$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: KdkZoYVmP0xqjWW5ArTpbRyfdZgk0zau9Wx8PEBbV8k= Subject key identifier: C3:12:F1:2D:A3:DB:95:F1:35:DE:3C:32:71:E3:65:EC:9E:FD:1B:96 Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 0702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 278C Signing time: Fri 30 May 2025 16:08:47 +0000 Manifest this update: Fri 30 May 2025 16:08:47 +0000 Manifest next update: Fri 06 Jun 2025 16:08:47 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: T4v4BTxKvwH6CDBU/a11e6MEmMTj3WzuToapF1R4Bd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: May 30 16:08:47 2025 GMT Not After : Jun 6 16:08:47 2025 GMT Subject: CN=6839d80f-1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:95:69:94:90:21:9f:d7:93:a0:03:5e:e6: 03:42:fc:b8:2f:8f:a2:f6:89:80:c3:47:b9:2a:27: 00:1b:3f:41:42:fc:bb:fd:51:1e:01:05:44:4c:7f: 98:77:a6:76:80:45:e4:90:4d:df:35:4f:4b:db:aa: 22:19:6d:18:37:fe:b1:5c:11:ae:b6:72:b3:2f:85: 16:f6:63:38:68:4d:94:7d:36:c7:58:38:8b:9c:54: 50:d9:dd:b6:aa:9a:89:9c:4e:16:dc:22:fd:2f:12: 75:cc:87:9d:71:e2:16:d1:00:e6:24:8b:f5:cd:a2: 3c:f8:78:25:23:e9:03:22:57:bd:71:7e:16:42:17: e8:a6:96:22:9d:97:28:1b:c4:82:9b:9b:27:1a:ac: 1b:5c:03:90:64:e1:d0:5b:ce:13:59:f2:65:14:5d: 06:b1:45:43:0a:e3:bd:80:b7:8c:5b:38:e8:69:5b: 6a:a8:b8:b8:3c:c8:92:37:79:28:42:4d:36:ef:91: 48:c5:d1:c5:8f:7b:11:93:dc:34:35:e6:37:d5:10: c7:23:de:c7:9d:98:a8:3e:3a:3d:80:db:48:ea:48: 73:08:93:e7:ab:a7:d2:d2:6c:43:98:d2:cf:d0:a6: 4a:93:21:2b:c7:55:db:6f:4e:d6:d5:82:62:6b:22: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:F1:2D:A3:DB:95:F1:35:DE:3C:32:71:E3:65:EC:9E:FD:1B:96 X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0c:81:19:b9:70:1d:88:84:a0:21:fd:f8:bc:3d:52:bd:ee: 5b:a6:9f:3d:a9:95:a1:88:a4:99:52:ae:04:bf:10:38:01:16: 35:24:72:2d:f1:ef:8f:55:00:6e:ba:c5:90:ff:60:32:d0:86: 73:9b:30:78:57:5a:73:c0:8d:85:a3:dc:e3:62:0f:8e:44:4a: 43:fb:81:3e:f7:e5:5e:de:a5:28:18:ce:99:eb:57:d4:9f:52: e7:e2:10:99:1f:cb:f7:88:59:96:2f:62:ba:f4:fd:d4:ce:fd: 0f:6e:9e:df:6d:60:51:06:26:47:e1:da:d1:44:e0:e4:b4:40: 04:f0:21:e1:aa:5d:5e:5a:11:67:74:19:4d:35:a0:49:a1:62: e2:07:a4:86:e6:8a:07:94:65:a0:ac:78:4c:75:90:f3:8f:a9: 65:8a:9a:fb:c6:38:85:70:d3:07:53:1a:1f:38:63:ca:41:be: 10:6d:2f:e1:c7:7d:c1:4e:9c:85:9a:68:8f:b8:90:b3:fe:ba: df:50:5f:f9:30:6a:5c:24:23:bd:02:d6:a4:78:12:4c:84:6a: b0:d9:fb:69:92:12:4f:f4:f6:37:57:82:d0:e8:12:51:9e:08: cb:6d:15:06:4c:b0:d3:b5:52:c3:22:a8:a2:b4:a4:94:7a:79: 58:37:50:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjUwNTMwMTYwODQ3WhcNMjUwNjA2MTYwODQ3WjAYMRYwFAYD VQQDEw02ODM5ZDgwZi0xNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCeVaZSQIZ/Xk6ADXuYDQvy4L4+i9omAw0e5KicAGz9BQvy7/VEeAQVETH+Y d6Z2gEXkkE3fNU9L26oiGW0YN/6xXBGutnKzL4UW9mM4aE2UfTbHWDiLnFRQ2d22 qpqJnE4W3CL9LxJ1zIedceIW0QDmJIv1zaI8+HglI+kDIle9cX4WQhfoppYinZco G8SCm5snGqwbXAOQZOHQW84TWfJlFF0GsUVDCuO9gLeMWzjoaVtqqLi4PMiSN3ko Qk0275FIxdHFj3sRk9w0NeY31RDHI97HnZioPjo9gNtI6khzCJPnq6fS0mxDmNLP 0KZKkyErx1Xbb07W1YJiayLQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMS8S2j 25XxNd48MnHjZeye/RuWMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnDIEZuXAdiISgIf34vD1Sve5bpp89qZWhiKSZUq4EvxA4ARY1JHIt 8e+PVQBuusWQ/2Ay0IZzmzB4V1pzwI2Fo9zjYg+OREpD+4E+9+Ve3qUoGM6Z61fU n1Ln4hCZH8v3iFmWL2K69P3Uzv0Pbp7fbWBRBiZH4drRRODktEAE8CHhql1eWhFn dBlNNaBJoWLiB6SG5ooHlGWgrHhMdZDzj6llipr7xjiFcNMHUxofOGPKQb4QbS/h x33BTpyFmmiPuJCz/rrfUF/5MGpcJCO9AtakeBJMhGqw2ftpkhJP9PY3V4LQ6BJR ngjLbRUGTLDTtVLDIqiitKSUenlYN1C5 -----END CERTIFICATE-----Generated at Sat May 31 16:27:53 2025 by rpki-client