$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft File: GkhD6J8kRLLN24EYqoovRBgOhJg.mft (raw, json) Hash identifier: S+Sjxh8ZY74ODxt1ONasfI3vzyFeUWvMc3DeoUCjD1Y= Subject key identifier: 88:76:36:39:16:B3:73:06:8E:A7:9C:B3:38:FF:66:D1:05:B9:EE:7D Authority key identifier: 1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 Certificate issuer: /CN=A91F5280/serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft Manifest number: 0172 Signing time: Sat 31 May 2025 03:29:07 +0000 Manifest this update: Sat 31 May 2025 03:29:07 +0000 Manifest next update: Sat 07 Jun 2025 03:29:07 +0000 Files and hashes: 1: GkhD6J8kRLLN24EYqoovRBgOhJg.crl (hash: 25+UBEsRvGt1j9fIEXg7n7tej3p8eOCiA1a+uXqqIz4=) 2: B5569B88096311EE9ECB644DC4F9AE02.roa (hash: r69ry07FlZRyxMcGSskusquMKld1QByFguUcoWDQa3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5280, serialNumber=1A4843E89F2444B2CDDB8118AA8A2F44180E8498 Validity Not Before: May 31 03:29:07 2025 GMT Not After : Jun 7 03:29:07 2025 GMT Subject: CN=683a7783-89fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:41:01:30:db:c9:79:f7:37:1b:fd:09:85: 37:e8:47:17:23:b0:e8:9b:1b:a7:8f:01:0e:40:f1: 81:d7:10:cc:79:68:af:aa:22:3d:47:a8:8f:f4:69: b6:f5:3c:63:d7:4a:9e:f3:02:7e:65:3d:26:34:7d: 4d:59:28:fe:ee:90:5e:c4:19:5e:ce:29:11:a2:ff: 59:de:7d:5b:bf:61:9b:cf:0f:1b:01:2f:00:4f:b6: ea:95:a0:2c:13:8d:be:ab:4a:79:2b:32:f4:bd:f1: 91:64:2d:f4:e6:db:ba:1e:f0:8e:49:41:c5:77:a7: fd:30:62:1f:90:59:30:4f:68:77:d4:25:fe:11:68: 53:61:e8:65:1a:8b:d4:e5:22:14:89:1c:25:7d:20: d0:75:82:68:af:08:e0:1a:40:4c:db:76:a2:e6:0c: 5c:94:4a:55:67:15:10:6e:f2:94:b9:e2:fe:f7:c5: 6c:86:bb:4b:59:fd:6c:0a:5c:5f:d5:41:f0:c1:d7: d3:57:9c:cb:b3:bf:1b:dc:44:2b:0a:28:cc:7e:e1: b6:2f:f3:5f:26:d9:33:d8:37:e3:cb:9f:cd:72:a8: ca:0d:eb:69:62:e1:dd:35:ad:f4:2c:dd:3c:44:a1: d2:9a:12:05:53:cd:61:1a:45:29:2b:a6:50:c2:b4: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:76:36:39:16:B3:73:06:8E:A7:9C:B3:38:FF:66:D1:05:B9:EE:7D X509v3 Authority Key Identifier: keyid:1A:48:43:E8:9F:24:44:B2:CD:DB:81:18:AA:8A:2F:44:18:0E:84:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkhD6J8kRLLN24EYqoovRBgOhJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5280/C04B1B76095F11EEAD0ED04CC4F9AE02/GkhD6J8kRLLN24EYqoovRBgOhJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:96:27:70:d3:64:77:be:80:9d:ad:b2:ef:0f:6a:ff:4d:ef: