$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: b1KWdN1+FG2w+IDSQvalsigmhHjPLkoiWDgtbCkm/mo= Subject key identifier: 9D:33:46:88:3E:5B:70:3A:95:F2:86:BF:84:76:5E:FF:8F:4A:2C:01 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 0145 Signing time: Sat 29 Mar 2025 02:50:33 +0000 Manifest this update: Sat 29 Mar 2025 02:50:33 +0000 Manifest next update: Sat 05 Apr 2025 02:50:33 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: 7ewXqb0ogwg4EdVyUMhTOIj6KwPOSA5ZLqTYiNgwLhQ=) 2: F2193D06E52F11EF9018DF3DC4F9AE02.roa (hash: TD32Q7cfxvSxowVLe5w7wBavAkiGsR4pP6F9g174g7Y=) 3: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3 Validity Not Before: Mar 29 02:50:33 2025 GMT Not After : Apr 5 02:50:33 2025 GMT Subject: CN=67e75ff9-43cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:40:67:b9:6c:2a:f0:35:14:26:cc:02:e2: e5:c3:1d:cf:47:73:f7:13:38:53:84:3b:5a:46:f4: 4f:4d:7c:01:1d:83:02:a0:17:04:a1:6c:93:9f:ae: 2e:d7:de:bf:f4:59:25:3f:eb:da:b8:7e:bc:85:33: db:41:04:14:21:15:16:47:5f:de:fd:8b:7b:fa:18: 8c:13:9e:eb:d9:89:90:c4:78:73:03:be:e3:5d:e5: e8:24:4f:76:d9:f3:35:95:26:e7:01:c7:bf:f1:35: b4:73:cb:98:c1:c0:cd:e1:d0:79:77:76:37:04:93: a1:e8:a3:85:bf:fc:7d:31:b2:6f:88:3e:18:d8:aa: 79:8c:3b:4d:b5:52:e1:d8:f7:77:f4:9e:b3:af:a4: 8d:7d:3c:80:bd:62:69:52:76:11:6a:b8:92:c4:db: e0:b9:9a:f7:44:d6:3e:37:d1:6f:66:14:dc:5d:bf: 63:1f:17:bc:9e:53:5b:34:ae:ca:2b:a6:98:9a:4f: cd:e3:3c:e8:4f:67:50:af:e7:13:da:70:cc:0c:10: 8d:91:6d:af:29:3b:64:8b:9e:95:a6:4c:54:5b:7b: 09:0e:a9:28:2e:9a:ce:42:8f:d9:ee:2d:39:9a:2a: 61:91:89:b7:ab:4b:d7:a1:42:92:f3:05:ac:61:db: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:33:46:88:3E:5B:70:3A:95:F2:86:BF:84:76:5E:FF:8F:4A:2C:01 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:81:ea:62:78:ec:af:38:57:28:b2:7c:06:e5:1d:5a:1a: 8e:fd:49:ed:74:f7:51:28:c0:f1:36:18:f1:d5:2b:2c:62:38: 34:91:dd:c9:87:96:aa:92:23:9a:25:fe:1e:2d:f8:94:f3:12: ea:08:b7:02:f7:0b:9e:71:8f:bc:d6:15:5a:96:cc:b0:9d:23: e9:4b:3f:fc:b2:96:a5:3d:89:f2:92:1b:64:50:85:f1:c4:bd: f5:c2:68:ab:42:81:aa:21:a3:de:f9:b9:1e:39:2b:59:8a:3e: 6f:f2:ae:c8:dc:a9:fb:de:30:74:28:21:84:90:db:5d:00:18: 70:13:68:90:4f:10:c7:40:87:64:3a:e6:2b:c2:03:23:19:e6: 97:7a:6d:2c:fb:eb:d8:5a:a2:ef:a2:1e:5f:dd:c3:5e:ca:e8: 74:d1:4e:49:5f:94:25:6d:da:20:48:9e:f3:5d:bb:40:26:a7: 68:22:8e:ae:b7:f2:fb:26:32:df:51:a2:d7:74:b4:4f:34:9a: 57:cd:77:a4:c7:ae:53:5f:4f:b0:9b:f9:17:7f:53:64:2a:a8: 4e:8a:61:fe:b7:9a:0b:53:20:99:f5:ee:c1:38:8b:55:a4:ae: 37:41:7e:d1:e0:b4:ac:17:31:7b:6f:41:eb:a8:00:fd:60:0a: 5d:be:5e:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwMzI5MDI1MDMzWhcNMjUwNDA1MDI1MDMzWjAYMRYwFAYD VQQDEw02N2U3NWZmOS00M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF9AZ7lsKvA1FCbMAuLlwx3PR3P3EzhThDtaRvRPTXwBHYMCoBcEoWyTn64u 196/9FklP+vauH68hTPbQQQUIRUWR1/e/Yt7+hiME57r2YmQxHhzA77jXeXoJE92 2fM1lSbnAce/8TW0c8uYwcDN4dB5d3Y3BJOh6KOFv/x9MbJviD4Y2Kp5jDtNtVLh 2Pd39J6zr6SNfTyAvWJpUnYRariSxNvguZr3RNY+N9FvZhTcXb9jHxe8nlNbNK7K K6aYmk/N4zzoT2dQr+cT2nDMDBCNkW2vKTtki56VpkxUW3sJDqkoLprOQo/Z7i05 miphkYm3q0vXoUKS8wWsYdvj/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0zRog+ W3A6lfKGv4R2Xv+PSiwBMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+FIHqYnjsrzhXKLJ8BuUdWhqO/UntdPdRKMDxNhjx1SssYjg0kd3J h5aqkiOaJf4eLfiU8xLqCLcC9wuecY+81hValsywnSPpSz/8spalPYnykhtkUIXx xL31wmirQoGqIaPe+bkeOStZij5v8q7I3Kn73jB0KCGEkNtdABhwE2iQTxDHQIdk OuYrwgMjGeaXem0s++vYWqLvoh5f3cNeyuh00U5JX5QlbdogSJ7zXbtAJqdoIo6u t/L7JjLfUaLXdLRPNJpXzXekx65TX0+wm/kXf1NkKqhOimH+t5oLUyCZ9e7BOItV pK43QX7R4LSsFzF7b0HrqAD9YApdvl5A -----END CERTIFICATE-----Generated at Sat Apr 5 00:02:20 2025 by rpki-client