$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json) Hash identifier: 6FENlP16jFHxKtgPqKs0rtHh553VJ/9Ac5z8zgDfQGo= Subject key identifier: 80:34:AF:9B:B6:FB:17:9C:A8:1D:3C:27:AE:41:75:84:70:9C:A0:5E Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Certificate serial: 0E29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft Manifest number: 0E1F Signing time: Wed 14 May 2025 17:56:17 +0000 Manifest this update: Wed 14 May 2025 17:56:17 +0000 Manifest next update: Wed 21 May 2025 17:56:17 +0000 Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: fi2akpBXkUk3NRkNG7xW7kRTc4JQOuuIVXzDm4BzAtM=) 2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: XB0QLbbknxQIRTO38MXkPwNFVVbVpdhvXqbqZxANpFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3625 (0xe29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360 Validity Not Before: May 14 17:56:17 2025 GMT Not After : May 21 17:56:17 2025 GMT Subject: CN=6824d941-85c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:c5:0b:a0:96:5f:3e:c6:5d:eb:da:60:a4: 2b:1e:7e:a6:c4:c7:96:c8:02:53:f5:78:b2:bb:f1: 13:bd:93:5f:68:b4:73:a7:3c:a7:08:1b:78:75:ce: a8:35:38:4d:5d:3a:e4:aa:bd:2e:aa:22:6f:a1:9e: 43:f4:8f:36:cf:15:ef:fa:7e:01:14:7b:66:8b:58: 15:25:0e:e2:5f:06:32:e9:7a:75:75:ad:ef:39:6d: 0a:4e:a0:60:b2:02:0b:e5:b8:4b:b4:c1:6f:77:39: 2b:0d:ee:b4:35:b4:f0:9f:bb:2d:fd:54:df:6c:73: 60:be:0b:10:e4:19:fc:63:3c:2e:05:bf:84:b8:30: f7:33:9c:3c:26:2b:ea:78:a6:4c:48:06:02:0e:58: 2e:e6:d2:11:f5:e9:94:8a:f3:6f:96:6c:8a:26:76: 15:d6:11:2f:09:3e:3f:55:0e:88:61:6e:48:9e:30: 69:8e:3b:29:0e:48:81:71:0c:13:bd:f1:8d:f1:42: 33:4a:ae:cc:56:41:4b:45:2c:3b:33:53:80:73:28: e7:8e:69:4d:96:de:5d:38:d6:f5:12:4f:18:38:91: 26:19:36:66:72:80:17:c7:a4:c2:7a:36:af:b6:de: 35:27:40:4d:0a:2e:17:c0:4e:19:b8:d9:49:96:03: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:34:AF:9B:B6:FB:17:9C:A8:1D:3C:27:AE:41:75:84:70:9C:A0:5E X509v3 Authority Key Identifier: keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:2b:a6:00:35:9f:0d:36:4f:53:d4:aa:61:a3:45:3d:4c: 2d:99:0b:b3:c8:8f:35:2e:18:69:ba:71:d8:8a:f4:52:33:c7: bf:1d:39:92:92:85:78:b3:ab:83:67:3e:61:9a:43:2a:dc:75: 60:c2:ef:28:11:7e:f8:4a:53:7e:2e:9e:2e:ca:9e:79:4f:28: 52:2f:d4:ec:b8:59:02:d3:c9:68:32:3a:1a:d2:30:7d:9c:fa: 48:0a:1c:36:b7:81:40:be:c4:d2:7a:e1:3c:47:20:93:47:0b: 42:b7:e4:b4:e0:22:41:c3:15:87:93:4b:ce:51:79:64:71:e6: 28:4d:17:fe:b8:0a:86:30:17:40:a9:61:29:d1:b2:8c:ff:1c: 99:dc:e2:5e:92:82:07:fb:23:67:73:8b:95:51:11:93:9d:f1: 81:6d:7d:bb:7f:ee:8a:eb:47:75:de:d0:ed:48:0b:45:39:d5: 3f:58:71:93:33:ca:c7:00:43:a3:4c:1e:4d:86:20:db:38:5a: 19:b4:c4:3e:a1:dc:ca:7b:0f:09:b7:cd:d7:68:62:f0:d9:b2: a6:a6:4c:30:3e:13:fb:a8:96:ca:d1:f1:81:23:8f:3a:6d:e7: dc:8a:80:91:29:c1:82:08:87:fa:ce:6e:23:d7:2f:86:ba:5c: 45:b8:86:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKDFCQkIyOTdCQzgyODE2NkFBNDk3RDM3QzcyNjVCRkI2 MDFBRTAzNjAwHhcNMjUwNTE0MTc1NjE3WhcNMjUwNTIxMTc1NjE3WjAYMRYwFAYD VQQDEw02ODI0ZDk0MS04NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47jFC6CWXz7GXevaYKQrHn6mxMeWyAJT9Xiyu/ETvZNfaLRzpzynCBt4dc6o NThNXTrkqr0uqiJvoZ5D9I82zxXv+n4BFHtmi1gVJQ7iXwYy6Xp1da3vOW0KTqBg sgIL5bhLtMFvdzkrDe60NbTwn7st/VTfbHNgvgsQ5Bn8YzwuBb+EuDD3M5w8Jivq eKZMSAYCDlgu5tIR9emUivNvlmyKJnYV1hEvCT4/VQ6IYW5InjBpjjspDkiBcQwT vfGN8UIzSq7MVkFLRSw7M1OAcyjnjmlNlt5dONb1Ek8YOJEmGTZmcoAXx6TCejav tt41J0BNCi4XwE4ZuNlJlgPohwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIA0r5u2 +xecqB08J65BdYRwnKBeMB8GA1UdIwQYMBaAFBu7KXvIKBZqpJfTfHJlv7YBrgNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi83QzA2RTc5Q0E2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0ZtcWtsOU44Y21XX3RnR3VB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c3c3BlOGdvRm1xa2w5TjhjbVdfdGdHdUEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi83QzA2RTc5Q0E2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi9HN3NwZThnb0Zt cWtsOU44Y21XX3RnR3VBMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBHSumADWfDTZPU9SqYaNFPUwtmQuzyI81LhhpunHYivRSM8e/HTmS koV4s6uDZz5hmkMq3HVgwu8oEX74SlN+Lp4uyp55TyhSL9TsuFkC08loMjoa0jB9 nPpIChw2t4FAvsTSeuE8RyCTRwtCt+S04CJBwxWHk0vOUXlkceYoTRf+uAqGMBdA qWEp0bKM/xyZ3OJekoIH+yNnc4uVURGTnfGBbX27f+6K60d13tDtSAtFOdU/WHGT M8rHAEOjTB5NhiDbOFoZtMQ+odzKew8Jt83XaGLw2bKmpkwwPhP7qJbK0fGBI486 befcioCRKcGCCIf6zm4j1y+GulxFuIY1 -----END CERTIFICATE-----Generated at Thu May 15 10:15:39 2025 by rpki-client