$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: BRW76wJ0N65SyE0CiEyWcd4M+b60riks6GOX5oVOsBQ= Subject key identifier: 5E:FD:58:64:48:A2:45:46:34:20:F1:08:30:F3:25:BE:9C:D6:A3:2C Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 72 Signing time: Sat 31 May 2025 06:26:52 +0000 Manifest this update: Sat 31 May 2025 06:26:52 +0000 Manifest next update: Sat 07 Jun 2025 06:26:52 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: 63ib4pvKBJ9l6l4lhf+TcWZ1gJIJuVoKlCmrChkegxU=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: hHmJZ4kZTc3eByWyfovBTyBy7zoc4MRBKG9FMUzpQOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: May 31 06:26:52 2025 GMT Not After : Jun 7 06:26:52 2025 GMT Subject: CN=683aa12c-e5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:f1:c8:ed:f2:ed:32:e5:2a:db:c6:59:c9: 71:90:89:19:f4:20:6f:22:86:ba:fb:4f:dd:8c:a2: 02:15:26:2c:e1:be:c6:3c:8e:25:b5:0c:0a:9f:53: 81:2b:df:fe:d8:ef:96:00:f8:42:ea:70:33:eb:e4: 8d:7a:95:79:03:2d:c2:88:69:62:83:ab:3c:3f:ff: 6f:3a:40:16:c9:51:50:1c:1a:f4:91:f7:94:7c:f8: b7:12:32:41:90:b1:96:50:2c:cd:be:f0:77:c5:6a: e5:f0:c2:af:c1:fe:e9:17:8b:0b:04:bc:b1:c9:d3: 17:e8:c5:c8:f1:d7:ec:0d:68:4e:fa:2f:ce:fc:0a: 5f:45:53:17:3a:e0:ce:a5:00:c0:6a:d4:23:36:49: e9:8d:17:46:c3:2d:e1:f8:1c:a3:16:5c:f8:8c:2d: b7:a6:09:61:16:35:e0:0e:0d:94:3f:02:cf:a6:7c: 9d:81:2c:73:42:a3:d1:1e:1e:f3:ce:fa:88:d9:02: 02:63:9a:13:72:04:65:5d:33:5c:bf:de:59:85:d4: 08:8c:2c:4e:e9:94:15:15:fd:64:8d:39:78:1a:3c: 2d:e0:c4:5f:47:ce:97:2f:c6:ef:d1:f6:59:b9:a7: 1a:46:5d:00:1d:7f:17:f9:6a:62:36:83:14:db:03: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:58:64:48:A2:45:46:34:20:F1:08:30:F3:25:BE:9C:D6:A3:2C X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:75:c2:e2:8b:c5:6c:c4:0d:47:8d:3d:d5:81:38:a0:bc:46: 16:d9:ce:2f:eb:2f:d5:5f:0d:c2:ca:b6:cd:c1:87:b3:da:b9: d2:0d:d7:9e:42:b8:94:0b:09:b8:79:09:d7:6b:f4:fc:44:c9: 2a:be:2f:51:87:c4:70:f2:6d:e1:6c:4a:52:78:03:c7:34:6c: 78:37:d0:3b:e8:ac:cb:2c:d0:7a:14:9d:f9:4e:81:d4:7a:b6: f4:33:6c:a0:a1:d4:0f:6c:b4:86:6d:ab:c4:73:a9:e1:87:7d: 3e:b1:ba:61:2f:ce:83:5e:56:81:3b:19:42:13:1c:78:f1:fc: f1:90:93:ba:9c:ed:33:2a:52:6f:39:dd:72:03:49:f6:3f:4c: 6b:37:48:24:70:17:32:f3:48:51:c6:f6:d9:e4:9f:f3:de:a2: 01:52:57:e7:56:d3:3d:d8:72:b5:9a:83:ac:d2:e7:11:e9:03: 26:59:19:2a:0d:36:6f:13:8e:ab:e0:e2:d9:2a:3d:89:c3:02: 23:61:1b:ad:c9:bd:76:bf:ec:d8:ee:d4:1f:70:2c:c4:bf:d3: 4c:f2:03:4b:8c:58:08:25:7f:82:52:0a:33:82:9c:bb:a2:bd: 8a:0c:93:17:54:ad:2d:bd:b9:77:38:8d:b6:19:3d:e9:3a:ad: 02:35:a3:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzhGMDExMC8GA1UEBRMoODMxN0ZDN0E4MkIwRUU4NjUyMERGMThGRkQ1NzI5NTEx NkRBNURGMjAeFw0yNTA1MzEwNjI2NTJaFw0yNTA2MDcwNjI2NTJaMBgxFjAUBgNV BAMTDTY4M2FhMTJjLWU1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDlPHI7fLtMuUq28ZZyXGQiRn0IG8ihrr7T92MogIVJizhvsY8jiW1DAqfU4Er 3/7Y75YA+ELqcDPr5I16lXkDLcKIaWKDqzw//286QBbJUVAcGvSR95R8+LcSMkGQ sZZQLM2+8HfFauXwwq/B/ukXiwsEvLHJ0xfoxcjx1+wNaE76L878Cl9FUxc64M6l AMBq1CM2SemNF0bDLeH4HKMWXPiMLbemCWEWNeAODZQ/As+mfJ2BLHNCo9EeHvPO +ojZAgJjmhNyBGVdM1y/3lmF1AiMLE7plBUV/WSNOXgaPC3gxF9Hzpcvxu/R9lm5 pxpGXQAdfxf5amI2gxTbAz7LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXv1YZEii RUY0IPEIMPMlvpzWoywwHwYDVR0jBBgwFoAUgxf8eoKw7oZSDfGP/VcpURbaXfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzOEYwLzBBNzcxQTM2OTNB RTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hmOGVvS3c3b1pTRGZHUF9WY3BVUmJhWGZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz OEYwLzBBNzcxQTM2OTNBRTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29a U0RmR1BfVmNwVVJiYVhmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGp1wuKLxWzEDUeNPdWBOKC8RhbZzi/rL9VfDcLKts3Bh7PaudIN155C uJQLCbh5Cddr9PxEySq+L1GHxHDybeFsSlJ4A8c0bHg30DvorMss0HoUnflOgdR6 tvQzbKCh1A9stIZtq8RzqeGHfT6xumEvzoNeVoE7GUITHHjx/PGQk7qc7TMqUm85 3XIDSfY/TGs3SCRwFzLzSFHG9tnkn/PeogFSV+dW0z3YcrWag6zS5xHpAyZZGSoN Nm8Tjqvg4tkqPYnDAiNhG63JvXa/7Nju1B9wLMS/00zyA0uMWAglf4JSCjOCnLui vYoMkxdUrS29uXc4jbYZPek6rQI1o1Y= -----END CERTIFICATE-----Generated at Sat May 31 17:16:11 2025 by rpki-client