:15:ee:81:84:b3:23:d9:c3:86:75:a4:64:42:17: 15:14:5c:d9:03:36:84:80:87:80:b5:8d:d1:ce:4e:33:b1:8d: 34:fb:b8:4d:1c:5e:ba:d8:a6:b4:9f:b6:39:1c:c7:25:00:2f: 95:83:bf:e3:aa:62:6d:b9:78:2f:a8:18:45:7a:0a:c3:79:e6: 8d:64:9f:7f:1b:a8:e5:ab:b6:a5:0f:7e:f7:9d:eb:cc:eb:bd: a7:e7:05:fd:85:b6:db:25:be:b8:f4:41:2a:0b:2d:d9:6e:22: 7a:fe:2c:82:1d:2e:0f:73:fa:78:19:35:1d:a7:97:25:b5:fd: 49:df:29:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUwNDA0MTcyMjA4WhcNMjUwNDExMTcyMjA4WjAYMRYwFAYD VQQDEw02N2YwMTU0MC03ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2LBfu1NSKBDA0QfP3xbg6l/1d+FjREMMGIb8j5iUawW8vJKDpr926FWxdk6 OR9yJNzbAfBv+KKLR7ZZUEcVV0vI/7VLXWci4NRCCWjC96qj9DKsu1rv4Y5IHdsR Gixy9iKQRyEysVN8PHHAiEMTJw1QVf08+0oc1vO0UUkVmbwvHbt+qT5uce+xUTAO DM0rtlZLoQdkdwIZxKnAhcuxe06Y4QX3sPDFqlq3xWjEYQ1KOOC4wrW0LTVFcrrk 2BupbB5Py+fRgIGSpns/fo/kR5q26kmLyeTR0AJKcTrKJGlTj6lHhwnUk8+MDWJW 0PKurl4tVLBetU1lsT8u1hWLeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyyZMU5 +0Xkhz5biwos+MFbcznKMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMiXBR+c1kkN+rCd7gQbKPZwz5OMR0D0iD/pc1mjq0BTa+0W5X7DpV 3vXunRUISHrK+dGGM4rCLaefADMLWYgcVrkK83Vwd30YZDWv8w9tQAaXP4VCS5Mm NggImhBQC5jJYYVb7gKzBBj4sxUKQDQAIgfnlweHGDCXYceRLPz0c1alFe6BhLMj 2cOGdaRkQhcVFFzZAzaEgIeAtY3Rzk4zsY00+7hNHF662Ka0n7Y5HMclAC+Vg7/j qmJtuXgvqBhFegrDeeaNZJ9/G6jlq7alD373nevM672n5wX9hbbbJb649EEqCy3Z biJ6/iyCHS4Pc/p4GTUdp5cltf1J3ymR -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:40 2025 by rpki-client