$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: 7RqH6Twijx2e4ZqUlQxDapQdvSxWrNtpkdwcmWcjKyU= Subject key identifier: 87:AD:DA:25:DD:B5:49:7F:5A:8E:35:2C:4D:FB:3E:A2:9D:9D:36:80 Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 01E2 Signing time: Sun 11 May 2025 01:39:45 +0000 Manifest this update: Sun 11 May 2025 01:39:44 +0000 Manifest next update: Sun 18 May 2025 01:39:44 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: ffHEdX3+EufhXhAK35bFzJ2JEUEKB5ZSuoMuIGp3YxU=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: May 11 01:39:44 2025 GMT Not After : May 18 01:39:44 2025 GMT Subject: CN=681fffe0-26d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:37:44:29:53:b4:6a:c5:74:3a:a7:be:74: 00:c2:66:5d:00:6b:1a:7e:fd:9b:21:63:22:a6:83: e9:3c:7d:91:ad:d0:a6:b4:ed:c8:20:ef:03:d2:d1: ab:36:88:c3:6d:00:a8:77:56:84:3a:66:43:24:69: 26:48:03:d8:60:df:65:a3:93:6f:65:a5:7c:9e:90: b7:aa:c9:5e:a3:6c:3f:7d:b5:dd:03:05:88:2d:a9: e3:f7:40:38:5e:b6:ca:6e:be:1b:49:a4:fd:6a:81: cc:0b:d5:32:1b:aa:cd:b8:35:ca:ac:20:47:0c:34: da:c2:c0:3d:46:39:56:a2:63:55:19:d2:2e:e6:32: 61:8a:c8:1e:7c:aa:b8:62:a8:0c:44:18:cd:6e:21: 91:06:3b:ff:f0:1f:e8:1b:48:17:4a:5e:e4:62:f5: 10:ef:32:dc:67:b8:df:2f:30:d9:9a:30:e9:58:18: 9e:10:ca:fc:0f:32:38:77:76:83:0a:e1:6b:39:f8: 71:c8:10:90:8e:09:eb:7b:1f:55:5d:c5:86:f6:8f: b9:93:4c:f4:e3:71:5d:ae:b2:4b:46:fd:da:49:f1: 24:7c:fe:55:a6:da:63:e0:2a:54:1d:e2:25:51:70: de:85:3c:fc:70:66:ed:05:be:61:dd:a9:30:91:ef: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:DA:25:DD:B5:49:7F:5A:8E:35:2C:4D:FB:3E:A2:9D:9D:36:80 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7e:c7:91:b7:42:5a:6c:d0:c3:1e:ba:25:e3:ee:24:85:ab: d1:e5:50:0b:6a:a9:64:a9:a7:dd:3f:7d:a7:74:57:a3:98:18: 14:71:2b:0d:03:e2:72:29:d5:97:86:95:91:aa:be:58:71:b3: fc:3b:dc:27:a5:86:f7:88:2a:5b:3f:cd:0a:53:42:ff:a8:5d: 50:3a:a6:4c:b3:0b:65:f4:f9:f5:eb:12:0a:4b:48:12:a6:0e: e9:10:59:76:42:86:62:39:dc:b7:9e:b0:09:0c:5d:24:73:f4: fc:96:57:c8:98:43:ce:52:7a:e4:3a:67:5f:0d:dd:28:99:2e: a5:d7:b1:16:53:83:d4:b4:40:f9:27:da:17:be:0b:0d:4a:f2: 24:ab:57:9e:55:81:8d:9f:8d:75:32:1e:d4:64:58:73:32:cb: 88:64:e1:29:d2:ee:31:d9:e6:c5:e9:6d:08:b5:7d:b0:38:36: eb:22:65:21:9d:59:ec:c6:4d:c5:63:ad:f3:db:4c:2a:36:4b: 13:43:a8:b8:f0:39:bb:fc:ca:2a:ff:8a:b7:24:85:39:f6:c5: c4:8e:10:9b:d1:c2:c6:4f:5f:ac:55:5b:cc:2b:26:e7:f2:eb: c3:6c:6a:63:94:72:9c:79:4e:a4:42:6f:c1:9a:0f:32:61:f4: 2f:4b:4c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwNTExMDEzOTQ0WhcNMjUwNTE4MDEzOTQ0WjAYMRYwFAYD VQQDEw02ODFmZmZlMC0yNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufM3RClTtGrFdDqnvnQAwmZdAGsafv2bIWMipoPpPH2RrdCmtO3IIO8D0tGr NojDbQCod1aEOmZDJGkmSAPYYN9lo5NvZaV8npC3qsleo2w/fbXdAwWILanj90A4 XrbKbr4bSaT9aoHMC9UyG6rNuDXKrCBHDDTawsA9RjlWomNVGdIu5jJhisgefKq4 YqgMRBjNbiGRBjv/8B/oG0gXSl7kYvUQ7zLcZ7jfLzDZmjDpWBieEMr8DzI4d3aD CuFrOfhxyBCQjgnrex9VXcWG9o+5k0z043FdrrJLRv3aSfEkfP5Vptpj4CpUHeIl UXDehTz8cGbtBb5h3akwke9wTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIet2iXd tUl/Wo41LE37PqKdnTaAMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfseRt0JabNDDHrol4+4khavR5VALaqlkqafdP32ndFejmBgUcSsN A+JyKdWXhpWRqr5YcbP8O9wnpYb3iCpbP80KU0L/qF1QOqZMswtl9Pn16xIKS0gS pg7pEFl2QoZiOdy3nrAJDF0kc/T8llfImEPOUnrkOmdfDd0omS6l17EWU4PUtED5 J9oXvgsNSvIkq1eeVYGNn411Mh7UZFhzMsuIZOEp0u4x2ebF6W0ItX2wODbrImUh nVnsxk3FY63z20wqNksTQ6i48Dm7/Moq/4q3JIU59sXEjhCb0cLGT1+sVVvMKybn 8uvDbGpjlHKceU6kQm/Bmg8yYfQvS0zG -----END CERTIFICATE-----Generated at Mon May 12 22:45:19 2025 by rpki-client