$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: 2wxORSW0YHeTXb/Zb/wEIfALwNoEIHGliXtoksJIqKk= Subject key identifier: FE:73:56:05:DB:88:31:42:C1:E4:AC:40:8A:DD:62:E1:69:9E:6E:64 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 0210 Signing time: Sat 31 May 2025 02:11:51 +0000 Manifest this update: Sat 31 May 2025 02:11:50 +0000 Manifest next update: Sat 07 Jun 2025 02:11:50 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: VHflhTOE5HB8j1/pyQsufG+QyBAJyakPQ34gsxsVtug=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: May 31 02:11:50 2025 GMT Not After : Jun 7 02:11:50 2025 GMT Subject: CN=683a6566-3f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:a2:18:79:5a:48:2e:d0:d6:ba:52:2a:27: 71:a8:e5:58:15:83:75:90:fe:0e:91:09:56:2c:ac: 69:2b:dd:ae:e7:5c:62:4e:08:54:65:dc:cb:ac:2c: cd:1c:e1:9b:e1:1f:4c:eb:f5:25:17:a6:27:9a:92: 65:fb:b6:88:60:ea:3e:f9:92:51:4a:99:46:b4:20: a0:4e:58:7a:e4:7b:70:df:1d:63:0a:86:0c:04:6a: 7c:98:15:cb:24:92:8a:41:6c:68:25:39:44:24:f8: bb:8e:ab:ab:ff:9e:7c:0e:07:fd:3f:7c:ff:f5:18: bc:92:0e:09:d3:eb:62:7f:71:02:ff:29:23:f6:49: 2b:ad:7e:6e:91:49:27:eb:bb:58:a7:56:0e:ba:54: be:ea:b8:96:cc:25:7f:f9:8a:53:88:b4:09:c3:df: b0:f3:64:da:99:c6:46:d5:68:a2:02:4c:e9:17:e3: 3d:a1:5d:8b:9c:0d:b4:79:88:54:a9:b1:04:87:2a: 17:ed:d6:3e:3b:b6:db:ea:90:7f:f8:be:cd:82:67: 14:9e:76:56:26:5b:3d:61:b3:f3:de:b0:55:f2:97: 6d:13:e5:5c:38:92:8f:2a:03:71:e7:c8:73:54:5b: 52:34:75:92:33:d2:cc:e1:cb:ff:f0:52:22:ef:6e: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:56:05:DB:88:31:42:C1:E4:AC:40:8A:DD:62:E1:69:9E:6E:64 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e3:8f:05:ba:bf:3a:1b:53:79:42:2a:a7:f3:c6:8f:ff:21: 62:93:27:35:74:c5:64:c9:12:b0:18:a3:85:a8:6b:ad:27:a8: 42:44:e5:7f:9d:44:44:f6:9c:e9:29:a7:9a:ef:a5:5d:eb:a3: fe:9a:f5:fe:43:64:5e:22:c9:f7:6a:0a:b7:03:60:92:1e:11: 65:af:a5:81:25:69:61:5b:7a:7b:c2:75:f5:99:6e:05:45:63: 6c:db:b5:ed:fe:ec:2e:7d:99:80:3d:e4:cc:1c:d2:06:73:c9: 3b:da:58:7c:6b:7f:6e:c3:9d:31:0e:cd:1a:8a:ce:e9:cb:89: 08:38:c9:8c:d2:51:ae:5f:a4:2c:1a:66:48:8a:20:f2:b4:e2: 41:d5:8c:fc:e6:b8:ff:40:b3:61:73:7e:4e:c3:f5:d7:07:a6: 3b:31:32:6a:f0:1a:70:ea:03:71:09:2b:67:d3:7f:23:86:e8: cf:d1:5c:3d:fb:8d:9d:a5:f1:52:97:f8:76:e9:de:e2:01:dc: 92:9c:60:21:09:ff:27:3f:aa:4e:04:03:99:70:16:2d:49:62: db:f1:7d:c2:a7:ae:f1:8f:a3:91:dd:cd:90:de:26:19:cb:23: 2a:03:ce:22:7f:99:24:f6:fc:39:77:3e:9b:68:aa:de:27:b8: b5:d6:2f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUwNTMxMDIxMTUwWhcNMjUwNjA3MDIxMTUwWjAYMRYwFAYD VQQDEw02ODNhNjU2Ni0zZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK+iGHlaSC7Q1rpSKidxqOVYFYN1kP4OkQlWLKxpK92u51xiTghUZdzLrCzN HOGb4R9M6/UlF6YnmpJl+7aIYOo++ZJRSplGtCCgTlh65Htw3x1jCoYMBGp8mBXL JJKKQWxoJTlEJPi7jqur/558Dgf9P3z/9Ri8kg4J0+tif3EC/ykj9kkrrX5ukUkn 67tYp1YOulS+6riWzCV/+YpTiLQJw9+w82TamcZG1WiiAkzpF+M9oV2LnA20eYhU qbEEhyoX7dY+O7bb6pB/+L7NgmcUnnZWJls9YbPz3rBV8pdtE+VcOJKPKgNx58hz VFtSNHWSM9LM4cv/8FIi727b7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5zVgXb iDFCweSsQIrdYuFpnm5kMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR448Fur86G1N5Qiqn88aP/yFikyc1dMVkyRKwGKOFqGutJ6hCROV/ nURE9pzpKaea76Vd66P+mvX+Q2ReIsn3agq3A2CSHhFlr6WBJWlhW3p7wnX1mW4F RWNs27Xt/uwufZmAPeTMHNIGc8k72lh8a39uw50xDs0ais7py4kIOMmM0lGuX6Qs GmZIiiDytOJB1Yz85rj/QLNhc35Ow/XXB6Y7MTJq8Bpw6gNxCStn038jhujP0Vw9 +42dpfFSl/h26d7iAdySnGAhCf8nP6pOBAOZcBYtSWLb8X3Cp67xj6OR3c2Q3iYZ yyMqA84if5kk9vw5dz6baKreJ7i11i+2 -----END CERTIFICATE-----Generated at Sat May 31 16:57:44 2025 by rpki-client