$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: NUdLHOTHYmLIBUd++u0udBsxSqVljCAAqrDsIB07RC8= Subject key identifier: 64:8D:B2:71:86:64:F7:E0:7B:A4:E1:DF:1F:A2:05:39:39:EF:53:11 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 03CD Signing time: Sat 31 May 2025 00:48:42 +0000 Manifest this update: Sat 31 May 2025 00:48:41 +0000 Manifest next update: Sat 07 Jun 2025 00:48:41 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: LtuEcfLMS4Uc7PujpmpUO9WrO7CQrQ2r5JqYjvEbNlc=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: May 31 00:48:41 2025 GMT Not After : Jun 7 00:48:41 2025 GMT Subject: CN=683a51e9-af09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:36:db:8c:48:17:8f:28:7e:d2:13:b0:ac: 77:43:2f:95:7f:1a:e6:60:09:70:5c:94:f8:64:a0: bf:ea:e7:ca:7b:2b:4d:f8:38:75:67:87:4e:b0:ed: 92:dd:b7:94:41:4e:b2:1e:35:40:b9:11:aa:d7:c3: fd:3c:cd:83:cc:ea:c7:71:91:b3:58:c1:fb:e4:c7: 37:c8:1b:b1:3b:e9:08:cd:fc:01:91:fc:0c:e7:9c: 53:cb:0e:66:31:42:f1:e5:56:70:8b:99:f1:f8:5d: 71:68:60:1c:ab:4f:b5:3c:33:8f:93:73:c1:87:d8: 47:99:2e:e1:9e:b6:ea:bd:fd:dc:01:22:26:d9:f7: d3:86:f7:b7:bd:e7:a1:cb:06:26:22:eb:4c:10:5d: 98:59:f1:9e:de:1f:00:89:80:08:9c:df:78:84:e7: 14:44:e1:9d:a2:4c:42:44:e4:b9:47:a2:66:60:90: 0b:8f:0e:10:55:2a:8e:40:cc:a2:26:e4:6f:05:b4: d3:0c:58:4c:5c:82:d3:9a:67:87:a4:68:e5:c4:19: ab:f2:14:41:9d:b8:8a:7e:89:52:af:d4:74:87:f7: 7e:3d:b3:d1:44:25:29:91:0d:51:51:4d:92:37:2f: 1e:e6:be:13:66:45:70:aa:fb:58:65:fb:ef:d3:d6: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8D:B2:71:86:64:F7:E0:7B:A4:E1:DF:1F:A2:05:39:39:EF:53:11 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:94:79:39:e1:9e:a6:10:cb:28:3e:4d:44:09:b8:d6:87: d3:36:f4:73:e4:ca:b8:80:32:c6:93:cd:49:38:04:85:e9:5f: ba:b1:67:54:b8:c6:ed:54:d3:3c:b0:08:9f:2e:d1:01:10:78: 42:1f:51:1d:d3:22:07:80:d5:1a:e5:c9:06:02:b4:00:7b:7f: 20:28:c9:59:69:a9:c5:02:c8:d9:ab:6f:d7:d7:46:ab:79:d3: 61:3d:08:af:0e:e5:1c:67:e4:21:6a:7e:ee:82:95:10:b2:bd: b6:19:44:6d:05:df:4b:ba:fe:e3:a7:04:9f:d3:53:29:bc:94: 5d:73:65:92:9c:fb:f9:d0:b4:0f:25:8b:72:cc:3b:d1:64:6d: 40:02:f5:16:c6:5b:4a:f7:81:c6:32:ba:84:fb:4e:7e:3c:86: 1a:ff:53:47:2b:3b:67:5b:1c:0a:dd:83:33:63:80:ff:52:1d: 4d:cb:7a:ee:27:28:da:fe:ce:1a:82:56:36:86:6f:fd:99:68: 0b:81:dc:e2:bc:ec:d6:9b:2d:c8:52:e9:42:72:37:02:03:f4: 34:ea:12:c9:2f:03:92:4b:13:5e:e8:af:9c:d3:26:72:cf:31: 24:59:81:bb:64:8e:b5:3b:69:c2:86:08:cd:a1:92:32:66:83: 4e:05:fb:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUwNTMxMDA0ODQxWhcNMjUwNjA3MDA0ODQxWjAYMRYwFAYD VQQDEw02ODNhNTFlOS1hZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4c224xIF48oftITsKx3Qy+VfxrmYAlwXJT4ZKC/6ufKeytN+Dh1Z4dOsO2S 3beUQU6yHjVAuRGq18P9PM2DzOrHcZGzWMH75Mc3yBuxO+kIzfwBkfwM55xTyw5m MULx5VZwi5nx+F1xaGAcq0+1PDOPk3PBh9hHmS7hnrbqvf3cASIm2ffThve3veeh ywYmIutMEF2YWfGe3h8AiYAInN94hOcUROGdokxCROS5R6JmYJALjw4QVSqOQMyi JuRvBbTTDFhMXILTmmeHpGjlxBmr8hRBnbiKfolSr9R0h/d+PbPRRCUpkQ1RUU2S Ny8e5r4TZkVwqvtYZfvv09aJQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSNsnGG ZPfge6Th3x+iBTk571MRMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSZR5OeGephDLKD5NRAm41ofTNvRz5Mq4gDLGk81JOASF6V+6sWdU uMbtVNM8sAifLtEBEHhCH1Ed0yIHgNUa5ckGArQAe38gKMlZaanFAsjZq2/X10ar edNhPQivDuUcZ+Qhan7ugpUQsr22GURtBd9Luv7jpwSf01MpvJRdc2WSnPv50LQP JYtyzDvRZG1AAvUWxltK94HGMrqE+05+PIYa/1NHKztnWxwK3YMzY4D/Uh1Ny3ru Jyja/s4aglY2hm/9mWgLgdzivOzWmy3IUulCcjcCA/Q06hLJLwOSSxNe6K+c0yZy zzEkWYG7ZI61O2nChgjNoZIyZoNOBfsz -----END CERTIFICATE-----Generated at Sat May 31 17:20:42 2025 by rpki-client