$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft File: GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json) Hash identifier: O4VDmIkunQFMEZlLNBurWpSH+Voqn3DIU1oAhMbWKJM= Subject key identifier: A7:49:7D:4E:FC:FC:70:A2:84:43:A3:93:57:24:A5:93:8F:AE:0A:D3 Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A Certificate issuer: /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft Manifest number: 3E Signing time: Sat 31 May 2025 07:03:28 +0000 Manifest this update: Sat 31 May 2025 07:03:27 +0000 Manifest next update: Sat 07 Jun 2025 07:03:27 +0000 Files and hashes: 1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: unSD8vLhvJd5vFD+q5Wd4SZWPpf8g/p/Z7ViblegWxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A Validity Not Before: May 31 07:03:27 2025 GMT Not After : Jun 7 07:03:27 2025 GMT Subject: CN=683aa9c0-f58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:cb:3b:5d:fc:27:b0:36:36:26:88:8c:f1: 53:9e:34:c1:d9:ed:7b:e4:ec:7e:8b:d9:3c:c2:36: 60:8f:42:71:eb:1c:37:9b:74:a1:36:fa:91:36:b4: b4:56:36:d5:96:60:e1:9a:15:05:4e:06:9d:5a:39: ff:76:79:89:ec:2c:03:46:a6:e8:86:a4:0c:3a:1a: 23:78:c0:56:15:d3:b0:9b:b3:d8:33:d0:fb:a7:26: b3:77:6d:ca:e0:9b:97:b8:ec:9f:6c:ae:70:8e:dc: 24:d3:c5:15:c2:44:93:52:42:81:34:3a:7b:6e:f8: 07:be:86:21:a3:90:4d:bc:95:39:84:f6:5a:ce:e1: cf:55:5b:ce:7d:b6:eb:36:f8:3b:2f:6e:20:6c:15: 87:fc:d2:c7:db:a3:b7:97:d9:85:65:4d:0c:e7:3e: 5a:4f:88:7b:5c:48:3d:83:1d:fc:bf:f9:e3:94:b4: 1d:e0:32:77:1d:f9:ca:33:3b:91:f3:c7:f8:7e:1b: 57:d7:94:3e:15:8b:7a:17:04:8a:a0:72:65:50:0d: 46:66:f2:db:47:d3:dc:d6:d7:76:f4:51:89:dd:59: b7:5c:6a:a4:2d:0a:da:7e:0c:38:a3:ce:4c:cc:dc: c7:1b:e5:9d:d4:10:bf:c9:35:38:e8:9c:7c:fe:3e: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:7D:4E:FC:FC:70:A2:84:43:A3:93:57:24:A5:93:8F:AE:0A:D3 X509v3 Authority Key Identifier: keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2d:e2:ab:a3:ac:4b:b1:16:68:7f:1c:1b:fd:6f:f0:1c:7a: a3:e7:f4:da:29:4a:33:04:f4:a9:76:26:15:5c:61:18:14:bd: ef:e3:62:06:f3:6c:9d:ba:60:d2:cb:4f:eb:ab:da:88:fd:97: d8:8b:a5:70:11:e7:82:84:4d:93:19:e5:3e:16:4d:65:6d:a0: 53:37:1d:67:07:e2:8a:e9:6e:2a:80:5f:5b:59:9c:c7:29:78: ad:37:67:0a:27:5a:3c:3f:c1:b2:e2:49:96:80:30:54:b1:40: 2f:c0:1c:89:26:26:10:71:18:da:38:02:03:95:7c:40:25:0e: 78:e0:ec:e4:88:f7:9a:b4:90:49:5d:70:4a:12:ab:9a:cf:77: 10:6c:ac:fc:13:72:3e:e6:77:bc:ad:d0:09:bb:84:e3:c6:58: 2d:d5:fd:78:84:c8:e8:ba:5c:ca:39:73:0e:99:49:97:e6:04: 30:8f:87:53:19:d3:a1:c0:3c:21:5d:59:21:37:51:4a:e2:44: 76:14:37:aa:c8:1d:8c:8b:e6:d1:71:55:0a:17:ff:7b:64:26: 8d:44:fe:fa:5a:8c:b5:ba:fb:3e:08:b8:c1:a0:8d:44:22:2b: 59:3f:da:19:b6:d2:7b:06:f4:66:4e:e1:04:05:3a:1e:37:c3: 2f:36:9a:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODM1NzExMC8GA1UEBRMoMTgwQTM1MjJFMjA1MEM1RjFFMDg3MzUzOUIxMkQ2RDIz MTJBMjAxQTAeFw0yNTA1MzEwNzAzMjdaFw0yNTA2MDcwNzAzMjdaMBgxFjAUBgNV BAMTDTY4M2FhOWMwLWY1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpEcs7XfwnsDY2JoiM8VOeNMHZ7Xvk7H6L2TzCNmCPQnHrHDebdKE2+pE2tLRW NtWWYOGaFQVOBp1aOf92eYnsLANGpuiGpAw6GiN4wFYV07Cbs9gz0PunJrN3bcrg m5e47J9srnCO3CTTxRXCRJNSQoE0Ontu+Ae+hiGjkE28lTmE9lrO4c9VW859tus2 +DsvbiBsFYf80sfbo7eX2YVlTQznPlpPiHtcSD2DHfy/+eOUtB3gMncd+cozO5Hz x/h+G1fXlD4Vi3oXBIqgcmVQDUZm8ttH09zW13b0UYndWbdcaqQtCtp+DDijzkzM 3Mcb5Z3UEL/JNTjonHz+PuYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp0l9Tvz8 cKKEQ6OTVySlk4+uCtMwHwYDVR0jBBgwFoAUGAo1IuIFDF8eCHNTmxLW0jEqIBow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4MzU3LzFEQTVDQzU2REY4 QTExRUY4NzQ3MkI3NEM0RjlBRTAyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlC by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0FvMUl1SUZERjhlQ0hOVG14TFcwakVxSUJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 MzU3LzFEQTVDQzU2REY4QTExRUY4NzQ3MkI3NEM0RjlBRTAyL0dBbzFJdUlGREY4 ZUNITlRteExXMGpFcUlCby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAt4qujrEuxFmh/HBv9b/AceqPn9NopSjME9Kl2JhVcYRgUve/jYgbz bJ26YNLLT+ur2oj9l9iLpXAR54KETZMZ5T4WTWVtoFM3HWcH4orpbiqAX1tZnMcp eK03ZwonWjw/wbLiSZaAMFSxQC/AHIkmJhBxGNo4AgOVfEAlDnjg7OSI95q0kEld cEoSq5rPdxBsrPwTcj7md7yt0Am7hOPGWC3V/XiEyOi6XMo5cw6ZSZfmBDCPh1MZ 06HAPCFdWSE3UUriRHYUN6rIHYyL5tFxVQoX/3tkJo1E/vpajLW6+z4IuMGgjUQi K1k/2hm20nsG9GZO4QQFOh43wy82mmw= -----END CERTIFICATE-----Generated at Sat May 31 16:53:45 2025 by rpki-client