$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: VaiLG43xQ/H/kSu/UeAAPlxV+44kzyDRKGNtdLdPocQ= Subject key identifier: 31:2E:6C:40:A7:15:7E:4A:E2:8A:53:66:24:E8:45:9A:0E:05:7F:09 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 0529 Signing time: Sat 10 May 2025 23:11:34 +0000 Manifest this update: Sat 10 May 2025 23:11:33 +0000 Manifest next update: Sat 17 May 2025 23:11:33 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: VMLYnkwkuIg57tg/HAAwg/oYyvwDo8xVAqKjX9c3OZg=) 2: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: dy7HlTozJjIKYVnOC7Ac5E0oRz65i8VQkjJrYKePISw=) 3: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: mfi7/O1q/PlMOgkBjbRpL3IW/lsvy+Z+UkSI5FHbr6c=) 4: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: RH9GugeUqxFAlpVwNYGHYX1wxhyc5gJGTmNYoQjg2Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: May 10 23:11:33 2025 GMT Not After : May 17 23:11:33 2025 GMT Subject: CN=681fdd25-7e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:cc:da:eb:20:5e:ff:2a:df:5b:d7:db:06: ae:06:80:ce:77:00:df:09:7f:35:79:9c:b2:e4:9f: eb:44:51:bc:bf:f8:a4:81:07:e8:1e:5f:db:35:f8: 82:b8:3d:07:bf:fc:16:7d:79:a5:61:f1:4b:c1:fe: ca:50:e9:99:d2:50:5a:0e:c4:cd:61:3e:21:a6:90: f9:2f:b9:88:13:b6:cc:6b:c6:27:74:0b:fb:ef:62: 3a:f4:0c:22:9c:87:a8:91:f1:f8:2e:9e:31:9e:1a: 5a:2f:9b:ee:03:05:dd:e3:6a:16:eb:79:3e:4f:23: ed:97:17:cc:35:5d:a3:17:34:b6:08:6c:9c:b5:fd: e5:eb:57:c6:2b:c8:1c:9b:38:33:d9:f0:11:d9:ce: 84:21:ca:19:79:d7:65:eb:94:67:01:20:d6:02:21: 10:c8:21:48:c7:2d:ac:dd:10:3b:d7:31:e2:60:f0: a1:de:37:34:c3:df:76:4f:92:48:5b:e4:e4:04:61: c9:fb:f7:74:7c:37:c1:46:60:72:09:b3:23:ed:7c: 0c:56:93:36:58:86:4c:c0:0a:92:93:35:3a:ad:7e: 6a:35:f5:d6:e9:ca:c7:10:2a:00:99:0f:42:a6:23: 12:ad:6d:5d:13:6d:d0:8f:a7:52:db:1b:d4:ad:c4: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:6C:40:A7:15:7E:4A:E2:8A:53:66:24:E8:45:9A:0E:05:7F:09 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e4:b0:be:52:fe:cc:fc:e5:e4:51:05:7e:5c:15:99:a2:a1: fc:06:0b:9b:48:a8:8b:b6:f5:f2:01:b8:92:4b:92:03:18:dd: fc:a6:75:9e:c3:7a:7f:cc:f4:7b:cc:d8:0d:6b:8c:fa:b6:aa: bc:87:f0:e1:4c:83:91:f1:c6:88:da:8a:94:1f:a8:92:ec:75: dd:71:f3:0c:2a:89:83:b1:38:65:48:c0:2e:c3:dd:7f:f1:64: b1:d9:e3:1f:52:ca:c6:8c:91:61:0d:ad:bd:c6:5f:23:35:a5: 90:9b:09:2d:b5:02:66:d0:cc:a3:6e:2f:70:d3:48:c9:ab:3e: 62:c7:ef:0c:4a:dc:cf:a3:4a:15:58:af:c2:88:5b:82:ed:5e: 61:5c:1e:02:49:ac:d5:dc:6b:4e:bd:21:40:b3:bb:ae:99:54: 39:34:13:f8:e2:7b:c1:9d:4b:68:29:3b:e6:ea:35:0a:f1:6b: 2e:34:0b:9d:8c:ec:4d:fd:38:9f:09:95:9f:29:1b:49:95:65: 83:c1:94:c1:63:e5:06:c1:45:f1:30:76:e6:82:2d:36:7f:59: 04:5a:ce:50:6f:17:64:f8:c3:77:da:a0:24:3d:bf:7b:79:17: 11:16:3d:b3:81:50:a7:38:81:b1:46:cb:42:23:81:43:83:fa: ae:83:c6:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjUwNTEwMjMxMTMzWhcNMjUwNTE3MjMxMTMzWjAYMRYwFAYD VQQDEw02ODFmZGQyNS03ZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvDM2usgXv8q31vX2wauBoDOdwDfCX81eZyy5J/rRFG8v/ikgQfoHl/bNfiC uD0Hv/wWfXmlYfFLwf7KUOmZ0lBaDsTNYT4hppD5L7mIE7bMa8YndAv772I69Awi nIeokfH4Lp4xnhpaL5vuAwXd42oW63k+TyPtlxfMNV2jFzS2CGyctf3l61fGK8gc mzgz2fAR2c6EIcoZeddl65RnASDWAiEQyCFIxy2s3RA71zHiYPCh3jc0w992T5JI W+TkBGHJ+/d0fDfBRmByCbMj7XwMVpM2WIZMwAqSkzU6rX5qNfXW6crHECoAmQ9C piMSrW1dE23Qj6dS2xvUrcR/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEubECn FX5K4opTZiToRZoOBX8JMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT5LC+Uv7M/OXkUQV+XBWZoqH8BgubSKiLtvXyAbiSS5IDGN38pnWe w3p/zPR7zNgNa4z6tqq8h/DhTIOR8caI2oqUH6iS7HXdcfMMKomDsThlSMAuw91/ 8WSx2eMfUsrGjJFhDa29xl8jNaWQmwkttQJm0Myjbi9w00jJqz5ix+8MStzPo0oV WK/CiFuC7V5hXB4CSazV3GtOvSFAs7uumVQ5NBP44nvBnUtoKTvm6jUK8WsuNAud jOxN/TifCZWfKRtJlWWDwZTBY+UGwUXxMHbmgi02f1kEWs5Qbxdk+MN32qAkPb97 eRcRFj2zgVCnOIGxRstCI4FDg/qug8br -----END CERTIFICATE-----Generated at Sun May 11 22:08:14 2025 by rpki-client