$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: 7VHEAegJewohMJXNWDJ4pK7GsDaggcMVJ3TmGrd7xD0= Subject key identifier: 89:DE:11:D4:33:D2:23:F8:1A:55:9A:65:3F:BC:E5:18:0A:BB:F9:7A Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 01EB Signing time: Sat 31 May 2025 02:17:49 +0000 Manifest this update: Sat 31 May 2025 02:17:48 +0000 Manifest next update: Sat 07 Jun 2025 02:17:48 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: K1KM+zo8aMsuoks0DUmjtaOAUixC7wqoKm4M8E/au6o=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: May 31 02:17:48 2025 GMT Not After : Jun 7 02:17:48 2025 GMT Subject: CN=683a66cd-5c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:98:40:36:4a:2c:fd:f8:fe:f0:8d:bf:a6: 3f:fc:0b:1b:2b:6d:b7:5a:b3:3c:58:7e:6e:d6:71: cf:5f:69:80:13:c3:5e:5a:e7:d4:5f:0e:fc:62:ef: ee:34:68:d3:bd:b4:94:a6:a2:cf:1e:a2:89:6c:01: 0b:1a:39:29:39:0e:4c:fb:d1:51:4b:14:df:3d:6f: 20:f6:0c:ee:98:9e:b1:cb:60:60:5b:86:c0:67:52: fe:a4:61:42:ec:37:1c:d1:49:aa:07:63:33:77:0c: af:a4:f9:1d:69:2f:de:5e:e0:11:16:a9:d6:4a:e1: 6c:97:a5:5a:5c:ee:6e:4d:e9:f4:e0:c0:8e:4a:11: c1:6c:c7:3c:33:73:3d:61:95:33:41:ce:47:75:87: 21:8d:52:8f:ea:a9:55:e0:7a:6b:00:bd:56:69:f5: 29:94:de:b7:1c:88:53:09:85:0a:ff:26:4f:3c:76: f2:3c:b8:e9:8f:94:46:9c:d1:2e:01:ad:2e:49:36: 9f:d4:4d:cf:2e:58:62:84:ec:7d:02:76:a8:93:3f: 51:3d:8c:f9:3e:ef:88:1f:7a:00:e7:55:70:a2:be: 40:c3:b4:b7:35:05:63:db:43:ce:4c:bc:2d:71:ce: 46:d2:03:66:38:f8:33:74:d7:12:fa:9d:02:b3:06: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:11:D4:33:D2:23:F8:1A:55:9A:65:3F:BC:E5:18:0A:BB:F9:7A X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:04:b9:1f:4c:7d:b4:d7:48:c5:7a:8d:ce:eb:d4:f8:55:96: b4:0f:a7:d3:75:6b:f9:39:53:c5:28:36:5c:7c:40:ab:46:43: 36:56:db:94:97:72:f4:b9:fa:2c:50:99:de:f0:a8:33:a9:eb: 32:49:b1:a7:3d:b0:36:1a:9f:a9:e8:cd:42:9f:e6:ef:34:a2: 5c:0a:6a:13:90:65:15:f3:fc:34:eb:5e:72:1f:89:ab:97:0c: 9a:72:85:07:77:d3:14:8d:2e:c3:be:ad:c7:e9:e9:a4:09:0c: 96:64:b5:76:11:62:ca:a3:24:1f:c3:45:23:1b:1e:44:b3:c3: a2:05:b6:ff:8f:ad:51:84:42:12:b0:ff:9f:8f:3c:33:a2:66: cc:86:dc:1a:b9:36:aa:9e:fc:ef:55:cf:a7:33:37:61:a5:73: f2:6e:1f:39:8a:9f:f9:ba:86:a3:e1:13:2d:84:a1:0a:fc:69: 7a:ad:3e:69:18:9c:f8:d2:9a:9a:d2:5f:46:8a:92:31:85:fd: a4:f7:d7:05:bb:7b:33:df:e9:3a:05:47:3c:5e:0b:5e:38:28: b1:e8:dd:9a:c4:c1:33:3c:1e:f3:c6:a7:29:82:4c:85:3e:15: a6:41:dc:69:f7:d8:e3:d3:08:41:51:5b:fd:fc:f9:49:ec:6d: 0a:16:1f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwNTMxMDIxNzQ4WhcNMjUwNjA3MDIxNzQ4WjAYMRYwFAYD VQQDEw02ODNhNjZjZC01YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c+YQDZKLP34/vCNv6Y//AsbK223WrM8WH5u1nHPX2mAE8NeWufUXw78Yu/u NGjTvbSUpqLPHqKJbAELGjkpOQ5M+9FRSxTfPW8g9gzumJ6xy2BgW4bAZ1L+pGFC 7Dcc0UmqB2MzdwyvpPkdaS/eXuARFqnWSuFsl6VaXO5uTen04MCOShHBbMc8M3M9 YZUzQc5HdYchjVKP6qlV4HprAL1WafUplN63HIhTCYUK/yZPPHbyPLjpj5RGnNEu Aa0uSTaf1E3PLlhihOx9Anaokz9RPYz5Pu+IH3oA51Vwor5Aw7S3NQVj20POTLwt cc5G0gNmOPgzdNcS+p0Cswb4YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIneEdQz 0iP4GlWaZT+85RgKu/l6MB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrBLkfTH2010jFeo3O69T4VZa0D6fTdWv5OVPFKDZcfECrRkM2VtuU l3L0ufosUJne8KgzqesySbGnPbA2Gp+p6M1Cn+bvNKJcCmoTkGUV8/w0615yH4mr lwyacoUHd9MUjS7Dvq3H6emkCQyWZLV2EWLKoyQfw0UjGx5Es8OiBbb/j61RhEIS sP+fjzwzombMhtwauTaqnvzvVc+nMzdhpXPybh85ip/5uoaj4RMthKEK/Gl6rT5p GJz40pqa0l9GipIxhf2k99cFu3sz3+k6BUc8XgteOCix6N2axMEzPB7zxqcpgkyF PhWmQdxp99jj0whBUVv9/PlJ7G0KFh9k -----END CERTIFICATE-----Generated at Sat May 31 16:59:23 2025 by rpki-client