$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft File: GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json) Hash identifier: Im5w35T8Lug2gZ912/WfC/wI4WNQt5SrIFuBS1gjMdQ= Subject key identifier: D5:5C:F7:48:AB:4D:74:6E:E1:46:B2:21:E6:6E:37:F0:12:1C:7A:7B Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft Manifest number: 04C8 Signing time: Wed 14 May 2025 23:51:39 +0000 Manifest this update: Wed 14 May 2025 23:51:39 +0000 Manifest next update: Wed 21 May 2025 23:51:39 +0000 Files and hashes: 1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: EKrhDMNVGmDuZEGkoepeeT99PC+8ExpZvu/v28gh+Fg=) 2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83 Validity Not Before: May 14 23:51:39 2025 GMT Not After : May 21 23:51:39 2025 GMT Subject: CN=68252c8b-b722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:7b:c4:ed:07:3e:67:af:71:ce:ec:72:d5: f0:f9:d5:19:74:33:66:88:67:83:bf:e4:27:4d:68: 69:9b:be:5b:46:7c:a9:f8:de:03:00:28:51:39:c9: 51:29:17:c5:ad:6e:4d:a9:40:5f:ba:fd:44:98:87: aa:b0:2e:a5:75:59:d6:a7:75:11:97:ae:ff:c4:90: 37:78:00:7e:42:c5:0a:10:2d:a1:c4:34:be:7c:0a: 80:93:8f:28:85:ca:69:11:36:cc:90:60:81:e1:6a: 4e:70:3e:5e:12:05:61:46:aa:9c:f1:3f:4f:a6:29: ea:3d:fe:6e:0f:e3:61:1c:d7:f2:34:28:d4:ae:d7: 9d:ce:e6:3b:08:d8:df:90:76:67:0c:e4:0f:72:6e: c5:f1:22:4d:a7:57:72:ea:aa:da:76:90:5d:f8:1a: c9:04:40:23:d5:d6:74:09:ac:af:d2:49:99:ce:f8: 1d:2a:e1:65:8c:51:f2:7d:da:c6:d0:c0:12:fe:04: 45:a6:9a:69:e1:1f:b4:49:b8:0b:ab:74:6c:55:38: 3f:a8:32:b1:c8:4a:0c:d3:20:69:06:13:8f:39:7c: 46:86:2f:e9:df:80:02:92:b6:e0:61:52:a9:a5:b0: ef:f3:da:9e:b9:d9:0f:7f:68:30:82:b5:7c:f5:ec: 7c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:F7:48:AB:4D:74:6E:E1:46:B2:21:E6:6E:37:F0:12:1C:7A:7B X509v3 Authority Key Identifier: keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:aa:00:f4:1a:e5:f8:84:df:b1:de:0b:38:e0:45:42:fc: 90:ac:0c:f0:38:07:96:91:88:71:53:d8:3a:34:c9:51:af:5b: eb:53:3f:d7:e6:ba:06:04:41:97:b1:c3:30:34:17:7d:b5:21: ca:c0:15:af:1c:16:13:0c:3a:f5:ff:55:bd:c5:62:59:a2:df: 04:91:16:b7:6d:f1:f4:73:c3:04:cc:24:9e:0b:9f:b9:54:0d: 37:2d:ff:d8:b6:ee:e3:5e:df:36:a0:ef:23:da:37:16:e9:21: c8:cd:70:bd:76:d0:eb:90:b0:18:58:99:75:63:3c:c4:7d:14: de:3e:54:b2:f7:0a:88:7d:36:e0:85:03:80:51:12:3f:87:60: 48:73:42:81:0e:ac:33:b6:87:15:6d:e2:ec:f8:f6:d1:27:67: d3:08:2c:7a:2d:9d:fd:6b:6b:b1:b7:fc:05:75:75:4a:d9:73: 0f:8a:16:45:29:71:c4:07:f1:28:45:41:31:f2:52:61:a6:b1: fe:3a:e4:56:2b:29:da:0c:2d:51:1f:e8:7c:63:40:1f:5c:8b: 84:a0:a3:f8:7d:1a:d3:7b:4b:f0:c2:12:32:17:dc:5c:e6:14: 1a:23:b3:bd:a1:1f:60:e9:a2:a4:36:89:2c:9b:08:d6:03:a5: d5:40:7f:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0RjgxMTAvBgNVBAUTKDFBN0E1MEQ1MjE1QTkyNTkxMTA0MDZCMEI2OTM2RkFF MTRFQTdEODMwHhcNMjUwNTE0MjM1MTM5WhcNMjUwNTIxMjM1MTM5WjAYMRYwFAYD VQQDEw02ODI1MmM4Yi1iNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/p7xO0HPmevcc7sctXw+dUZdDNmiGeDv+QnTWhpm75bRnyp+N4DAChROclR KRfFrW5NqUBfuv1EmIeqsC6ldVnWp3URl67/xJA3eAB+QsUKEC2hxDS+fAqAk48o hcppETbMkGCB4WpOcD5eEgVhRqqc8T9PpinqPf5uD+NhHNfyNCjUrtedzuY7CNjf kHZnDOQPcm7F8SJNp1dy6qradpBd+BrJBEAj1dZ0Cayv0kmZzvgdKuFljFHyfdrG 0MAS/gRFpppp4R+0SbgLq3RsVTg/qDKxyEoM0yBpBhOPOXxGhi/p34ACkrbgYVKp pbDv89qeudkPf2gwgrV89ex8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVc90ir TXRu4UayIeZuN/ASHHp7MB8GA1UdIwQYMBaAFBp6UNUhWpJZEQQGsLaTb64U6n2D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRGOC82NTQ4NjFEODIw RjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWtsa1JCQWF3dHBOdnJoVHFm WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ducFExU0Zha2xrUkJBYXd0cE52cmhUcWZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRGOC82NTQ4NjFEODIwRjUxMUVDQTY3NUM0NDJDNEY5QUUwMi9HbnBRMVNGYWts a1JCQWF3dHBOdnJoVHFmWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoAqoA9Brl+ITfsd4LOOBFQvyQrAzwOAeWkYhxU9g6NMlRr1vrUz/X 5roGBEGXscMwNBd9tSHKwBWvHBYTDDr1/1W9xWJZot8EkRa3bfH0c8MEzCSeC5+5 VA03Lf/Ytu7jXt82oO8j2jcW6SHIzXC9dtDrkLAYWJl1YzzEfRTePlSy9wqIfTbg hQOAURI/h2BIc0KBDqwztocVbeLs+PbRJ2fTCCx6LZ39a2uxt/wFdXVK2XMPihZF KXHEB/EoRUEx8lJhprH+OuRWKynaDC1RH+h8Y0AfXIuEoKP4fRrTe0vwwhIyF9xc 5hQaI7O9oR9g6aKkNoksmwjWA6XVQH+e -----END CERTIFICATE-----Generated at Fri May 16 17:50:44 2025 by rpki-client