$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft File: gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json) Hash identifier: wxEuTaY+fUj4FPVgATrevUyA3htKN+qaEkLjUahO9UU= Subject key identifier: E4:A2:B2:69:5F:35:F6:3E:95:95:2B:A0:51:FD:C6:04:40:15:7C:91 Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 Certificate issuer: /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft Manifest number: B2 Signing time: Sat 31 May 2025 05:36:46 +0000 Manifest this update: Sat 31 May 2025 05:36:46 +0000 Manifest next update: Sat 07 Jun 2025 05:36:46 +0000 Files and hashes: 1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: GRgB43jXfdADU+iBMe/CKfoGnKT9XhzIwfPqPpeljl0=) 2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98 Validity Not Before: May 31 05:36:46 2025 GMT Not After : Jun 7 05:36:46 2025 GMT Subject: CN=683a956e-9dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:5f:ce:7d:dd:0d:09:a1:97:5f:2e:33:0d: fe:f5:d2:c3:d8:ad:1e:0f:e9:73:9a:dd:12:16:2c: 3d:d1:1d:5e:be:7e:86:41:7e:3e:f9:53:3d:09:33: 42:3c:a3:a8:06:40:63:53:28:d5:95:93:de:32:26: 88:1a:b0:f3:18:0e:7a:e1:ce:6b:81:9a:f7:e4:ea: f3:13:7b:d4:35:29:cd:d4:63:a8:f0:b5:69:6b:d2: 00:9e:cb:22:14:aa:f4:38:2e:b8:d0:47:67:80:8b: da:f9:f3:c7:cc:e4:40:aa:04:c1:0f:d1:8c:f6:b0: 92:8a:6f:f4:11:e9:12:ef:7a:e9:f3:13:e1:ca:c6: bc:6d:d2:5b:e9:74:9e:63:e5:bf:80:a5:9c:d5:cd: 99:f4:50:b5:6e:b9:a1:30:9e:f7:f4:bd:5f:53:d1: 3c:90:a2:54:28:a1:97:cb:39:47:ef:5d:39:0d:6b: f0:5e:f7:3b:69:10:ef:bb:7a:03:b9:62:97:b8:86: 1b:3e:07:d0:b7:3a:81:7f:d0:71:61:51:0f:fa:0d: 0a:8e:e5:c5:45:d6:c6:f4:5a:3e:77:14:04:f4:31: 78:1a:1c:50:0b:48:bc:f9:69:33:79:28:b0:6d:d3: cd:13:fc:7c:f7:1f:38:ed:8c:26:8a:7e:a8:01:dd: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A2:B2:69:5F:35:F6:3E:95:95:2B:A0:51:FD:C6:04:40:15:7C:91 X509v3 Authority Key Identifier: keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6e:87:83:a8:8f:d4:c0:10:dd:ee:fa:8f:17:9d:53:3d:ab: af:23:79:26:b8:8d:bd:67:c5:e2:89:01:b4:58:db:fe:48:37: d8:ef:f2:20:bf:43:d3:4e:bd:a2:93:96:ff:e5:22:05:2a:bb: ec:84:28:85:09:4c:50:d4:f4:67:de:71:9f:95:75:eb:dd:50: 53:69:53:69:d6:db:4e:db:02:70:4d:92:ee:0c:b8:0d:2b:61: 2a:ed:4e:08:3d:f1:dc:d2:f1:91:46:b8:59:61:1c:24:8c:10: e1:a4:b2:2e:16:dd:9c:67:b6:5f:96:1c:18:bd:79:59:ef:37: 3d:43:e7:60:d8:b4:1f:67:ce:95:b8:b2:12:64:8a:1f:05:6a: 8c:a1:cc:0e:2d:a9:72:55:61:a9:94:69:9b:de:32:e4:58:71: 14:f5:ef:c5:5f:3a:6a:51:df:d1:d4:17:d7:35:ec:16:65:ec: c7:69:37:52:2f:0a:76:ad:c8:c0:62:cc:57:79:4f:83:f0:15: 63:63:c1:5d:39:cd:f7:11:8c:d2:60:4b:7d:28:c2:05:5e:b3: 05:31:6d:48:d8:30:24:55:06:7e:ca:c8:17:b8:7b:af:48:97: 28:90:1f:37:d2:56:a7:60:2a:d0:ef:c5:2b:fd:3e:d0:9f:f8: ae:1c:27:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0 NEJFODZDOTgwHhcNMjUwNTMxMDUzNjQ2WhcNMjUwNjA3MDUzNjQ2WjAYMRYwFAYD VQQDEw02ODNhOTU2ZS05ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Zfzn3dDQmhl18uMw3+9dLD2K0eD+lzmt0SFiw90R1evn6GQX4++VM9CTNC PKOoBkBjUyjVlZPeMiaIGrDzGA564c5rgZr35OrzE3vUNSnN1GOo8LVpa9IAnssi FKr0OC640EdngIva+fPHzORAqgTBD9GM9rCSim/0EekS73rp8xPhysa8bdJb6XSe Y+W/gKWc1c2Z9FC1brmhMJ739L1fU9E8kKJUKKGXyzlH7105DWvwXvc7aRDvu3oD uWKXuIYbPgfQtzqBf9BxYVEP+g0KjuXFRdbG9Fo+dxQE9DF4GhxQC0i8+WkzeSiw bdPNE/x89x847Ywmin6oAd2HuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSismlf NfY+lZUroFH9xgRAFXyRMB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC b2VmREtCdzFjVDlFdm9iSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqboeDqI/UwBDd7vqPF51TPauvI3kmuI29Z8XiiQG0WNv+SDfY7/Ig v0PTTr2ik5b/5SIFKrvshCiFCUxQ1PRn3nGflXXr3VBTaVNp1ttO2wJwTZLuDLgN K2Eq7U4IPfHc0vGRRrhZYRwkjBDhpLIuFt2cZ7ZflhwYvXlZ7zc9Q+dg2LQfZ86V uLISZIofBWqMocwOLalyVWGplGmb3jLkWHEU9e/FXzpqUd/R1BfXNewWZezHaTdS Lwp2rcjAYsxXeU+D8BVjY8FdOc33EYzSYEt9KMIFXrMFMW1I2DAkVQZ+ysgXuHuv SJcokB830lanYCrQ78Ur/T7Qn/iuHCdj -----END CERTIFICATE-----Generated at Sat May 31 16:45:44 2025 by rpki-client