$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: gy04UpKstncLZ5TgriMIHVUxe3j8nV3gySV03VSYi4k= Subject key identifier: E9:75:23:3F:1A:80:04:8B:36:0F:08:E1:05:14:BE:76:D0:E0:76:2B Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 0234 Signing time: Sat 31 May 2025 02:06:06 +0000 Manifest this update: Sat 31 May 2025 02:06:06 +0000 Manifest next update: Sat 07 Jun 2025 02:06:06 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: Qpl8bmpG26AS1lv+ijtRaO1qo6VX/fqRzkyU5Nn3lVs=) 2: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: EWoN0iNcfOe+G9uyesPgbS2htYj/a8iGQkySadopce0=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: Eg0ppNj4Rfn9XDDO2a6sOjdWSFXYTHKi+qKN2PGRgYA=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: 5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: May 31 02:06:06 2025 GMT Not After : Jun 7 02:06:06 2025 GMT Subject: CN=683a640e-133a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:17:ef:38:0e:74:d4:f5:05:e2:4c:8e:bc: af:3e:b0:cd:fb:4e:60:b0:87:11:a3:70:4e:7c:29: 24:41:dc:37:74:e4:a1:5c:86:72:80:86:c6:8b:69: 95:54:8c:81:fc:08:59:13:0c:c7:83:08:c0:34:ec: 4c:1a:e9:81:44:c6:04:e5:78:5b:ef:79:16:8c:2a: 8e:06:0c:3c:89:c2:66:c2:54:bc:a2:ce:7b:32:40: 3d:40:c0:98:66:6c:0d:0e:c5:56:ef:4f:35:1e:4b: 5b:78:0b:4e:be:0e:f3:c1:eb:ee:f7:85:9c:e0:2f: 29:e7:2f:9a:b1:d5:bb:60:7e:73:e0:22:df:22:16: 9f:cd:07:17:15:11:75:37:38:71:ed:f0:5e:81:51: 81:74:79:ec:dd:d8:7a:9c:e7:84:8c:6c:bc:fb:84: eb:ff:fe:c4:13:ac:82:83:9e:b2:51:4d:f4:b9:9b: be:76:8a:f3:55:c3:23:4d:d9:8d:bd:c6:be:8d:c1: b3:05:b3:9a:66:f1:f2:fb:9c:cb:29:21:1e:d8:e1: 6e:36:27:95:1f:f3:07:e2:f4:63:5a:73:34:ef:b5: 08:98:d9:e6:74:9e:9a:39:c1:6e:c4:45:1d:dd:35: af:ba:67:9e:b6:17:7c:37:f7:6c:3a:b8:c2:0b:67: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:23:3F:1A:80:04:8B:36:0F:08:E1:05:14:BE:76:D0:E0:76:2B X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:73:63:b4:55:f9:d0:02:67:b0:74:79:4d:42:5f:7d:5c:a6: 83:9d:d8:80:42:92:13:4d:ba:6d:5c:15:c6:57:81:88:bf:e8: c8:7f:79:ed:51:b3:54:07:b3:70:42:45:33:ee:5d:65:7a:71: c1:fd:7e:4f:c3:4f:e2:b0:44:fa:22:74:5b:f6:46:10:b1:a8: c7:71:cd:84:f3:40:5a:c7:d0:7c:21:83:b1:d6:6f:ec:d1:dd: 94:2d:cc:c2:ba:38:ce:78:84:28:c9:3c:70:5e:99:c8:50:3f: 45:bf:ba:46:a5:f9:5d:04:63:e1:d6:2c:6b:be:b5:86:63:99: 0e:8c:d9:a7:a5:eb:4a:4f:23:6b:6d:d7:d2:05:64:53:fd:93: 59:c4:96:74:26:08:5f:69:d3:b8:4d:66:da:a9:ab:07:a1:5b: c7:62:76:24:e9:31:07:66:31:75:d9:d2:0e:32:fe:47:98:53: 56:6e:45:2d:84:da:18:79:54:eb:ee:94:e5:56:49:2a:25:a5: 92:cb:cf:16:36:d6:cd:41:cc:39:4e:d9:d0:ab:5b:6d:dd:ad: aa:eb:d3:e4:19:a4:02:66:05:3a:8a:f6:32:39:07:38:3d:2b: a3:9a:29:2e:85:f9:ac:8c:53:31:ae:d9:ad:c0:d9:30:b7:84: 34:91:9c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjUwNTMxMDIwNjA2WhcNMjUwNjA3MDIwNjA2WjAYMRYwFAYD VQQDEw02ODNhNjQwZS0xMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaQX7zgOdNT1BeJMjryvPrDN+05gsIcRo3BOfCkkQdw3dOShXIZygIbGi2mV VIyB/AhZEwzHgwjANOxMGumBRMYE5Xhb73kWjCqOBgw8icJmwlS8os57MkA9QMCY ZmwNDsVW7081HktbeAtOvg7zwevu94Wc4C8p5y+asdW7YH5z4CLfIhafzQcXFRF1 Nzhx7fBegVGBdHns3dh6nOeEjGy8+4Tr//7EE6yCg56yUU30uZu+dorzVcMjTdmN vca+jcGzBbOaZvHy+5zLKSEe2OFuNieVH/MH4vRjWnM077UImNnmdJ6aOcFuxEUd 3TWvumeethd8N/dsOrjCC2dv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl1Iz8a gASLNg8I4QUUvnbQ4HYrMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/c2O0VfnQAmewdHlNQl99XKaDndiAQpITTbptXBXGV4GIv+jIf3nt UbNUB7NwQkUz7l1lenHB/X5Pw0/isET6InRb9kYQsajHcc2E80Bax9B8IYOx1m/s 0d2ULczCujjOeIQoyTxwXpnIUD9Fv7pGpfldBGPh1ixrvrWGY5kOjNmnpetKTyNr bdfSBWRT/ZNZxJZ0JghfadO4TWbaqasHoVvHYnYk6TEHZjF12dIOMv5HmFNWbkUt hNoYeVTr7pTlVkkqJaWSy88WNtbNQcw5TtnQq1tt3a2q69PkGaQCZgU6ivYyOQc4 PSujmikuhfmsjFMxrtmtwNkwt4Q0kZx9 -----END CERTIFICATE-----Generated at Sat May 31 17:28:51 2025 by rpki-client