$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: /jhijnpaFPKJi/etox30zTpaaZ0XnexBhsGkpouH+1k= Subject key identifier: AF:C4:77:DA:21:69:C3:BE:95:58:F5:E1:CD:06:2B:C2:59:0D:18:35 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0BD8 Signing time: Wed 14 May 2025 18:57:53 +0000 Manifest this update: Wed 14 May 2025 18:57:52 +0000 Manifest next update: Wed 21 May 2025 18:57:52 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: /YcCKS+f8nMzWHV7Wn8oUBqF3NQYqavRTgWGCEWQAUQ=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: sv0g0tboRsfsbJ2uarFSxGBIzB+s+V9JKt78rjuG5CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: May 14 18:57:52 2025 GMT Not After : May 21 18:57:52 2025 GMT Subject: CN=6824e7b0-f067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:d6:49:0d:4f:6e:88:7d:05:46:77:86:9d: 67:c3:43:85:86:92:70:09:75:e4:a0:1d:36:1e:6a: 8c:9f:17:8d:da:55:a6:80:c3:6f:a8:0a:c2:5f:b7: 60:7c:6c:07:76:a1:ef:a2:9e:8a:61:06:f4:d1:4b: cf:a8:08:88:7e:b2:b8:0e:fb:19:78:fb:f7:2f:44: 8c:88:56:ff:ea:bf:8c:26:c8:46:a8:b7:31:93:8e: 3e:19:7a:89:66:83:ec:63:3b:85:92:f6:c6:71:e8: e7:e1:bb:6b:80:85:7d:23:7c:fd:9d:a2:d6:67:af: 7e:23:32:96:1e:e0:ea:e0:fe:53:08:57:1c:eb:b0: c3:26:4f:70:62:92:b5:8f:9f:a2:c0:1e:b3:0c:c1: 3d:b3:d1:8c:00:c3:f9:0c:d2:fa:cb:f5:22:79:1b: 36:ca:ce:cd:44:72:2a:63:4e:6b:b4:21:f6:d1:dc: bc:52:85:c8:53:36:43:8b:96:45:0a:ef:4b:a4:ed: 82:92:95:f9:b1:8c:91:3b:eb:a9:80:c3:f7:42:c8: fa:ac:83:19:f7:40:d8:16:81:2f:41:0c:14:8d:e2: 68:f2:b3:64:a7:c5:a1:b1:48:d8:66:42:ab:3a:70: eb:a3:3c:17:ed:17:df:69:dc:35:f7:e6:fc:26:f7: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:77:DA:21:69:C3:BE:95:58:F5:E1:CD:06:2B:C2:59:0D:18:35 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:26:df:f0:ff:23:e1:43:d7:88:d4:91:1e:0c:d6:ea:2a:b6: 49:de:48:d8:3b:65:0d:64:2b:2d:76:c6:e3:92:90:65:41:6f: a2:c3:35:51:ff:55:9a:5b:97:d9:4e:3b:71:fc:91:8a:e6:08: 8e:5f:89:51:12:30:56:a2:74:2a:24:bc:54:61:ac:3f:90:54: 90:26:d9:e3:be:66:94:33:33:e1:e8:3b:03:4e:61:06:1b:aa: b7:b2:16:3d:97:f1:ed:25:13:4a:e7:22:6c:2a:7a:bc:c9:db: 89:ef:0f:a8:95:f0:1b:7e:a9:72:c9:ff:38:68:ee:bd:cb:88: 03:6f:07:13:62:75:b5:e4:ee:c8:2c:16:4e:66:f8:0a:07:80: 80:a9:80:fc:5b:ba:5a:df:db:6d:16:18:d7:01:ce:d6:cc:71: 18:1f:b5:88:70:6a:47:4c:0e:6e:22:1b:fc:90:d0:b2:d6:18: fa:f8:b6:21:31:63:04:cd:9b:61:3d:fa:f6:1a:90:2e:7a:44: 7c:cd:cf:a2:32:26:b3:28:11:cd:30:9e:ae:d2:b3:0e:c3:bf: cf:8d:90:75:61:0d:8b:1f:b6:b0:0b:95:10:fb:55:e9:c6:7b: 5d:40:90:b1:cc:f9:95:2d:17:00:d4:cd:81:19:63:29:44:02: 77:53:fe:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNTE0MTg1NzUyWhcNMjUwNTIxMTg1NzUyWjAYMRYwFAYD VQQDEw02ODI0ZTdiMC1mMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKrWSQ1Pboh9BUZ3hp1nw0OFhpJwCXXkoB02HmqMnxeN2lWmgMNvqArCX7dg fGwHdqHvop6KYQb00UvPqAiIfrK4DvsZePv3L0SMiFb/6r+MJshGqLcxk44+GXqJ ZoPsYzuFkvbGcejn4btrgIV9I3z9naLWZ69+IzKWHuDq4P5TCFcc67DDJk9wYpK1 j5+iwB6zDME9s9GMAMP5DNL6y/UieRs2ys7NRHIqY05rtCH20dy8UoXIUzZDi5ZF Cu9LpO2CkpX5sYyRO+upgMP3Qsj6rIMZ90DYFoEvQQwUjeJo8rNkp8WhsUjYZkKr OnDrozwX7Rffadw19+b8Jvd8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/Ed9oh acO+lVj14c0GK8JZDRg1MB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Jt/w/yPhQ9eI1JEeDNbqKrZJ3kjYO2UNZCstdsbjkpBlQW+iwzVR /1WaW5fZTjtx/JGK5giOX4lREjBWonQqJLxUYaw/kFSQJtnjvmaUMzPh6DsDTmEG G6q3shY9l/HtJRNK5yJsKnq8yduJ7w+olfAbfqlyyf84aO69y4gDbwcTYnW15O7I LBZOZvgKB4CAqYD8W7pa39ttFhjXAc7WzHEYH7WIcGpHTA5uIhv8kNCy1hj6+LYh MWMEzZthPfr2GpAuekR8zc+iMiazKBHNMJ6u0rMOw7/PjZB1YQ2LH7awC5UQ+1Xp xntdQJCxzPmVLRcA1M2BGWMpRAJ3U/7t -----END CERTIFICATE-----Generated at Thu May 15 10:02:35 2025 by rpki-client