$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft File: GvPInPFH8v61HarolX25nThyY7g.mft (raw, json) Hash identifier: Wq73L974+IRFTpf/BkdmtzJUjVRKU6WQloLxE+BYc6A= Subject key identifier: 9C:04:A4:C4:8D:26:0C:4F:62:90:48:CA:C6:51:84:4F:02:D8:3E:1E Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 Certificate issuer: /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft Manifest number: 0148 Signing time: Sat 31 May 2025 04:04:26 +0000 Manifest this update: Sat 31 May 2025 04:04:26 +0000 Manifest next update: Sat 07 Jun 2025 04:04:26 +0000 Files and hashes: 1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: DLcYNK5k8TaXff7ZAkKraHao7q4/ezMhcSKPLOI66ts=) 2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 7xbva2x/2mRF/+1fr2KpL4N7Zq29lf7peyPdqH7ozvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8 Validity Not Before: May 31 04:04:26 2025 GMT Not After : Jun 7 04:04:26 2025 GMT Subject: CN=683a7fca-d884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:a5:8a:a3:2b:31:2e:8f:9c:fc:97:e2:2a: 6e:ad:e9:a3:59:07:b6:1c:e8:ac:b6:c4:bc:0f:6f: 78:de:03:0e:38:44:81:8e:60:bd:8c:33:c6:67:09: 9a:08:1f:7a:c0:44:fd:c9:6a:0d:93:11:98:7d:5c: aa:e0:1d:b6:40:df:84:5a:ca:f5:b7:1a:63:f1:d9: f2:7d:c1:4c:c6:67:7b:08:bd:cb:a0:52:3e:e6:24: 5c:ad:39:e0:8c:03:15:b4:a7:ba:25:13:73:03:6e: 1c:59:dd:98:be:1c:5f:d2:24:ef:5f:ad:55:58:dc: 5c:e2:62:7e:eb:d2:6d:1e:d7:d2:46:e6:17:97:e7: d6:41:cd:3a:3d:90:63:4e:bc:82:a0:40:14:c3:59: 54:ce:64:43:85:2c:09:9f:c1:25:07:a4:43:5c:2b: 10:b3:55:96:dc:59:de:9e:70:d1:87:fc:f4:5a:54: 00:8a:c6:30:89:a5:25:5e:99:65:c0:c4:d3:ec:ab: 08:ae:28:6a:b2:73:cf:59:45:38:1f:63:83:8a:99: 36:a2:af:4d:0d:e5:b6:ef:95:3b:90:1e:5a:13:1b: 47:26:1f:40:ee:54:af:0e:78:fb:1b:66:12:b6:a1: 3e:84:43:8c:7a:7b:3f:02:c3:b0:df:de:ac:d6:fb: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:A4:C4:8D:26:0C:4F:62:90:48:CA:C6:51:84:4F:02:D8:3E:1E X509v3 Authority Key Identifier: keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7b:7a:88:29:ac:b9:db:45:7d:ce:21:0b:a3:e5:41:b7:29: 28:2c:35:24:a7:03:9c:5a:24:18:98:7e:4e:7e:83:74:4d:5c: 51:97:c2:6b:c8:23:ce:ce:36:ef:8b:e7:14:54:20:c3:1d:b6: bf:08:d4:73:f5:53:12:cc:9d:a5:b6:ab:e1:2c:a6:88:55:0b: ca:73:60:e7:74:92:73:e5:eb:e3:84:5d:37:30:ce:22:2e:8a: fa:e8:97:9c:b0:d7:2e:88:e1:a3:ce:ac:96:71:52:e7:37:d2: 04:09:15:26:03:a0:80:46:99:f9:f2:e9:1f:7f:e4:aa:43:ef: 64:21:0b:38:f2:8b:64:93:1f:e8:f4:93:20:e7:23:80:ab:62: d5:6f:4d:82:49:f2:09:6c:c1:94:0c:fb:3b:cf:7b:f4:2a:fb: de:52:a1:21:3e:6f:d8:c3:ce:2a:0f:39:32:6f:a7:8a:47:d9: e0:98:59:38:67:d3:6f:18:d0:ae:4c:8d:18:5e:f6:64:fb:06: d0:54:86:92:99:66:f9:88:a0:f0:29:32:e2:8a:3d:21:ed:ea: 9f:f8:0c:1a:fa:0a:6b:91:c6:c8:f8:2d:b5:31:9d:45:c8:d3: 8a:50:c1:15:52:39:84:85:97:c2:c6:5b:44:8e:fa:f0:1a:d3: cc:83:62:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE Mzg3MjYzQjgwHhcNMjUwNTMxMDQwNDI2WhcNMjUwNjA3MDQwNDI2WjAYMRYwFAYD VQQDEw02ODNhN2ZjYS1kODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YKliqMrMS6PnPyX4ipuremjWQe2HOistsS8D2943gMOOESBjmC9jDPGZwma CB96wET9yWoNkxGYfVyq4B22QN+EWsr1txpj8dnyfcFMxmd7CL3LoFI+5iRcrTng jAMVtKe6JRNzA24cWd2Yvhxf0iTvX61VWNxc4mJ+69JtHtfSRuYXl+fWQc06PZBj TryCoEAUw1lUzmRDhSwJn8ElB6RDXCsQs1WW3FnennDRh/z0WlQAisYwiaUlXpll wMTT7KsIrihqsnPPWUU4H2ODipk2oq9NDeW275U7kB5aExtHJh9A7lSvDnj7G2YS tqE+hEOMens/AsOw396s1vvTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwEpMSN JgxPYpBIysZRhE8C2D4eMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2 NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRe3qIKay520V9ziELo+VBtykoLDUkpwOcWiQYmH5OfoN0TVxRl8Jr yCPOzjbvi+cUVCDDHba/CNRz9VMSzJ2ltqvhLKaIVQvKc2DndJJz5evjhF03MM4i Lor66JecsNcuiOGjzqyWcVLnN9IECRUmA6CARpn58ukff+SqQ+9kIQs48otkkx/o 9JMg5yOAq2LVb02CSfIJbMGUDPs7z3v0KvveUqEhPm/Yw84qDzkyb6eKR9ngmFk4 Z9NvGNCuTI0YXvZk+wbQVIaSmWb5iKDwKTLiij0h7eqf+Awa+gprkcbI+C21MZ1F yNOKUMEVUjmEhZfCxltEjvrwGtPMg2KF -----END CERTIFICATE-----Generated at Sat May 31 16:32:10 2025 by rpki-client