$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: mxqF0yZdL7rNfKspV2heEZRl75ob+KvYgOqxzXA0r80= Subject key identifier: 01:29:3C:53:DB:49:D3:4D:F8:52:F1:3B:A0:4F:18:DE:21:BA:13:02 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 34A3 Signing time: Sat 31 May 2025 14:35:39 +0000 Manifest this update: Sat 31 May 2025 14:35:39 +0000 Manifest next update: Sat 07 Jun 2025 14:35:39 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: 5BPs798mg1usMjEp6mM5jbjCOBFrG3/yGqR4XwD/rH0=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: Ml46u2z0U+I2ZQaPPsePPmtgvCBhdMDLTPQJk8d3bl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: May 31 14:35:39 2025 GMT Not After : Jun 7 14:35:39 2025 GMT Subject: CN=683b13bb-2dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:6b:1e:a4:27:c5:df:2a:f6:fd:e0:3e:04: 19:af:43:86:1f:d7:4c:e5:ed:67:0b:36:db:45:55: 1c:c5:41:9b:fe:9b:73:52:9c:f8:ae:ab:a8:29:a9: 65:61:8c:a5:1c:82:db:c3:0e:76:e6:a8:fb:3c:c7: 00:27:67:bf:53:07:ea:8c:00:c5:e7:39:69:95:3d: 58:ca:84:f4:f6:2e:a9:8e:05:5a:9b:88:81:1d:bd: 85:7c:83:13:ac:5a:5a:dc:c0:f5:10:a3:db:62:c8: 14:56:8a:e9:27:25:7e:d6:a7:83:59:06:ca:f9:cf: 76:e5:2f:3b:00:78:08:9b:7b:56:db:5d:6c:ce:0f: a3:61:46:5c:c6:b4:c5:29:d2:97:55:fe:2f:1b:25: 35:8c:a1:06:eb:2d:f5:05:7a:23:fa:02:05:57:b5: b6:cf:3c:c1:58:15:a4:9e:c9:99:12:f3:63:b3:8a: db:7b:9e:18:05:9b:23:1e:80:cd:e4:f4:29:62:ab: 5d:09:1e:e4:18:5d:95:5a:4b:7a:bf:94:04:3f:fa: b9:1e:67:ed:55:09:06:3c:04:f7:8f:2d:57:f5:20: 78:24:92:59:45:fb:6c:ac:99:1c:5a:54:1a:a1:0b: 3c:44:0a:25:c1:51:e0:91:29:e4:ab:6d:13:19:ed: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:3C:53:DB:49:D3:4D:F8:52:F1:3B:A0:4F:18:DE:21:BA:13:02 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:77:ce:f8:08:91:67:74:8d:51:ba:21:07:0d:d2:c1:9f: b9:59:b6:4f:f8:d0:5f:62:78:49:3a:31:1c:ac:ff:e3:fa:d3: f0:89:0c:94:18:13:51:f5:02:33:9c:00:53:90:78:9b:fa:39: f3:40:25:29:5c:a1:1f:35:0d:66:91:fc:21:db:f2:1a:46:41: 0e:76:f0:4c:59:e2:80:fc:ca:f4:4a:dd:cd:7e:8f:7c:ec:15: 21:fd:77:a3:14:f8:26:59:5d:62:b2:6c:49:57:74:9f:9e:b4: 82:5b:06:23:0e:14:f3:b0:d1:8d:a0:94:7c:75:6d:86:ed:18: e8:d9:55:32:db:3e:ae:c4:93:23:26:b9:6e:8d:13:14:72:b6: 46:54:61:30:04:99:a8:61:3b:29:fc:ca:ae:74:3f:31:23:57: 4a:8c:d8:87:39:4d:4f:ad:05:f3:82:8c:22:59:7e:55:1c:a9: 59:e2:0f:3e:84:66:e8:18:08:7c:b7:1e:05:ba:fb:60:f9:7f: 25:65:88:00:fa:4c:aa:32:53:3b:02:28:20:dd:42:f2:4c:90: e6:dd:d1:45:62:68:44:38:1e:06:0d:41:52:4f:e9:f6:0c:c8: 24:48:ec:17:b0:9c:58:f7:3d:e7:1c:1a:44:79:a3:13:b9:fd: ca:b4:63:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUwNTMxMTQzNTM5WhcNMjUwNjA3MTQzNTM5WjAYMRYwFAYD VQQDEw02ODNiMTNiYi0yZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTdrHqQnxd8q9v3gPgQZr0OGH9dM5e1nCzbbRVUcxUGb/ptzUpz4rquoKall YYylHILbww525qj7PMcAJ2e/UwfqjADF5zlplT1YyoT09i6pjgVam4iBHb2FfIMT rFpa3MD1EKPbYsgUVorpJyV+1qeDWQbK+c925S87AHgIm3tW211szg+jYUZcxrTF KdKXVf4vGyU1jKEG6y31BXoj+gIFV7W2zzzBWBWknsmZEvNjs4rbe54YBZsjHoDN 5PQpYqtdCR7kGF2VWkt6v5QEP/q5HmftVQkGPAT3jy1X9SB4JJJZRftsrJkcWlQa oQs8RAolwVHgkSnkq20TGe23FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEpPFPb SdNN+FLxO6BPGN4huhMCMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjInfO+AiRZ3SNUbohBw3SwZ+5WbZP+NBfYnhJOjEcrP/j+tPwiQyU GBNR9QIznABTkHib+jnzQCUpXKEfNQ1mkfwh2/IaRkEOdvBMWeKA/Mr0St3Nfo98 7BUh/XejFPgmWV1ismxJV3SfnrSCWwYjDhTzsNGNoJR8dW2G7Rjo2VUy2z6uxJMj JrlujRMUcrZGVGEwBJmoYTsp/MqudD8xI1dKjNiHOU1PrQXzgowiWX5VHKlZ4g8+ hGboGAh8tx4Fuvtg+X8lZYgA+kyqMlM7Aigg3ULyTJDm3dFFYmhEOB4GDUFST+n2 DMgkSOwXsJxY9z3nHBpEeaMTuf3KtGM0 -----END CERTIFICATE-----Generated at Sat May 31 16:56:09 2025 by rpki-client