$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft File: gwig5Q7SdrauEaNIK8K70EDlnxo.mft (raw, json) Hash identifier: SRGdRt1ZAQMnb0DGatgBk81d9NhZwpZPFVmi6oTz6K0= Subject key identifier: E9:BF:EA:A6:21:3D:45:9A:66:40:10:6E:60:8E:28:85:42:7F:ED:D3 Authority key identifier: 83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A Certificate issuer: /CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft Manifest number: 0A96 Signing time: Mon 12 May 2025 19:24:34 +0000 Manifest this update: Mon 12 May 2025 19:24:33 +0000 Manifest next update: Mon 19 May 2025 19:24:33 +0000 Files and hashes: 1: gwig5Q7SdrauEaNIK8K70EDlnxo.crl (hash: DI9a9t/Rd09JfhvxMjQnRWxtklidzziSF4fjRnpY5tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45A0, serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A Validity Not Before: May 12 19:24:33 2025 GMT Not After : May 19 19:24:33 2025 GMT Subject: CN=68224af1-9f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:8a:c0:52:bb:a4:22:38:c9:6c:22:20:ce: b6:a1:c6:2a:a1:f4:55:36:3f:89:9f:05:9f:bf:e5: b5:42:e2:00:08:1c:0b:49:a8:fd:a2:75:8e:bb:5a: a9:a5:1c:ab:0e:29:b3:70:6c:1c:5a:dc:82:20:19: 09:9a:9a:79:ec:ba:83:03:0e:72:f9:f5:1e:ca:9e: e2:d2:1e:43:c6:0e:5c:d0:39:83:af:dd:e9:cf:bf: f9:b1:9a:32:23:ef:ae:f3:b5:ba:16:24:32:73:00: 2f:c2:1d:6b:b0:c5:04:42:51:f1:3d:ee:11:15:43: c6:a8:f8:51:e0:15:60:fe:84:0e:ef:6d:ac:11:29: ca:ed:8a:69:c8:dc:e8:d8:d4:ca:1a:23:96:b5:6b: e9:f7:86:f4:57:4c:02:41:09:f8:0b:cc:6e:b4:91: 50:9a:f1:f5:7e:88:b1:3b:32:31:03:96:a6:ae:9a: d1:13:8d:38:54:e8:d4:76:b3:2c:a3:37:fc:c8:18: 5d:20:98:de:d3:62:b8:ff:98:ce:5e:77:4f:df:96: 44:dd:7e:0b:f2:a8:35:05:bf:c1:f8:a8:2d:63:cf: ab:0a:57:d8:af:0a:14:69:ad:f6:3e:b8:59:f8:2d: d1:7d:66:ef:a9:df:4c:7a:a8:5b:77:19:a3:a0:ce: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BF:EA:A6:21:3D:45:9A:66:40:10:6E:60:8E:28:85:42:7F:ED:D3 X509v3 Authority Key Identifier: keyid:83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:ac:c5:81:d7:18:53:f1:85:93:e9:71:11:d0:4c:29:f9: 07:0e:82:b9:3b:63:ee:f7:3a:00:63:05:a8:fa:82:c7:28:2c: 34:dc:b4:a9:69:59:39:92:fb:65:51:bc:04:5b:93:02:55:11: 37:ff:05:f4:a9:24:94:9a:f8:7c:fa:87:6d:0d:e0:a5:52:eb: 3f:d4:d8:ca:fd:7c:66:67:d3:d9:2b:58:6e:24:ad:b6:bc:1b: d7:db:39:5e:41:0b:fd:87:f5:03:b8:c5:5d:7c:af:f6:66:80: 50:e2:39:e1:f6:99:a2:b1:1e:ec:b0:4c:14:9f:cc:0d:9b:45: 26:af:bc:a4:7d:fb:b5:ae:81:c4:ea:53:e2:b6:c7:f2:25:3b: 26:92:bf:4d:ae:7b:b8:64:a8:ba:7d:57:db:a6:27:53:ba:8c: 30:77:df:dc:38:a1:6a:b0:ce:ca:1d:3a:ac:f7:33:0d:c2:be: 0f:71:2a:fe:0b:73:6c:d5:0c:78:fd:14:e3:ab:1d:64:6a:b2: e9:9c:0f:e9:d9:51:38:91:dc:02:a3:f0:7d:c5:27:c2:32:3c: 80:e9:b7:07:e8:ba:0b:08:c2:5c:6c:37:7c:29:d8:fb:b6:35: d5:d6:4b:36:ae:e2:09:fc:4b:21:10:05:eb:c1:02:39:53:b6: 18:c2:5a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QTAxMTAvBgNVBAUTKDgzMDhBMEU1MEVEMjc2QjZBRTExQTM0ODJCQzJCQkQw NDBFNTlGMUEwHhcNMjUwNTEyMTkyNDMzWhcNMjUwNTE5MTkyNDMzWjAYMRYwFAYD VQQDEw02ODIyNGFmMS05ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyuKwFK7pCI4yWwiIM62ocYqofRVNj+JnwWfv+W1QuIACBwLSaj9onWOu1qp pRyrDimzcGwcWtyCIBkJmpp57LqDAw5y+fUeyp7i0h5Dxg5c0DmDr93pz7/5sZoy I++u87W6FiQycwAvwh1rsMUEQlHxPe4RFUPGqPhR4BVg/oQO722sESnK7YppyNzo 2NTKGiOWtWvp94b0V0wCQQn4C8xutJFQmvH1foixOzIxA5amrprRE404VOjUdrMs ozf8yBhdIJje02K4/5jOXndP35ZE3X4L8qg1Bb/B+KgtY8+rClfYrwoUaa32PrhZ +C3RfWbvqd9MeqhbdxmjoM6eAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm/6qYh PUWaZkAQbmCOKIVCf+3TMB8GA1UdIwQYMBaAFIMIoOUO0na2rhGjSCvCu9BA5Z8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVBMC9CRjMxNDcxMjU2 RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2RyYXVFYU5JSzhLNzBFRGxu eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3aWc1UTdTZHJhdUVhTklLOEs3MEVEbG54by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVBMC9CRjMxNDcxMjU2RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2Ry YXVFYU5JSzhLNzBFRGxueG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXQqzFgdcYU/GFk+lxEdBMKfkHDoK5O2Pu9zoAYwWo+oLHKCw03LSp aVk5kvtlUbwEW5MCVRE3/wX0qSSUmvh8+odtDeClUus/1NjK/XxmZ9PZK1huJK22 vBvX2zleQQv9h/UDuMVdfK/2ZoBQ4jnh9pmisR7ssEwUn8wNm0Umr7ykffu1roHE 6lPitsfyJTsmkr9Nrnu4ZKi6fVfbpidTuowwd9/cOKFqsM7KHTqs9zMNwr4PcSr+ C3Ns1Qx4/RTjqx1karLpnA/p2VE4kdwCo/B9xSfCMjyA6bcH6LoLCMJcbDd8Kdj7 tjXV1ks2ruIJ/EshEAXrwQI5U7YYwlqp -----END CERTIFICATE-----Generated at Tue May 13 22:39:19 2025 by rpki-client