$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: 6vzUKgBKI/Fh/ZFIGdlCQoa7E3USROosFqiKs2kIRt0= Subject key identifier: 3F:57:D8:5E:CB:92:02:29:8E:26:62:43:5D:7F:EA:38:15:49:C6:82 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: CC Signing time: Thu 03 Apr 2025 05:03:23 +0000 Manifest this update: Thu 03 Apr 2025 05:03:23 +0000 Manifest next update: Thu 10 Apr 2025 05:03:23 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: fP7bLT/Q6XUnVI8WctbTqIjT+MC5nOujv07LYkWg4AU=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE Validity Not Before: Apr 3 05:03:23 2025 GMT Not After : Apr 10 05:03:23 2025 GMT Subject: CN=67ee169b-143e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:62:3c:f9:bc:28:1c:8a:19:f4:24:c7:15: d7:72:74:86:01:9b:c0:40:e9:19:4e:0e:fd:7e:1c: 9e:44:31:82:15:15:2c:e0:3d:08:e6:fd:ea:ec:83: d1:6e:60:59:34:68:e6:92:77:3a:a1:69:1d:4b:34: 21:74:6a:a8:9d:ca:aa:ed:5e:5c:69:90:b4:c2:d5: c4:45:b3:7c:9b:bb:16:af:4e:f2:f3:ce:76:ef:f8: a3:77:d7:21:78:fe:b4:08:7e:fe:23:bb:40:65:eb: 76:19:90:ec:55:41:dd:b0:53:85:46:01:27:88:98: 89:be:a4:87:83:60:e4:c5:bb:67:34:e4:7e:49:5b: 19:93:ca:77:74:18:74:e2:31:86:d6:cc:c6:cf:fe: ad:c9:61:06:95:86:bd:a4:03:33:70:10:09:5d:64: 18:51:5a:74:ab:75:2d:70:33:48:79:49:92:32:2a: 56:dd:1a:f9:42:41:36:f8:24:9d:f2:3c:83:6e:61: 33:07:2d:24:86:cc:85:bb:d9:c2:02:12:7b:19:a8: 9d:34:e2:7c:ad:1b:b7:3c:e4:99:6f:af:91:aa:4b: 01:68:22:49:ee:a5:ba:85:3e:d3:ad:e3:f7:ad:65: 53:f5:2b:0e:a1:04:ef:46:66:be:e7:35:d9:d1:0c: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:57:D8:5E:CB:92:02:29:8E:26:62:43:5D:7F:EA:38:15:49:C6:82 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:7c:ff:b2:83:fa:2c:7d:84:3f:2d:a6:7d:8a:5b:47:3e:e5: ae:b0:31:13:4f:0a:d1:36:63:65:08:7e:fc:0d:39:8d:f6:4a: 0c:e4:4c:96:4c:87:3b:f1:6d:f2:f2:ea:6e:93:24:cb:0e:3f: e6:76:7b:a3:7f:36:c7:a8:f0:27:af:0f:0c:1c:b5:af:e8:c6: 09:f3:47:f9:db:ef:2c:59:62:92:61:95:bc:7d:fd:d2:27:07: 09:95:8d:f7:be:34:4d:d9:63:03:f1:df:c9:1b:c7:47:06:2b: 6c:34:26:c4:e6:5a:82:7a:bd:2a:22:26:45:87:35:c2:b1:fd: 49:46:e3:08:b2:60:be:50:de:f6:1b:3a:43:df:19:ff:66:11: 64:d7:82:34:9e:a5:36:c6:1a:1a:71:43:34:ed:f7:8e:ae:97: eb:91:b7:67:0f:6c:90:5d:03:f8:3e:9b:20:19:c7:a4:f7:a2: bb:6c:0f:ea:80:e0:45:b4:33:2e:bf:9f:2a:ed:c4:02:ed:66: 0f:0e:78:0c:3a:3a:07:1d:81:cb:1f:59:12:b7:a5:55:4d:af: 56:5f:d7:5b:ee:0f:d2:dc:8f:51:d0:ec:d4:85:55:3e:d2:53: 19:dc:68:b0:78:3f:6f:ad:f3:1e:f3:7d:34:ca:81:67:ee:84: 70:3b:95:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNDAzMDUwMzIzWhcNMjUwNDEwMDUwMzIzWjAYMRYwFAYD VQQDEw02N2VlMTY5Yi0xNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6v5iPPm8KByKGfQkxxXXcnSGAZvAQOkZTg79fhyeRDGCFRUs4D0I5v3q7IPR bmBZNGjmknc6oWkdSzQhdGqoncqq7V5caZC0wtXERbN8m7sWr07y88527/ijd9ch eP60CH7+I7tAZet2GZDsVUHdsFOFRgEniJiJvqSHg2DkxbtnNOR+SVsZk8p3dBh0 4jGG1szGz/6tyWEGlYa9pAMzcBAJXWQYUVp0q3UtcDNIeUmSMipW3Rr5QkE2+CSd 8jyDbmEzBy0khsyFu9nCAhJ7GaidNOJ8rRu3POSZb6+RqksBaCJJ7qW6hT7TreP3 rWVT9SsOoQTvRma+5zXZ0Qx9MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9X2F7L kgIpjiZiQ11/6jgVScaCMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkfP+yg/osfYQ/LaZ9iltHPuWusDETTwrRNmNlCH78DTmN9koM5EyW TIc78W3y8upukyTLDj/mdnujfzbHqPAnrw8MHLWv6MYJ80f52+8sWWKSYZW8ff3S JwcJlY33vjRN2WMD8d/JG8dHBitsNCbE5lqCer0qIiZFhzXCsf1JRuMIsmC+UN72 GzpD3xn/ZhFk14I0nqU2xhoacUM07feOrpfrkbdnD2yQXQP4PpsgGcek96K7bA/q gOBFtDMuv58q7cQC7WYPDngMOjoHHYHLH1kSt6VVTa9WX9db7g/S3I9R0OzUhVU+ 0lMZ3GiweD9vrfMe8300yoFn7oRwO5UR -----END CERTIFICATE-----Generated at Fri Apr 4 18:17:11 2025 by rpki-client