$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: 45uVF3zNTfZ5AiNctmjgWmjTqRCiZWywrU2bul90RmA= Subject key identifier: E0:FB:11:14:43:CB:4F:27:20:6F:9A:B5:2E:F7:86:43:0D:11:70:4B Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: AE Signing time: Tue 13 May 2025 05:15:18 +0000 Manifest this update: Tue 13 May 2025 05:15:18 +0000 Manifest next update: Tue 20 May 2025 05:15:18 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: ilMo6tG5V3EZJDsRfj8CJqJBJExDg+jUodmFPwPjl10=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: May 13 05:15:18 2025 GMT Not After : May 20 05:15:18 2025 GMT Subject: CN=6822d566-6dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:6b:87:52:e7:ea:f0:03:c9:d9:52:88:4d: 18:0f:8a:4f:13:1b:6a:00:9a:c7:af:e7:cb:c4:e7: 9d:80:d6:3e:e2:a6:ef:7b:87:c1:30:f9:b4:6e:2a: b4:3d:57:20:34:29:ae:34:25:7c:aa:a6:3f:4c:1d: 26:6b:64:23:ff:8b:0d:27:60:8b:94:f2:61:f3:f5: 70:86:d1:16:9b:ed:ec:91:0d:1d:2d:75:0e:94:a4: 86:ca:63:39:de:1f:8f:27:9c:10:75:a5:04:85:6c: f7:a4:92:b4:20:b2:07:f3:b5:10:37:5b:f8:21:ba: 70:8d:55:86:1d:e8:56:92:b6:59:93:3e:77:bc:af: 34:68:8f:57:3f:89:ab:09:8d:91:a2:b8:41:57:c5: 19:12:e7:28:6c:c7:93:1c:e8:7a:e3:e9:06:ab:5c: b1:c2:7b:c4:77:52:a8:a7:4d:34:0e:9a:7f:d6:78: 70:31:39:c2:2b:91:d3:c4:65:64:c4:75:1d:91:45: fd:e3:05:af:0d:bc:65:27:ba:f5:83:bd:a0:05:c8: 8e:11:eb:bd:7c:de:01:ac:e4:0b:ca:76:08:10:3c: 1d:c8:41:60:71:f4:c0:36:d9:7e:63:cd:45:f9:ee: e4:56:c5:9e:56:44:42:8d:fc:74:ed:89:5b:c3:8a: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FB:11:14:43:CB:4F:27:20:6F:9A:B5:2E:F7:86:43:0D:11:70:4B X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:89:e3:e2:40:8d:1e:85:e5:5c:44:1a:ba:b6:01:31:0c: 3c:7e:be:a6:d5:e7:e3:eb:5c:84:ee:6a:19:08:55:c2:5c:22: 27:e0:52:da:b2:84:f3:9e:1a:81:b2:9e:bf:6c:52:99:04:3b: cd:74:84:39:94:25:4f:fe:61:40:eb:29:8d:ab:b8:23:ca:93: 94:b6:32:ad:a9:b7:ff:a1:e4:d0:c1:1d:0e:a2:91:dd:81:3e: 7a:21:01:6c:42:3d:65:84:a8:33:77:74:98:30:1a:d1:50:38: 99:99:41:cf:39:64:88:11:24:b2:b2:d1:cf:ad:56:f4:57:c5: ae:cf:8e:c4:82:d1:94:35:92:6f:23:24:b2:28:4e:bc:51:0c: 59:7f:ad:8e:f6:86:6c:07:98:6a:e9:52:29:96:49:e3:f4:1f: 19:27:42:73:21:e1:d3:fb:f8:a5:e6:70:3e:63:02:58:8c:63: fb:a5:af:7d:38:32:40:3d:7b:c9:47:fb:c0:ec:91:99:7c:f2: 9d:9c:56:ba:6e:a1:81:da:a5:f2:ca:f0:53:ce:95:75:26:57: 48:5e:61:45:3b:02:5b:02:20:1f:6f:f5:46:2d:58:92:62:22: b7:e3:43:1e:ea:fc:24:30:ed:79:f5:73:68:6d:c2:5e:eb:4c: 07:49:8a:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwNTEzMDUxNTE4WhcNMjUwNTIwMDUxNTE4WjAYMRYwFAYD VQQDEw02ODIyZDU2Ni02ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Vrh1Ln6vADydlSiE0YD4pPExtqAJrHr+fLxOedgNY+4qbve4fBMPm0biq0 PVcgNCmuNCV8qqY/TB0ma2Qj/4sNJ2CLlPJh8/VwhtEWm+3skQ0dLXUOlKSGymM5 3h+PJ5wQdaUEhWz3pJK0ILIH87UQN1v4IbpwjVWGHehWkrZZkz53vK80aI9XP4mr CY2RorhBV8UZEucobMeTHOh64+kGq1yxwnvEd1Kop000Dpp/1nhwMTnCK5HTxGVk xHUdkUX94wWvDbxlJ7r1g72gBciOEeu9fN4BrOQLynYIEDwdyEFgcfTANtl+Y81F +e7kVsWeVkRCjfx07Ylbw4qYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD7ERRD y08nIG+atS73hkMNEXBLMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBvonj4kCNHoXlXEQaurYBMQw8fr6m1efj61yE7moZCFXCXCIn4FLa soTznhqBsp6/bFKZBDvNdIQ5lCVP/mFA6ymNq7gjypOUtjKtqbf/oeTQwR0OopHd gT56IQFsQj1lhKgzd3SYMBrRUDiZmUHPOWSIESSystHPrVb0V8Wuz47EgtGUNZJv IySyKE68UQxZf62O9oZsB5hq6VIplknj9B8ZJ0JzIeHT+/il5nA+YwJYjGP7pa99 ODJAPXvJR/vA7JGZfPKdnFa6bqGB2qXyyvBTzpV1JldIXmFFOwJbAiAfb/VGLViS YiK340Me6vwkMO159XNobcJe60wHSYqd -----END CERTIFICATE-----Generated at Wed May 14 03:21:05 2025 by rpki-client