$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json) Hash identifier: 5aahmRY/v6sqAZrBi+RITqEPzNsnBJI6yqxBSUvJaPU= Subject key identifier: 16:AC:A0:3A:D9:D8:4B:7B:42:31:BA:AA:65:E1:DA:CC:65:BA:86:C5 Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 1935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft Manifest number: 1922 Signing time: Fri 06 Jun 2025 16:29:03 +0000 Manifest this update: Fri 06 Jun 2025 16:29:02 +0000 Manifest next update: Fri 13 Jun 2025 16:29:02 +0000 Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: 6AIF0lt9dHmnTFvjBfqksJVwI0gDYnL9FUY8Asyny34=) 2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=) 3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6453 (0x1935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Jun 6 16:29:02 2025 GMT Not After : Jun 13 16:29:02 2025 GMT Subject: CN=6843174f-bfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:28:2c:70:42:61:d7:f4:a1:87:ec:c9:24: 55:cd:c5:e1:ed:46:64:83:f2:da:c7:d1:0b:f0:51: 6a:4b:0f:bb:82:38:98:23:13:61:a3:fb:c2:de:f4: 23:e8:fb:d6:03:a9:d4:3b:87:2a:2c:39:3e:66:2a: c3:ea:d3:9e:63:c2:61:a6:fd:0a:4e:25:d1:8a:21: c2:93:23:ab:40:49:79:5b:1f:05:80:04:f2:a7:94: 89:92:06:87:c2:02:56:c4:d7:a8:23:00:cf:45:1d: 47:f9:2e:a6:da:14:74:0e:9a:50:a1:ef:d9:b7:2f: fe:db:1b:c6:0c:01:e6:d0:fb:aa:36:d3:fe:2d:2b: ec:2d:58:17:72:a4:6b:11:5f:0c:f8:66:da:f6:e8: 04:f8:3a:d2:84:80:33:d7:9a:40:d8:16:96:f5:42: e1:30:c4:8d:1a:aa:9a:d0:10:3e:d1:bb:b7:c4:fe: 24:0b:ec:7d:90:7d:a5:a8:a9:41:2d:92:a1:84:66: 95:f5:28:30:65:ba:3c:59:36:2c:41:c7:1a:79:44: 07:38:7e:25:88:c8:70:89:64:dc:3c:1d:3d:f6:76: 98:ac:df:51:b0:f1:b5:96:89:b4:e4:c1:3a:b6:1c: e1:48:00:b0:bb:55:7d:92:8d:b1:49:6c:ea:09:e8: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:A0:3A:D9:D8:4B:7B:42:31:BA:AA:65:E1:DA:CC:65:BA:86:C5 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:38:9c:1c:45:da:91:67:ec:82:96:d4:0a:ef:3d:89:59:23: 03:61:d4:09:ed:c4:45:b2:e4:93:dc:ec:ec:46:bc:4d:60:2c: e5:f3:62:ec:21:b6:b5:ce:46:ae:f9:e2:65:ce:52:7d:1d:9b: 59:4e:f2:1d:cb:57:8a:c5:e7:e8:9a:8e:df:8e:3e:69:6c:7d: 14:d2:6f:66:26:d9:ad:24:c3:26:3b:96:8a:86:1c:65:c3:49: 26:ad:8c:d7:eb:54:e8:3d:99:92:ed:eb:d9:a8:dd:72:9d:52: b4:69:e4:46:ef:c8:af:e2:96:05:ca:c1:e4:65:d3:96:0d:60: 38:7d:ff:2b:1c:91:c7:8c:2d:07:3b:67:27:2a:e5:ef:d3:92: c0:70:84:44:da:2c:7b:42:92:d6:bd:52:6b:0b:bf:57:19:13: f7:9a:ae:7b:72:a4:51:88:9c:c9:82:29:94:22:11:3c:45:d6: 1c:8c:af:de:1e:9d:43:ab:db:38:86:94:33:a7:9f:50:c5:23: ca:b2:89:b4:24:f7:6a:23:b4:09:f7:32:62:47:cf:95:d9:3b: ec:9e:43:76:52:f0:a3:e9:bf:1c:b3:ff:a5:83:49:0a:a7:c0: 75:78:37:0c:94:eb:8a:6d:f2:5a:dd:4a:cb:ac:91:70:d4:3f: 93:bd:4c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUwNjA2MTYyOTAyWhcNMjUwNjEzMTYyOTAyWjAYMRYwFAYD VQQDEw02ODQzMTc0Zi1iZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwikoLHBCYdf0oYfsySRVzcXh7UZkg/Lax9EL8FFqSw+7gjiYIxNho/vC3vQj 6PvWA6nUO4cqLDk+ZirD6tOeY8Jhpv0KTiXRiiHCkyOrQEl5Wx8FgATyp5SJkgaH wgJWxNeoIwDPRR1H+S6m2hR0DppQoe/Zty/+2xvGDAHm0PuqNtP+LSvsLVgXcqRr EV8M+Gba9ugE+DrShIAz15pA2BaW9ULhMMSNGqqa0BA+0bu3xP4kC+x9kH2lqKlB LZKhhGaV9SgwZbo8WTYsQccaeUQHOH4liMhwiWTcPB099naYrN9RsPG1lom05ME6 thzhSACwu1V9ko2xSWzqCehZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBasoDrZ 2Et7QjG6qmXh2sxluobFMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOJwcRdqRZ+yCltQK7z2JWSMDYdQJ7cRFsuST3OzsRrxNYCzl82Ls Iba1zkau+eJlzlJ9HZtZTvIdy1eKxefomo7fjj5pbH0U0m9mJtmtJMMmO5aKhhxl w0kmrYzX61ToPZmS7evZqN1ynVK0aeRG78iv4pYFysHkZdOWDWA4ff8rHJHHjC0H O2cnKuXv05LAcIRE2ix7QpLWvVJrC79XGRP3mq57cqRRiJzJgimUIhE8RdYcjK/e Hp1Dq9s4hpQzp59QxSPKsom0JPdqI7QJ9zJiR8+V2TvsnkN2UvCj6b8cs/+lg0kK p8B1eDcMlOuKbfJa3UrLrJFw1D+TvUwY -----END CERTIFICATE-----Generated at Sat Jun 7 06:23:50 2025 by rpki-client