$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft File: GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json) Hash identifier: HmrbC8ajx97n55zQNekQt5vzIKyHqmUP5WsC2g5JX4M= Subject key identifier: 5C:88:75:E6:1B:FB:3F:2E:00:D0:26:2B:D7:A8:11:BC:08:4F:2B:B6 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft Manifest number: 0167 Signing time: Sat 17 May 2025 02:44:37 +0000 Manifest this update: Sat 17 May 2025 02:44:37 +0000 Manifest next update: Sat 24 May 2025 02:44:37 +0000 Files and hashes: 1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: qqVHlOUaAEGQyKwcIsNPSp6FfougsiAy1vRw7LE7lB0=) 2: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 1ox24WtFoVUbazPX6P4aY+crHckQLHhi4icr89cLxS0=) 3: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: 4KMF0OCYbNDwaW3aLIgUQJgQPdi1cw9YHAWu6imOU70=) 4: 9781D91CB36B11EEA3394737C4F9AE02.roa (hash: ezxJgBFw2tKKcU962PajWcu+NU//ODot2RyjD71Fn24=) 5: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: vvnk4u9DNse+nnNTrLADNzPvSMLhalyiJs4z4ddnMBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: May 17 02:44:37 2025 GMT Not After : May 24 02:44:37 2025 GMT Subject: CN=6827f815-df7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:26:f7:91:eb:bc:05:11:42:7f:2d:3d:eb: c9:0c:e1:81:d0:25:35:79:70:36:e9:28:fa:36:a7: ba:6f:53:d1:b1:e2:8c:e3:5f:0b:be:a3:1b:9d:47: f8:fa:96:a1:70:93:2c:64:61:11:63:81:26:27:f0: b6:88:9c:f7:25:65:d3:37:00:50:8d:19:2a:9e:fd: 49:9a:42:f1:d8:c1:92:e7:64:10:82:87:e7:b0:68: 5b:1a:18:b8:46:e1:d3:03:69:35:df:23:52:86:b1: 8d:48:b7:e7:d9:b4:d1:ae:6c:1d:fb:77:76:90:0c: 38:9f:d0:8e:08:a1:8b:8b:ef:5a:cd:a5:29:67:ca: 46:1e:e8:45:7f:f7:6f:ec:2a:0e:6c:89:26:cf:bf: f3:b0:b0:b9:79:6b:7f:49:d3:61:a9:31:cd:13:44: 28:4c:36:cd:66:e7:ad:01:7f:7a:66:c3:09:f7:91: 22:f3:68:78:5b:ff:f1:f3:27:4f:00:e9:cb:cc:c4: a1:bc:bf:5a:62:0b:a6:e5:57:56:a3:7d:ee:07:a7: 1a:c3:ec:bf:1f:27:42:09:f2:a3:ee:68:62:b3:96: cb:9c:f8:f1:d3:68:6f:82:a6:93:51:98:8d:f0:aa: ba:5e:4a:2e:55:3c:e1:93:47:93:e6:3e:50:94:c4: b3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:75:E6:1B:FB:3F:2E:00:D0:26:2B:D7:A8:11:BC:08:4F:2B:B6 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:c8:ff:67:8c:7b:ce:c6:59:17:75:a3:ec:82:47:7f:9e: 34:2f:7d:3b:86:74:5e:a4:57:8c:05:06:6a:71:53:c3:86:47: 16:6b:ab:c7:6a:e6:e0:87:1c:05:44:e1:fa:21:4b:1a:07:9a: 48:44:fd:9d:a1:2e:67:d6:0e:89:93:a9:f3:40:18:d5:a8:aa: 0d:43:38:92:dd:f2:75:e3:00:f7:ce:e4:ae:c5:27:b2:ae:8f: 9d:7a:13:91:c3:59:5d:ba:9a:c1:57:e1:25:5c:cd:69:12:3b: 9c:06:97:aa:5a:42:36:92:6e:df:dc:ca:84:04:f5:51:62:7f: fa:b9:12:2b:ce:6c:3e:70:5e:c6:61:6f:e8:30:8d:50:67:77: 41:33:9b:30:e6:33:dd:7c:23:35:8c:2c:a4:f6:26:f7:ea:78: 68:76:96:9f:45:08:c0:13:10:d8:9f:44:a5:14:56:85:05:2b: 43:92:09:83:a9:03:d0:4b:79:d4:35:b5:4f:b2:1f:ed:1a:3e: f9:6c:d3:4f:31:90:72:df:96:96:e7:29:08:3c:1a:61:0c:4d: f5:04:35:87:5f:ca:e3:ee:e2:36:6f:bc:1c:af:c0:29:74:cc: 16:b2:6e:1c:46:68:13:6e:46:a3:8c:df:b7:1e:60:cf:9d:6a: 84:d3:79:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwNTE3MDI0NDM3WhcNMjUwNTI0MDI0NDM3WjAYMRYwFAYD VQQDEw02ODI3ZjgxNS1kZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m8m95HrvAURQn8tPevJDOGB0CU1eXA26Sj6Nqe6b1PRseKM418LvqMbnUf4 +pahcJMsZGERY4EmJ/C2iJz3JWXTNwBQjRkqnv1JmkLx2MGS52QQgofnsGhbGhi4 RuHTA2k13yNShrGNSLfn2bTRrmwd+3d2kAw4n9COCKGLi+9azaUpZ8pGHuhFf/dv 7CoObIkmz7/zsLC5eWt/SdNhqTHNE0QoTDbNZuetAX96ZsMJ95Ei82h4W//x8ydP AOnLzMShvL9aYgum5VdWo33uB6caw+y/HydCCfKj7mhis5bLnPjx02hvgqaTUZiN 8Kq6XkouVTzhk0eT5j5QlMSzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyIdeYb +z8uANAmK9eoEbwITyu2MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba V3BiUmNSWWo0dlpnNncteGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRcj/Z4x7zsZZF3Wj7IJHf540L307hnRepFeMBQZqcVPDhkcWa6vH aubghxwFROH6IUsaB5pIRP2doS5n1g6Jk6nzQBjVqKoNQziS3fJ14wD3zuSuxSey ro+dehORw1lduprBV+ElXM1pEjucBpeqWkI2km7f3MqEBPVRYn/6uRIrzmw+cF7G YW/oMI1QZ3dBM5sw5jPdfCM1jCyk9ib36nhodpafRQjAExDYn0SlFFaFBStDkgmD qQPQS3nUNbVPsh/tGj75bNNPMZBy35aW5ykIPBphDE31BDWHX8rj7uI2b7wcr8Ap dMwWsm4cRmgTbkajjN+3HmDPnWqE03nF -----END CERTIFICATE-----Generated at Sat May 17 09:37:34 2025 by rpki-client