$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft File: gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json) Hash identifier: KmnaC9VbP2OShLWU7lDXgyMbHuRYIeh3GFYqwuwEpdk= Subject key identifier: 0C:7A:9F:F1:7C:02:F7:10:CC:17:20:51:F4:C9:32:72:52:03:6F:00 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft Manifest number: 25 Signing time: Thu 15 May 2025 07:07:07 +0000 Manifest this update: Thu 15 May 2025 07:07:06 +0000 Manifest next update: Thu 22 May 2025 07:07:06 +0000 Files and hashes: 1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: LVP/7yjo4f6o7icCzA4EGw5zQ+blS0xn498npmIft5s=) 2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: AvVg/+A0MLB4qd4KAVoe6uLCEieXvb2jz5ivdG0pWoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: May 15 07:07:06 2025 GMT Not After : May 22 07:07:06 2025 GMT Subject: CN=6825929a-4be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:e5:00:50:75:9a:87:c7:13:0e:61:81:1e: c0:d5:d7:e8:61:eb:80:22:01:66:63:e2:a3:fa:17: a1:c5:57:a9:c2:da:24:09:67:a9:5a:68:7e:c2:f4: 90:c3:2f:25:9e:77:1d:b4:ca:6f:d5:3d:9b:75:e8: fd:44:59:13:be:3b:d5:e7:6a:60:13:7c:b4:cc:c2: 79:9e:8c:fe:9d:2e:a4:00:1c:0f:3e:80:ef:88:67: fe:56:5d:a3:a3:b1:6b:02:88:8a:57:a8:73:fe:5a: d2:66:01:23:ef:fa:f5:3a:7f:26:e7:e9:96:11:81: 53:c2:52:93:f5:bf:41:e8:56:f2:f3:99:e0:1f:5a: ea:9f:25:7d:e4:05:46:b4:1d:a0:b3:9b:c3:69:b9: 12:e1:79:52:3e:21:55:50:34:f1:ac:03:9c:a5:4d: c2:bc:56:f2:25:c7:28:15:68:2f:d5:0a:88:25:93: 70:f1:3c:54:3c:da:24:d2:ec:69:2c:65:4d:f5:f9: 46:f6:04:fb:f4:d0:06:d7:f1:cc:15:3c:69:67:d8: 74:09:fc:81:27:9f:10:76:c5:81:1f:21:06:df:cb: 47:8d:82:18:09:2b:f0:3c:a8:9f:02:38:0f:ff:4d: e0:18:dc:c6:7d:d4:3d:21:8f:fe:3b:4c:a9:07:88: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:9F:F1:7C:02:F7:10:CC:17:20:51:F4:C9:32:72:52:03:6F:00 X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:0a:a6:21:76:97:f0:92:dd:71:c5:7e:a0:11:19:94:a9: c1:fc:2e:3e:fa:cc:b9:bd:7c:77:1a:ab:6d:5c:14:a1:1a:6e: ed:fa:16:4e:cd:5b:e7:5c:95:a8:84:06:51:26:0a:70:9e:48: c9:92:1e:5c:e3:d3:56:ff:68:d5:e1:88:15:29:5d:c4:18:f8: 04:3a:1b:ea:51:8f:9e:0e:0b:8c:41:24:71:7b:b4:c4:bc:dc: af:19:1a:84:37:81:42:bb:51:33:10:68:60:76:a4:18:5f:23: 55:b0:88:37:2f:ba:78:39:a5:d8:fa:44:84:fc:18:e2:e2:8c: e4:a5:0f:bc:00:8d:a9:2e:38:78:22:30:5e:97:64:13:8e:1a: 56:68:6e:9b:63:e0:7f:1f:9c:42:27:01:c9:29:3a:40:14:da: ad:b6:43:29:fd:df:8e:e9:f9:b6:1d:b5:47:43:b4:7d:d4:0c: 17:b6:e4:35:62:0e:b1:17:a3:87:cc:82:13:b4:32:aa:b4:f2: cf:83:31:36:e5:2f:3b:17:5e:83:b4:c4:41:38:c2:b4:ee:0f: 07:0c:21:41:93:7b:88:52:3a:b7:8e:6f:40:8b:b7:8d:68:3e: 45:f3:8e:ec:3b:78:e0:a9:74:89:a6:79:73:64:53:73:10:7e: b9:7b:cd:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA1MTUwNzA3MDZaFw0yNTA1MjIwNzA3MDZaMBgxFjAUBgNV BAMTDTY4MjU5MjlhLTRiZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZkeUAUHWah8cTDmGBHsDV1+hh64AiAWZj4qP6F6HFV6nC2iQJZ6laaH7C9JDD LyWedx20ym/VPZt16P1EWRO+O9XnamATfLTMwnmejP6dLqQAHA8+gO+IZ/5WXaOj sWsCiIpXqHP+WtJmASPv+vU6fybn6ZYRgVPCUpP1v0HoVvLzmeAfWuqfJX3kBUa0 HaCzm8NpuRLheVI+IVVQNPGsA5ylTcK8VvIlxygVaC/VCoglk3DxPFQ82iTS7Gks ZU31+Ub2BPv00AbX8cwVPGln2HQJ/IEnnxB2xYEfIQbfy0eNghgJK/A8qJ8COA// TeAY3MZ91D0hj/47TKkHiJmhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDHqf8XwC 9xDMFyBR9MkyclIDbwAwHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RURFLzU5MDREOTcwRkI1QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1D SWFPWW5VZ29hRFlxSDhFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXaCqYhdpfwkt1xxX6gERmUqcH8Lj76zLm9fHcaq21cFKEabu36Fk7N W+dclaiEBlEmCnCeSMmSHlzj01b/aNXhiBUpXcQY+AQ6G+pRj54OC4xBJHF7tMS8 3K8ZGoQ3gUK7UTMQaGB2pBhfI1WwiDcvung5pdj6RIT8GOLijOSlD7wAjakuOHgi MF6XZBOOGlZobptj4H8fnEInAckpOkAU2q22Qyn9347p+bYdtUdDtH3UDBe25DVi DrEXo4fMghO0Mqq08s+DMTblLzsXXoO0xEE4wrTuDwcMIUGTe4hSOreOb0CLt41o PkXzjuw7eOCpdImmeXNkU3MQfrl7zcA= -----END CERTIFICATE-----Generated at Thu May 15 18:00:17 2025 by rpki-client