$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft File: gwig5Q7SdrauEaNIK8K70EDlnxo.mft (raw, json) Hash identifier: f/j5MstXR1OBEOa9cy/zFnqrjXPP+nVvEsgQUi4hjmU= Subject key identifier: 36:B9:75:9F:11:15:52:F0:48:5D:91:9E:CC:49:4C:F6:BB:59:FC:B9 Authority key identifier: 83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A Certificate issuer: /CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft Manifest number: 0A9F Signing time: Fri 30 May 2025 19:44:32 +0000 Manifest this update: Fri 30 May 2025 19:44:31 +0000 Manifest next update: Fri 06 Jun 2025 19:44:31 +0000 Files and hashes: 1: gwig5Q7SdrauEaNIK8K70EDlnxo.crl (hash: z/T3Ozh5Y0NPq/fpfiva1wb8X4PmlVltDC6HB4dobEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45A0, serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Validity Not Before: May 30 19:44:31 2025 GMT Not After : Jun 6 19:44:31 2025 GMT Subject: CN=683a0aa0-a944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:1f:ae:7e:ae:43:ca:82:24:c2:3e:21:a0: 6c:7a:33:df:12:4a:c7:98:ae:39:e7:88:36:02:52: f2:a3:fa:74:18:a9:53:9a:bc:c3:02:3c:9e:25:68: 58:d9:39:25:27:da:b9:64:87:11:5a:07:ff:94:a4: bc:06:7e:95:a8:34:05:8f:32:47:4e:2a:a4:74:4c: 0a:b5:43:e4:49:fc:c8:ec:da:81:65:01:6b:c6:31: 51:09:a2:13:02:aa:d8:ac:fd:c0:63:f0:56:4a:fb: b9:67:8f:a1:58:3d:d3:32:b1:2b:ce:a2:3d:dc:81: af:80:35:05:51:23:9f:4c:dd:98:9e:7f:81:8a:7a: 12:88:d0:6b:da:d6:2b:44:3c:bd:8f:5c:b0:02:17: 39:ba:44:85:67:8e:9b:d2:61:fc:e1:c5:aa:97:ce: 24:d5:02:e1:b4:15:67:5d:1b:17:25:71:ca:4f:36: 5d:c5:03:63:26:55:52:0c:26:13:a8:6f:98:7d:06: 9a:82:52:07:bd:06:d3:62:54:c6:22:a9:57:d7:17: 7f:b5:58:c6:c2:2f:d0:7a:44:53:1c:d5:26:e9:43: 9d:e9:dc:80:52:df:56:93:f9:84:92:1f:86:4b:2f: bf:e2:34:b7:5d:92:dd:16:d4:da:9a:8c:e0:a0:09: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B9:75:9F:11:15:52:F0:48:5D:91:9E:CC:49:4C:F6:BB:59:FC:B9 X509v3 Authority Key Identifier: keyid:83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:71:02:67:71:dd:9e:dc:83:e7:b0:d8:72:23:ea:4b:7c:5f: 31:77:87:3d:59:59:91:32:72:c5:f6:ab:3f:57:b1:c4:3d:64: bd:ce:24:ca:12:e4:85:92:32:2b:51:d7:bb:13:26:f6:8e:58: c1:6e:cd:a0:b0:95:d5:5e:f1:b2:c7:c5:94:1e:78:49:11:00: 4b:6f:54:36:08:88:4d:35:78:f6:9b:bd:fe:80:8a:56:8d:72: 81:58:02:ad:44:e7:12:84:97:dd:29:6b:8c:f2:94:2e:1c:88: 1f:4e:a9:63:f3:8e:95:bd:8b:88:c1:7e:92:36:f4:f2:bf:e1: 7c:d4:ff:58:f5:04:0c:4b:e8:77:70:ef:5e:d9:a7:5d:82:4f: 99:e4:b2:af:8f:cb:ec:40:43:e4:0a:60:ee:91:82:46:b9:5c: 33:ae:cd:1a:a5:57:db:8e:0a:fd:d3:42:19:c5:95:ed:3c:ce: 6e:e5:69:b0:65:29:fd:aa:98:73:80:0a:73:64:79:62:3f:35: 68:90:10:1d:26:92:5d:bf:97:e2:32:aa:cf:26:e8:14:86:6f: b6:9b:cd:76:95:aa:99:73:e1:24:29:ca:26:15:5c:5a:89:44: 30:79:41:1e:95:16:30:04:07:b9:38:30:d9:b1:d9:76:39:bc: 70:07:9f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QTAxMTAvBgNVBAUTKDgzMDhBMEU1MEVEMjc2QjZBRTExQTM0ODJCQzJCQkQw NDBFNTlGMUEwHhcNMjUwNTMwMTk0NDMxWhcNMjUwNjA2MTk0NDMxWjAYMRYwFAYD VQQDEw02ODNhMGFhMC1hOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEIfrn6uQ8qCJMI+IaBsejPfEkrHmK4554g2AlLyo/p0GKlTmrzDAjyeJWhY 2TklJ9q5ZIcRWgf/lKS8Bn6VqDQFjzJHTiqkdEwKtUPkSfzI7NqBZQFrxjFRCaIT AqrYrP3AY/BWSvu5Z4+hWD3TMrErzqI93IGvgDUFUSOfTN2Ynn+BinoSiNBr2tYr RDy9j1ywAhc5ukSFZ46b0mH84cWql84k1QLhtBVnXRsXJXHKTzZdxQNjJlVSDCYT qG+YfQaaglIHvQbTYlTGIqlX1xd/tVjGwi/QekRTHNUm6UOd6dyAUt9Wk/mEkh+G Sy+/4jS3XZLdFtTamozgoAly8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa5dZ8R FVLwSF2RnsxJTPa7Wfy5MB8GA1UdIwQYMBaAFIMIoOUO0na2rhGjSCvCu9BA5Z8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVBMC9CRjMxNDcxMjU2 RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2RyYXVFYU5JSzhLNzBFRGxu eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3aWc1UTdTZHJhdUVhTklLOEs3MEVEbG54by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVBMC9CRjMxNDcxMjU2RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2Ry YXVFYU5JSzhLNzBFRGxueG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7cQJncd2e3IPnsNhyI+pLfF8xd4c9WVmRMnLF9qs/V7HEPWS9ziTK EuSFkjIrUde7Eyb2jljBbs2gsJXVXvGyx8WUHnhJEQBLb1Q2CIhNNXj2m73+gIpW jXKBWAKtROcShJfdKWuM8pQuHIgfTqlj846VvYuIwX6SNvTyv+F81P9Y9QQMS+h3 cO9e2addgk+Z5LKvj8vsQEPkCmDukYJGuVwzrs0apVfbjgr900IZxZXtPM5u5Wmw ZSn9qphzgApzZHliPzVokBAdJpJdv5fiMqrPJugUhm+2m812laqZc+EkKcomFVxa iUQweUEelRYwBAe5ODDZsdl2ObxwB5/B -----END CERTIFICATE-----Generated at Sat May 31 17:12:59 2025 by rpki-client