$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: Zqi84zDa1IFOkgtoEOJFGMGBag4MrASOHVCbnUNexho= Subject key identifier: F8:4B:B5:52:44:A6:78:E6:00:A6:E9:E6:2C:EB:D8:1E:61:1D:3B:9F Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 07F0 Signing time: Mon 12 May 2025 20:44:59 +0000 Manifest this update: Mon 12 May 2025 20:44:59 +0000 Manifest next update: Mon 19 May 2025 20:44:59 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: l5C8HlbwjG9EqQ8iXTKASMb8noCwMQbIjoxs+OzLitk=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: 0zq4g5RJk0E/VoR4Pr+LW71Q1CJOf0yYtzjcsTKINfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: May 12 20:44:59 2025 GMT Not After : May 19 20:44:59 2025 GMT Subject: CN=68225dcb-d950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:94:6b:be:4a:67:40:4e:b2:bc:9b:39:ff: 36:e5:29:85:05:07:50:7f:04:e8:92:0a:22:d3:d4: 2d:e9:a7:8d:30:65:d4:04:5c:29:17:7a:dd:83:fc: f2:8f:01:82:bb:a4:3d:62:ae:68:38:c1:82:8b:6c: c8:0e:74:bc:87:4b:cb:6f:af:9f:c8:eb:cf:9d:51: 20:bb:1d:17:99:4e:1d:ab:87:eb:e5:c7:fa:b9:99: 1d:29:20:e8:42:f2:05:0c:4d:e7:15:ee:58:36:32: be:cf:b6:bd:43:cf:eb:91:5b:91:91:e8:89:90:f1: f1:b6:10:97:fa:6b:98:37:fa:74:ad:0e:be:cc:cd: 33:5f:30:43:60:9d:b1:49:e9:0f:b3:f5:11:3a:b8: 0a:68:ee:77:7b:5c:ff:48:45:31:cd:4a:eb:f8:d1: fa:b9:63:aa:9d:54:59:54:8b:f4:db:17:34:a8:ed: bd:02:8b:37:dc:49:9e:38:e6:91:88:ac:3e:2c:1a: 44:0b:ad:cd:47:e5:25:8f:f8:60:65:04:7f:33:98: 13:22:24:fa:9d:1e:1e:2c:fe:ec:5a:88:f8:7b:87: 4f:b8:61:06:a6:c4:5a:38:b6:90:a4:91:64:4f:93: 7a:47:47:38:f2:82:21:d1:c8:47:d6:54:99:f5:28: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:B5:52:44:A6:78:E6:00:A6:E9:E6:2C:EB:D8:1E:61:1D:3B:9F X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4b:22:d0:f8:6d:f1:e8:51:70:56:e9:c1:3a:4d:d2:41:fc: c2:18:18:c8:6a:8f:28:b1:d3:86:98:84:b7:34:e1:52:30:b1: 64:50:ae:92:a1:58:a9:f2:43:cc:5c:19:f2:b9:78:c7:1d:1c: 6e:ae:34:28:e5:2b:18:6a:28:c9:e9:7f:e2:a3:05:41:50:3b: 49:92:df:ff:bd:1a:5e:c7:ad:ff:92:66:be:29:cf:3d:e6:0f: ab:0b:a3:49:97:80:8d:39:02:d5:44:ea:d0:44:ad:15:24:6b: 0c:fe:88:41:bf:d1:8f:c3:5d:83:f1:61:e2:d8:f3:02:dd:56: 23:2e:aa:2b:57:a2:00:4f:2d:32:4c:fe:f8:76:4b:f9:f5:f0: 55:70:cc:3c:48:9f:df:74:e2:d2:ff:6b:29:14:fe:4c:95:48: 51:5f:a6:61:fe:72:a9:1f:80:48:31:ea:29:bd:be:84:0d:69: 0b:74:74:a7:9f:13:08:6f:43:c0:7c:16:6f:5d:fc:52:93:37: 9f:e6:68:f9:5d:1d:45:a9:0c:d2:e1:56:a6:ad:d2:42:d5:b6: b8:d1:2b:84:74:43:bd:34:af:e2:e2:96:1f:d8:9f:1d:08:a0: 10:75:cc:08:79:5f:39:ef:f0:43:6b:5d:af:31:3a:1d:50:8c: 38:0c:2b:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwNTEyMjA0NDU5WhcNMjUwNTE5MjA0NDU5WjAYMRYwFAYD VQQDEw02ODIyNWRjYi1kOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c+Ua75KZ0BOsrybOf825SmFBQdQfwTokgoi09Qt6aeNMGXUBFwpF3rdg/zy jwGCu6Q9Yq5oOMGCi2zIDnS8h0vLb6+fyOvPnVEgux0XmU4dq4fr5cf6uZkdKSDo QvIFDE3nFe5YNjK+z7a9Q8/rkVuRkeiJkPHxthCX+muYN/p0rQ6+zM0zXzBDYJ2x SekPs/UROrgKaO53e1z/SEUxzUrr+NH6uWOqnVRZVIv02xc0qO29Aos33EmeOOaR iKw+LBpEC63NR+Ulj/hgZQR/M5gTIiT6nR4eLP7sWoj4e4dPuGEGpsRaOLaQpJFk T5N6R0c48oIh0chH1lSZ9SgzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhLtVJE pnjmAKbp5izr2B5hHTufMB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkSyLQ+G3x6FFwVunBOk3SQfzCGBjIao8osdOGmIS3NOFSMLFkUK6S oVip8kPMXBnyuXjHHRxurjQo5SsYaijJ6X/iowVBUDtJkt//vRpex63/kma+Kc89 5g+rC6NJl4CNOQLVROrQRK0VJGsM/ohBv9GPw12D8WHi2PMC3VYjLqorV6IATy0y TP74dkv59fBVcMw8SJ/fdOLS/2spFP5MlUhRX6Zh/nKpH4BIMeopvb6EDWkLdHSn nxMIb0PAfBZvXfxSkzef5mj5XR1FqQzS4VamrdJC1ba40SuEdEO9NK/i4pYf2J8d CKAQdcwIeV857/BDa12vMTodUIw4DCvY -----END CERTIFICATE-----Generated at Tue May 13 21:58:13 2025 by rpki-client