$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: RwXFQ4KgJ9bwRMRL31A2UDKP7ete78BGC5bhuF2DWhc= Subject key identifier: 19:CD:60:57:2B:5A:BD:35:A1:70:59:CE:C8:B4:99:87:0B:CF:3E:6A Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:17:36 +0000 Manifest this update: Sat 31 May 2025 07:17:36 +0000 Manifest next update: Sat 07 Jun 2025 07:17:36 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: SYGPMFgPMMv4jOREfYFEV+wF3udmCT9SQg7/EaKRKgg=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: AvVg/+A0MLB4qd4KAVoe6uLCEieXvb2jz5ivdG0pWoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: May 31 07:17:36 2025 GMT Not After : Jun 7 07:17:36 2025 GMT Subject: CN=683aad10-823e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:70:21:11:1f:7d:46:78:78:3e:19:a9:34: 4b:48:58:86:b8:8e:f6:26:b6:bd:7d:78:09:0b:e3: d6:96:8a:9e:c1:71:42:ed:d9:9a:e6:68:72:f8:c3: a5:5f:be:20:26:f4:10:92:87:67:cf:3f:24:3b:7a: 16:54:be:95:c7:2b:16:d1:f0:6c:3e:88:4b:12:3a: 3f:24:48:a1:af:26:c7:cc:ed:73:4f:77:db:b7:9e: 53:c4:26:4b:4e:10:b8:d2:93:cd:fd:13:9b:71:f3: 1d:cf:ec:02:88:b0:2e:8a:71:f8:45:53:91:ca:5b: c6:09:fe:c4:d1:1b:4c:af:86:48:35:e0:11:65:08: 16:9a:c6:6e:4e:4f:b3:fe:54:5e:e1:ca:ea:22:85: b6:48:1a:0b:30:b6:e1:19:a7:4f:64:06:68:b2:03: 1f:76:d2:8f:2f:f3:83:3b:58:e8:88:6c:fc:5e:4e: 06:5b:a6:05:4e:12:53:97:c4:b1:fd:d3:a0:8c:3d: cb:1a:0b:48:f6:8c:44:5e:52:48:fd:7b:0f:a1:87: 2f:b7:bf:7a:ad:c6:42:90:0f:cc:26:84:1e:ea:7a: d1:fd:80:b3:81:7e:b0:f8:0c:00:58:fb:88:fa:78: 5e:75:54:10:0e:34:ee:cb:2a:01:bd:b1:8c:1a:ec: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CD:60:57:2B:5A:BD:35:A1:70:59:CE:C8:B4:99:87:0B:CF:3E:6A X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f2:d3:76:fd:64:f5:a2:93:ef:18:32:58:36:ff:b8:11:ee: 42:2e:d0:1b:59:b4:8e:2f:d4:a8:e1:38:c9:88:4c:9f:3d:3e: c1:51:af:97:19:c0:d5:08:16:de:78:dc:1c:d8:aa:4c:19:3c: e7:a0:3b:08:22:2a:8c:6f:64:8f:0f:97:de:3b:ae:50:5d:3b: 47:ea:91:b2:12:b4:da:3f:56:57:de:ab:01:9c:63:76:b8:b3: dc:da:f6:0e:97:cc:d6:50:93:98:4a:9a:57:6d:76:59:dc:10: 13:33:01:cb:1f:33:90:38:d8:37:45:85:03:79:b0:ae:f4:71: 18:7e:a1:f0:59:3c:f2:2b:e5:4e:e7:15:02:1c:02:19:4b:b1: 5a:0d:d2:ac:e2:4d:44:1a:16:77:85:48:7f:bb:64:cd:ca:50: 62:31:0b:5b:66:86:5d:c1:c3:db:ac:90:ba:07:33:c6:0b:5e: 08:1e:69:b5:bb:c9:02:8c:1e:53:77:94:ca:f5:51:e8:75:da: 8f:25:92:5c:08:19:33:10:ca:80:19:e2:ad:b2:24:25:c6:6d: d2:4d:39:74:b2:cd:57:0b:dc:0f:0d:7e:57:c8:c4:59:1b:f4: 09:04:2e:2b:79:65:52:a2:6e:7a:b9:43:5e:5a:6e:4c:38:d6: 67:b8:59:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA1MzEwNzE3MzZaFw0yNTA2MDcwNzE3MzZaMBgxFjAUBgNV BAMTDTY4M2FhZDEwLTgyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyiHAhER99Rnh4PhmpNEtIWIa4jvYmtr19eAkL49aWip7BcULt2ZrmaHL4w6Vf viAm9BCSh2fPPyQ7ehZUvpXHKxbR8Gw+iEsSOj8kSKGvJsfM7XNPd9u3nlPEJktO ELjSk839E5tx8x3P7AKIsC6KcfhFU5HKW8YJ/sTRG0yvhkg14BFlCBaaxm5OT7P+ VF7hyuoihbZIGgswtuEZp09kBmiyAx920o8v84M7WOiIbPxeTgZbpgVOElOXxLH9 06CMPcsaC0j2jEReUkj9ew+hhy+3v3qtxkKQD8wmhB7qetH9gLOBfrD4DABY+4j6 eF51VBAONO7LKgG9sYwa7EGTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGc1gVyta vTWhcFnOyLSZhwvPPmowHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/y03b9ZPWik+8YMlg2/7gR7kIu0BtZtI4v1KjhOMmITJ89PsFRr5cZ wNUIFt543BzYqkwZPOegOwgiKoxvZI8Pl947rlBdO0fqkbIStNo/VlfeqwGcY3a4 s9za9g6XzNZQk5hKmldtdlncEBMzAcsfM5A42DdFhQN5sK70cRh+ofBZPPIr5U7n FQIcAhlLsVoN0qziTUQaFneFSH+7ZM3KUGIxC1tmhl3Bw9uskLoHM8YLXggeabW7 yQKMHlN3lMr1Ueh12o8lklwIGTMQyoAZ4q2yJCXGbdJNOXSyzVcL3A8NflfIxFkb 9AkELit5ZVKibnq5Q15abkw41me4WS4= -----END CERTIFICATE-----Generated at Sat May 31 17:27:57 2025 by rpki-client