e6:47:38:5c:79:66:13:cc:a0:06:3b:71:83:26:45:f8:c5:6f: ef:c5:82:08:48:d4:1e:90:71:b7:94:32:f8:eb:a4:5d:76:d1: 58:15:65:a6:3d:dd:ea:46:f4:a8:1a:a6:ba:34:03:55:b7:40: 94:7f:16:bf:3a:3a:f4:32:a3:b3:01:49:2d:70:cc:ef:1f:c1: 95:57:86:a4:d2:9d:c8:d2:98:6d:46:9e:ce:c7:89:c3:68:ee: 1e:a5:cb:9a:55:ff:e2:2f:84:b2:ea:e6:4a:22:db:f2:2d:4b: 0b:ef:97:9b:37:13:7e:98:16:26:bc:9a:94:70:03:b0:38:20: c4:56:1f:9a:8c:d1:df:a9:4c:32:70:b6:8a:23:2e:de:1b:e3: 80:9d:15:bc:ae:41:6e:71:96:19:0f:10:76:67:21:0b:a1:6e: 51:1d:75:36:b0:cb:b7:f8:99:8c:d9:00:78:21:14:13:d1:0b: fb:ea:b5:75:3b:53:6d:53:2d:46:50:b7:92:cb:af:a8:a5:ad: 82:e6:17:2b:5f:9b:ab:f5:30:b3:31:7b:7f:a9:95:a3:da:21: 15:51:71:e7:02:2e:fe:53:97:15:e8:df:ea:7c:5b:58:f4:12: 2d:a0:e7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyODAxMTAvBgNVBAUTKDFBNDg0M0U4OUYyNDQ0QjJDRERCODExOEFBOEEyRjQ0 MTgwRTg0OTgwHhcNMjUwNTMxMDMyOTA3WhcNMjUwNjA3MDMyOTA3WjAYMRYwFAYD VQQDEw02ODNhNzc4My04OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wZBATDbyXn3Nxv9CYU36EcXI7DomxunjwEOQPGB1xDMeWivqiI9R6iP9Gm2 9Txj10qe8wJ+ZT0mNH1NWSj+7pBexBlezikRov9Z3n1bv2Gbzw8bAS8AT7bqlaAs E42+q0p5KzL0vfGRZC305tu6HvCOSUHFd6f9MGIfkFkwT2h31CX+EWhTYehlGovU 5SIUiRwlfSDQdYJorwjgGkBM23ai5gxclEpVZxUQbvKUueL+98VshrtLWf1sClxf 1UHwwdfTV5zLs78b3EQrCijMfuG2L/NfJtkz2Dfjy5/NcqjKDetpYuHdNa30LN08 RKHSmhIFU81hGkUpK6ZQwrR2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh2NjkW s3MGjqecszj/ZtEFue59MB8GA1UdIwQYMBaAFBpIQ+ifJESyzduBGKqKL0QYDoSY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI4MC9DMDRCMUI3NjA5 NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JMTE4yNEVZcW9vdlJCZ09o SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0draEQ2SjhrUkxMTjI0RVlxb292UkJnT2hKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI4MC9DMDRCMUI3NjA5NUYxMUVFQUQwRUQwNENDNEY5QUUwMi9Ha2hENko4a1JM TE4yNEVZcW9vdlJCZ09oSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAlidw02R3voCdrbLvD2r/Te/mRzhceWYTzKAGO3GDJkX4xW/vxYII SNQekHG3lDL466RddtFYFWWmPd3qRvSoGqa6NANVt0CUfxa/Ojr0MqOzAUktcMzv H8GVV4ak0p3I0phtRp7Ox4nDaO4epcuaVf/iL4Sy6uZKItvyLUsL75ebNxN+mBYm vJqUcAOwOCDEVh+ajNHfqUwycLaKIy7eG+OAnRW8rkFucZYZDxB2ZyELoW5RHXU2 sMu3+JmM2QB4IRQT0Qv76rV1O1NtUy1GULeSy6+opa2C5hcrX5ur9TCzMXt/qZWj 2iEVUXHnAi7+U5cV6N/qfFtY9BItoOd+ -----END CERTIFICATE-----Generated at Sat May 31 16:38:09 2025 by rpki-client