$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: CDEFzUjk71rr4VPJvCfG29eHnwE9o9fY5LozcwSTGoE= Subject key identifier: E5:2E:A3:A4:06:CF:3A:E2:01:BA:95:25:07:53:17:40:86:84:A0:1A Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 099C Signing time: Fri 30 May 2025 20:17:32 +0000 Manifest this update: Fri 30 May 2025 20:17:32 +0000 Manifest next update: Fri 06 Jun 2025 20:17:32 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: bOdVvsFtuD7YgwnXEVi9DlXG3sFMZNWkE7XmJY9Idro=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: May 30 20:17:32 2025 GMT Not After : Jun 6 20:17:32 2025 GMT Subject: CN=683a125c-ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:09:b4:93:73:a3:0b:08:9c:2f:a0:77:fa: c7:f4:f7:3e:9a:36:a6:51:84:d5:a2:b0:2f:7f:f5: 69:d3:fc:c4:ba:ba:8a:92:64:2f:aa:f5:20:aa:35: ba:7b:7d:49:38:10:40:eb:d6:70:c4:d6:05:cc:e7: 6c:52:eb:3b:9d:a1:3c:9c:81:2c:6a:5c:74:56:8c: 00:7b:57:23:66:40:0e:47:54:ea:32:af:d6:0b:0c: dd:40:0b:5c:d1:0a:22:56:f6:30:db:ff:f9:8a:9b: 2d:90:95:c1:fd:4c:49:40:94:ba:45:ac:b3:75:54: 5a:24:25:6e:a0:33:8b:7d:e0:d2:d5:00:de:18:18: 4e:c2:98:de:cb:53:60:14:02:9d:70:aa:65:8b:43: 3c:9b:cb:e3:6b:b6:7d:5a:8f:3c:19:ac:b4:97:ac: 10:01:49:7a:8a:09:fb:19:3c:32:64:c8:07:9d:f0: ec:f7:47:3f:9c:58:3b:1c:17:37:d8:64:9b:7c:85: 27:15:f9:88:36:bb:91:e8:5f:dd:b2:5e:09:1b:a0: 93:02:fa:c4:15:3c:1b:44:12:29:6a:a0:81:37:d5: 1a:48:9d:f8:c9:27:21:48:db:b1:01:44:36:cc:c7: 02:f5:10:82:da:62:b8:90:bd:a4:d8:4b:39:dd:ad: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2E:A3:A4:06:CF:3A:E2:01:BA:95:25:07:53:17:40:86:84:A0:1A X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:75:0e:04:b2:9a:76:29:ae:a1:18:8b:a0:0e:b2:b8:45:6a: bc:07:59:58:62:63:8e:ea:f4:ac:0f:df:a4:68:db:a8:c9:83: f4:25:a3:cf:29:ef:b2:c0:1d:4b:cb:e4:fc:ce:a4:ef:3e:fd: 42:b9:33:df:43:3f:4b:18:18:d4:0b:a3:30:01:04:10:80:51: 24:d1:2e:ae:0c:f1:58:1e:e3:1d:04:54:d8:5b:c6:fc:43:61: e7:bf:ba:2a:d2:3c:0d:64:17:7b:a7:9c:c9:f5:19:dc:82:88: 68:13:0d:fa:37:bb:72:97:3a:04:07:63:e3:10:6c:4b:c6:4c: e8:79:96:00:71:74:b5:0d:bd:05:53:37:69:07:60:bf:c2:f8: b4:98:39:ff:6e:0f:14:78:a3:65:eb:5d:d9:40:3b:1d:6b:c3: bf:0e:82:f4:94:f6:16:ee:e9:6d:e0:90:93:8d:be:33:80:36: 9f:19:7d:83:bc:80:94:aa:df:2a:6f:6f:a3:3b:a2:88:0f:2b: 3f:38:b4:dc:0a:ac:61:1a:6e:af:ef:32:82:20:15:63:a4:9a: 36:fe:8f:74:05:a9:94:aa:cd:e9:2c:e2:88:04:ca:be:de:60: 23:40:41:88:73:a7:67:5c:5d:31:cc:24:f5:a0:8d:b2:5d:9f: f6:77:71:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUwNTMwMjAxNzMyWhcNMjUwNjA2MjAxNzMyWjAYMRYwFAYD VQQDEw02ODNhMTI1Yy1jYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbAJtJNzowsInC+gd/rH9Pc+mjamUYTVorAvf/Vp0/zEurqKkmQvqvUgqjW6 e31JOBBA69ZwxNYFzOdsUus7naE8nIEsalx0VowAe1cjZkAOR1TqMq/WCwzdQAtc 0QoiVvYw2//5ipstkJXB/UxJQJS6RayzdVRaJCVuoDOLfeDS1QDeGBhOwpjey1Ng FAKdcKpli0M8m8vja7Z9Wo88Gay0l6wQAUl6ign7GTwyZMgHnfDs90c/nFg7HBc3 2GSbfIUnFfmINruR6F/dsl4JG6CTAvrEFTwbRBIpaqCBN9UaSJ34ySchSNuxAUQ2 zMcC9RCC2mK4kL2k2Es53a3GoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUuo6QG zzriAbqVJQdTF0CGhKAaMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXdQ4Espp2Ka6hGIugDrK4RWq8B1lYYmOO6vSsD9+kaNuoyYP0JaPP Ke+ywB1Ly+T8zqTvPv1CuTPfQz9LGBjUC6MwAQQQgFEk0S6uDPFYHuMdBFTYW8b8 Q2Hnv7oq0jwNZBd7p5zJ9RncgohoEw36N7tylzoEB2PjEGxLxkzoeZYAcXS1Db0F UzdpB2C/wvi0mDn/bg8UeKNl613ZQDsda8O/DoL0lPYW7ult4JCTjb4zgDafGX2D vICUqt8qb2+jO6KIDys/OLTcCqxhGm6v7zKCIBVjpJo2/o90BamUqs3pLOKIBMq+ 3mAjQEGIc6dnXF0xzCT1oI2yXZ/2d3Gi -----END CERTIFICATE-----Generated at Sat May 31 17:50:36 2025 by rpki-client