$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: z25vBbuhZbuwhUbjMVMJMgPu3jJjHQmpBZqgkiHKfHI= Subject key identifier: 50:56:AE:FD:7B:11:94:E1:D6:A0:DF:FC:8F:EC:D2:96:73:72:29:ED Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 080E Signing time: Fri 30 May 2025 21:05:27 +0000 Manifest this update: Fri 30 May 2025 21:05:26 +0000 Manifest next update: Fri 06 Jun 2025 21:05:26 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: qyynPTi+oisvoldypgwAv3FNox7xZWzYdB1nVLcZZAM=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: pTjj2b7GgJwyDNJuxZHgCMBFpwcbCF/p1EbBwHpmEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: May 30 21:05:26 2025 GMT Not After : Jun 6 21:05:26 2025 GMT Subject: CN=683a1d96-2083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:f8:91:5b:13:94:80:61:cd:f1:79:d9:e9: e0:6d:54:7e:47:6b:62:ea:90:8a:fa:14:65:91:bc: 67:aa:e9:00:0b:3d:e9:f5:fa:10:11:87:af:f4:6b: fc:d7:b4:68:be:02:21:0d:f1:06:38:82:52:2c:f8: 82:82:f6:2f:80:aa:6b:44:c1:44:9f:69:4a:d3:b5: 45:96:ca:7f:19:bf:23:bc:b0:7d:2a:f7:a3:f1:ff: 89:2e:e1:d5:9f:71:0b:13:70:b3:6a:cd:b8:5e:19: 25:d2:cc:f7:d3:43:5c:39:ac:bf:09:39:a4:6c:35: 2d:52:5d:94:d2:57:7e:39:16:d9:df:24:ba:22:b4: c0:48:74:4b:b9:b3:2a:83:b4:9b:99:99:84:78:ab: 4b:70:55:68:b6:17:97:36:0b:0d:73:b9:0e:3d:53: 66:19:ba:f5:b4:a4:1d:2c:ba:04:fb:f0:57:6f:08: 8e:a4:a0:ba:ee:bf:37:f7:c8:b9:d1:57:9d:dd:4e: a1:90:68:34:d0:b9:08:de:33:58:c2:61:b1:55:db: e0:1f:40:93:d7:94:ff:45:01:90:88:fc:8e:25:8f: e0:4c:96:83:69:86:0d:b1:65:d6:a0:52:9f:bc:bf: 98:e2:1c:79:a0:0f:75:34:08:e6:89:8d:b3:be:33: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:AE:FD:7B:11:94:E1:D6:A0:DF:FC:8F:EC:D2:96:73:72:29:ED X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:07:10:1d:d0:01:2c:bd:22:50:27:ad:c4:3d:9e:19:58:02: 44:a1:e0:00:50:56:90:2f:14:58:55:23:29:64:d8:5e:05:1a: a1:31:f3:62:ce:cd:00:12:ab:14:f5:0b:3d:91:36:8e:83:d4: 28:49:44:a2:16:2d:43:21:7b:e0:14:1c:ce:c8:87:39:be:2a: c0:79:cf:e3:5d:45:23:a1:0b:6a:c7:50:d7:d4:cd:36:e9:bf: 0e:a9:eb:b4:3b:17:4a:bc:1a:d9:12:e4:b3:bd:1c:52:be:68: 7b:2f:43:9a:96:17:8b:5f:f9:45:76:ae:7e:97:52:a5:c5:87: 46:5b:b8:40:54:cc:54:f0:79:a3:a5:14:77:56:95:04:e4:3d: 62:d2:d1:20:93:31:5c:71:af:6c:6a:53:06:e4:70:cf:b6:92: 26:ef:f9:7f:33:11:46:3e:3a:e1:f0:a1:cb:7a:e3:55:59:d3: 5d:ce:83:c4:b6:28:4d:98:f6:f2:39:96:d7:35:2d:76:62:58: 79:f1:e2:3c:fd:f2:b8:07:8d:75:76:8b:f0:d7:de:39:ed:5b: ec:b4:ec:97:64:3f:80:29:21:c2:63:36:d0:e5:c0:df:7e:9b: 51:d3:7f:41:82:16:90:27:a7:0b:1f:94:92:91:eb:2f:56:89: fc:ae:44:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjUwNTMwMjEwNTI2WhcNMjUwNjA2MjEwNTI2WjAYMRYwFAYD VQQDEw02ODNhMWQ5Ni0yMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wf4kVsTlIBhzfF52engbVR+R2ti6pCK+hRlkbxnqukACz3p9foQEYev9Gv8 17RovgIhDfEGOIJSLPiCgvYvgKprRMFEn2lK07VFlsp/Gb8jvLB9Kvej8f+JLuHV n3ELE3Czas24Xhkl0sz300NcOay/CTmkbDUtUl2U0ld+ORbZ3yS6IrTASHRLubMq g7SbmZmEeKtLcFVotheXNgsNc7kOPVNmGbr1tKQdLLoE+/BXbwiOpKC67r8398i5 0Ved3U6hkGg00LkI3jNYwmGxVdvgH0CT15T/RQGQiPyOJY/gTJaDaYYNsWXWoFKf vL+Y4hx5oA91NAjmiY2zvjPZPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBWrv17 EZTh1qDf/I/s0pZzcintMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBxAd0AEsvSJQJ63EPZ4ZWAJEoeAAUFaQLxRYVSMpZNheBRqhMfNi zs0AEqsU9Qs9kTaOg9QoSUSiFi1DIXvgFBzOyIc5virAec/jXUUjoQtqx1DX1M02 6b8Oqeu0OxdKvBrZEuSzvRxSvmh7L0OalheLX/lFdq5+l1KlxYdGW7hAVMxU8Hmj pRR3VpUE5D1i0tEgkzFcca9salMG5HDPtpIm7/l/MxFGPjrh8KHLeuNVWdNdzoPE tihNmPbyOZbXNS12Ylh58eI8/fK4B411dovw19457VvstOyXZD+AKSHCYzbQ5cDf fptR039BghaQJ6cLH5SSkesvVon8rkTq -----END CERTIFICATE-----Generated at Sat May 31 16:42:05 2025 by rpki-client