$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: MNvg38IqEmXWBEgpyjZtPDq+ddtZ46re+aOI0mN/b4E= Subject key identifier: B8:DF:06:FB:28:34:6B:B4:C7:AF:A3:33:18:59:EB:B7:7C:8A:45:EB Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3AE9 Signing time: Mon 12 May 2025 14:20:00 +0000 Manifest this update: Mon 12 May 2025 14:19:59 +0000 Manifest next update: Mon 19 May 2025 14:19:59 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: VHFmTleqx+Cz+v2wmEhGidoozgPnuXDMH8BwovZVyec=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16214 (0x3f56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: May 12 14:19:59 2025 GMT Not After : May 19 14:19:59 2025 GMT Subject: CN=68220390-a94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:58:6d:81:e6:78:91:b0:4f:ed:fb:44:b0: b1:5c:e3:1e:35:2d:f0:9b:c0:dd:bc:7b:9e:c3:87: 6f:08:b4:c3:8e:14:40:c2:85:02:76:61:41:ac:17: 98:d1:53:53:5f:3e:2f:05:0b:72:d7:61:25:0d:20: 6b:85:2c:21:44:7f:a9:ac:64:a0:5c:94:cc:5b:2c: a8:46:3b:34:24:3c:0f:c6:81:79:7f:22:c1:a4:1f: cf:4d:d3:79:fe:7b:d9:12:f4:76:a2:7b:4b:3f:34: 2c:00:bf:38:f7:08:3e:f6:fd:bb:4e:b4:10:e8:83: 89:47:fa:8a:94:90:c2:a5:21:85:75:f7:5e:b8:61: 12:80:32:69:ec:fb:2b:4e:2b:5b:1e:10:fa:ef:71: 1a:ab:f2:9c:cb:d7:47:13:48:ad:1b:00:dd:d9:36: 70:72:e9:25:40:74:02:1e:6a:21:00:3d:3e:72:21: de:7d:db:8f:7c:ad:d0:32:a0:ae:86:f7:1f:02:45: f5:7d:f6:9a:03:18:2a:e0:a3:d7:f1:49:2e:a2:d7: 18:bf:21:9f:8e:3c:1e:1e:5c:1d:90:3a:6e:b4:86: 3a:01:3e:41:7b:9c:80:e4:b5:9a:ed:50:d0:41:ef: f7:ca:a3:e4:74:04:d5:8c:54:af:ab:be:ff:a2:ad: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:06:FB:28:34:6B:B4:C7:AF:A3:33:18:59:EB:B7:7C:8A:45:EB X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:c3:89:44:74:65:33:1f:8e:44:2d:bb:44:39:87:2e:37:6c: 75:bf:8f:8a:97:61:ad:6e:15:0b:d2:d8:29:9a:ab:f5:33:32: dd:00:34:d6:af:5e:b6:79:df:79:06:d0:c3:e5:8c:e4:f8:b9: 69:91:41:2f:57:c6:f0:49:27:5c:75:ef:32:f9:3b:67:50:50: f7:87:04:ab:7a:82:50:0d:48:79:ab:61:b3:c5:a8:36:85:cc: f9:98:83:36:f1:8d:98:3b:60:40:35:1e:cd:b6:ec:9c:83:76: 83:1d:cd:8a:42:43:a0:c0:40:24:c2:50:2f:b0:54:6e:67:80: dd:96:b0:0a:9d:0a:cf:aa:66:bd:b4:e8:5e:72:39:fa:5f:d6: dd:42:e2:b7:f4:f9:66:2a:b2:c2:2d:bb:3e:80:bd:ff:9f:d0: 21:ee:61:23:33:03:0d:50:63:b9:03:94:71:57:97:53:65:f3: 4b:40:4e:fe:aa:f8:3a:d3:af:2b:42:14:3f:a3:ee:a5:36:bb: 0e:68:25:41:79:4f:60:cf:5f:56:96:3c:38:8f:de:50:07:21: e9:6d:e2:b2:f7:d1:9d:a0:d1:1f:78:b3:21:e9:c8:3b:0b:f1: 27:ac:18:a8:bf:82:87:34:ed:a6:d6:b7:ea:f1:f2:eb:46:6e: 7c:9a:d2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwNTEyMTQxOTU5WhcNMjUwNTE5MTQxOTU5WjAYMRYwFAYD VQQDEw02ODIyMDM5MC1hOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwdYbYHmeJGwT+37RLCxXOMeNS3wm8DdvHuew4dvCLTDjhRAwoUCdmFBrBeY 0VNTXz4vBQty12ElDSBrhSwhRH+prGSgXJTMWyyoRjs0JDwPxoF5fyLBpB/PTdN5 /nvZEvR2ontLPzQsAL849wg+9v27TrQQ6IOJR/qKlJDCpSGFdfdeuGESgDJp7Psr TitbHhD673Eaq/Kcy9dHE0itGwDd2TZwcuklQHQCHmohAD0+ciHefduPfK3QMqCu hvcfAkX1ffaaAxgq4KPX8UkuotcYvyGfjjweHlwdkDputIY6AT5Be5yA5LWa7VDQ Qe/3yqPkdATVjFSvq77/oq0Y3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjfBvso NGu0x6+jMxhZ67d8ikXrMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLw4lEdGUzH45ELbtEOYcuN2x1v4+Kl2GtbhUL0tgpmqv1MzLdADTW r162ed95BtDD5Yzk+LlpkUEvV8bwSSdcde8y+TtnUFD3hwSreoJQDUh5q2Gzxag2 hcz5mIM28Y2YO2BANR7Ntuycg3aDHc2KQkOgwEAkwlAvsFRuZ4DdlrAKnQrPqma9 tOhecjn6X9bdQuK39PlmKrLCLbs+gL3/n9Ah7mEjMwMNUGO5A5RxV5dTZfNLQE7+ qvg6068rQhQ/o+6lNrsOaCVBeU9gz19Wljw4j95QByHpbeKy99GdoNEfeLMh6cg7 C/EnrBiov4KHNO2m1rfq8fLrRm58mtIT -----END CERTIFICATE-----Generated at Mon May 12 16:53:02 2025 by rpki-client