$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: 0vF4o4f6TTB4R9akrZg75Gh5L7MCwKVOyy9oLg3ml/o= Subject key identifier: 81:A5:1E:F3:79:52:3A:E5:38:84:DD:A8:97:9B:47:7B:69:96:38:DE Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 1576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 156C Signing time: Fri 30 May 2025 16:58:42 +0000 Manifest this update: Fri 30 May 2025 16:58:42 +0000 Manifest next update: Fri 06 Jun 2025 16:58:42 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: AxztYF4PN3MgSz2xjcq6ZeJwxMYK433WmujwacaA2Y8=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5494 (0x1576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: May 30 16:58:42 2025 GMT Not After : Jun 6 16:58:42 2025 GMT Subject: CN=6839e3c2-815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:71:8b:d3:ad:56:91:84:cb:b6:cf:8b:21: 92:9d:f1:2d:24:af:bb:fe:ca:cf:ee:5c:3e:d4:b4: cf:04:de:0c:cc:44:a3:3c:e7:51:ab:87:d0:22:36: 71:ab:98:27:ba:ca:85:3f:01:75:4c:f6:26:91:eb: 41:d9:4c:f7:29:5c:f5:22:59:62:49:d8:e7:60:29: 13:ac:84:32:02:77:5c:d1:c9:90:75:ce:c9:43:74: b9:92:d8:ab:cc:82:c0:44:0a:b4:75:76:4b:7c:32: 9f:43:f5:83:62:34:10:bc:9b:da:f2:bf:40:80:3b: 8d:9c:1e:3b:a7:68:1b:e3:04:6d:13:49:04:3e:cd: cb:73:08:19:07:25:c9:1a:9f:bb:cf:7b:a4:c5:af: a1:43:21:41:c2:8e:58:92:dc:af:4f:9a:1f:72:2b: 20:bd:6d:c4:3d:80:47:d1:e0:03:d7:ba:68:ec:3b: 87:c6:2d:cf:ec:d4:7a:c7:16:4c:f2:0f:1b:42:f7: 52:3d:55:fd:9c:e8:01:3d:cd:a8:c9:ea:ba:4d:14: 81:5f:3d:96:2e:7d:00:73:a5:30:cf:97:22:b6:7b: 45:03:fc:4d:5d:03:39:e8:46:f8:c2:2b:54:38:e5: d0:a5:a0:ac:00:41:b9:7b:ae:7f:03:f5:a3:73:76: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A5:1E:F3:79:52:3A:E5:38:84:DD:A8:97:9B:47:7B:69:96:38:DE X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:97:69:ff:77:b5:c7:5f:87:a1:db:c1:f1:46:83:fb:dc:33: fa:f6:13:42:5a:bc:67:eb:4f:e5:66:a3:af:73:9f:96:15:a1: a0:97:76:f8:c7:1d:ae:7a:86:dc:cb:78:c5:8b:d8:35:7b:3c: 86:a2:9e:65:64:bb:73:45:e1:ad:50:b0:70:76:ab:26:91:81: 73:ec:05:eb:5f:fe:27:3e:ab:92:86:b9:23:33:9b:08:85:7e: 8a:d5:08:58:94:f9:6c:7f:19:f3:ce:7d:ba:13:e6:ce:3d:ae: 48:49:0b:f7:0c:44:f9:13:cc:ff:0e:92:f0:02:bb:89:e3:77: 2a:4d:c7:f6:9c:f2:fa:0e:53:5e:ad:f2:10:4c:30:f3:42:ec: a3:0e:e1:89:dd:09:24:6d:c7:e6:66:6c:b5:3b:5f:8c:0f:13: 55:32:98:6a:f6:e1:f3:35:15:67:09:1d:dd:5f:2d:3c:12:8f: 41:f6:c5:16:7c:00:ed:a7:ee:24:30:03:ac:05:7c:48:ee:98: b4:4e:d9:12:2c:e0:5d:dc:45:47:e5:ad:8e:7e:ec:95:db:fa: c8:16:01:fb:c9:a6:37:05:91:d6:8b:18:0b:85:a7:18:d0:d9: 74:10:6f:63:eb:84:7f:b4:9f:5a:bd:b2:f1:0a:ba:a6:36:78: c2:7c:e0:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUwNTMwMTY1ODQyWhcNMjUwNjA2MTY1ODQyWjAYMRYwFAYD VQQDEw02ODM5ZTNjMi04MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08dxi9OtVpGEy7bPiyGSnfEtJK+7/srP7lw+1LTPBN4MzESjPOdRq4fQIjZx q5gnusqFPwF1TPYmketB2Uz3KVz1IlliSdjnYCkTrIQyAndc0cmQdc7JQ3S5ktir zILARAq0dXZLfDKfQ/WDYjQQvJva8r9AgDuNnB47p2gb4wRtE0kEPs3LcwgZByXJ Gp+7z3ukxa+hQyFBwo5YktyvT5ofcisgvW3EPYBH0eAD17po7DuHxi3P7NR6xxZM 8g8bQvdSPVX9nOgBPc2oyeq6TRSBXz2WLn0Ac6Uwz5citntFA/xNXQM56Eb4witU OOXQpaCsAEG5e65/A/Wjc3b2cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGlHvN5 UjrlOITdqJebR3tpljjeMB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwl2n/d7XHX4eh28HxRoP73DP69hNCWrxn60/lZqOvc5+WFaGgl3b4 xx2ueobcy3jFi9g1ezyGop5lZLtzReGtULBwdqsmkYFz7AXrX/4nPquShrkjM5sI hX6K1QhYlPlsfxnzzn26E+bOPa5ISQv3DET5E8z/DpLwAruJ43cqTcf2nPL6DlNe rfIQTDDzQuyjDuGJ3QkkbcfmZmy1O1+MDxNVMphq9uHzNRVnCR3dXy08Eo9B9sUW fADtp+4kMAOsBXxI7pi0TtkSLOBd3EVH5a2OfuyV2/rIFgH7yaY3BZHWixgLhacY 0Nl0EG9j64R/tJ9avbLxCrqmNnjCfODW -----END CERTIFICATE-----Generated at Sat May 31 16:28:44 2025 by rpki-client