$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: RClRUpCjmlPCQPZ0XdkyiR8KdnjmcBBPsRe7vogvDYI= Subject key identifier: 64:FA:B3:E8:5C:BD:85:23:DA:66:A9:42:14:8C:76:03:CD:0D:E2:69 Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 042C Signing time: Thu 15 May 2025 00:26:14 +0000 Manifest this update: Thu 15 May 2025 00:26:13 +0000 Manifest next update: Thu 22 May 2025 00:26:13 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: i05JsAF+ps+2Y/A7A6um6+I4hXq2AWlsYoeVkmpzjYQ=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: May 15 00:26:13 2025 GMT Not After : May 22 00:26:13 2025 GMT Subject: CN=682534a5-cbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:7a:2f:b2:6f:76:1e:1a:4c:67:26:e5:8e: d5:75:33:06:b1:93:9c:6b:4a:58:8a:09:80:4b:dc: d2:77:d4:cf:8c:a1:28:ba:7b:be:07:74:42:be:ec: 08:a9:d0:3b:1f:9f:46:e2:1b:b5:a6:9d:02:f1:64: a7:36:7b:a8:7b:e3:c0:75:51:76:7d:de:33:08:04: 33:3a:b9:13:5f:33:e2:4d:99:bb:74:43:a5:25:a8: fa:1b:52:e2:74:ab:29:83:33:b8:76:b3:15:bd:c5: a0:75:4c:d2:de:5a:ff:48:46:5f:68:06:c4:d8:bf: f6:b2:aa:8c:e5:b8:6f:04:61:4f:a0:bc:67:35:ab: 43:fb:5f:38:01:84:b7:46:ea:95:25:4a:4c:93:69: 31:79:69:28:38:8a:eb:bf:3e:df:7a:97:91:52:ae: 6b:54:f8:ae:dd:c9:55:60:7d:e0:32:27:c3:1d:0d: 54:ef:fc:e3:ef:06:2e:f7:60:c2:4e:60:a7:08:7d: 63:62:92:3f:69:4b:17:5e:2f:f8:b5:d1:7e:31:0f: 1a:e3:71:5f:b0:90:34:01:1b:ed:bc:fe:6a:e4:34: de:d0:69:8b:c3:e5:94:1e:c7:ab:da:db:04:b7:0a: 54:af:48:2e:73:49:8a:36:f0:65:fa:7f:aa:d5:6b: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:B3:E8:5C:BD:85:23:DA:66:A9:42:14:8C:76:03:CD:0D:E2:69 X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:99:4d:f7:c4:28:2f:3e:f3:01:33:b3:9a:e6:e5:34:7f:82: fc:1a:2b:24:cc:cf:f1:d0:ab:4c:e6:0d:c8:52:90:00:7a:77: 82:00:de:54:af:db:a5:e3:b0:2d:8e:61:0d:61:c7:52:75:dc: 08:d7:9f:5d:6e:51:9e:b9:98:c5:2e:f9:73:a5:61:f2:27:58: e9:b7:09:02:61:6d:d4:7e:58:5b:13:ee:d9:ee:ac:6b:0d:40: 7d:6e:df:e1:00:6b:06:43:f9:5c:be:29:31:c7:42:e9:8d:19: 77:99:b9:48:ff:44:6d:f9:3d:8c:d2:d3:cf:77:41:c9:8a:26: e8:c0:85:40:3b:83:8c:41:44:8f:0f:1f:b6:5d:a2:87:b5:bd: a5:0f:d8:63:b4:21:9c:76:ea:73:06:67:84:47:b6:81:a9:e9: 98:09:eb:73:42:95:46:03:c8:56:49:ab:5d:5d:32:77:22:5f: da:38:23:13:50:a8:3f:67:c2:63:68:35:bd:41:9d:31:3c:41: 91:2d:f2:32:65:9e:01:5b:4b:3b:de:ec:f8:43:e7:37:55:c3: 9a:73:b4:84:14:a3:d6:b7:0a:90:07:1f:0a:f8:df:26:05:10: 28:23:7c:9f:c6:7f:24:7d:a1:f8:19:08:81:da:19:4c:6a:96: 6e:9f:c9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwNTE1MDAyNjEzWhcNMjUwNTIyMDAyNjEzWjAYMRYwFAYD VQQDEw02ODI1MzRhNS1jYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLp6L7Jvdh4aTGcm5Y7VdTMGsZOca0pYigmAS9zSd9TPjKEounu+B3RCvuwI qdA7H59G4hu1pp0C8WSnNnuoe+PAdVF2fd4zCAQzOrkTXzPiTZm7dEOlJaj6G1Li dKspgzO4drMVvcWgdUzS3lr/SEZfaAbE2L/2sqqM5bhvBGFPoLxnNatD+184AYS3 RuqVJUpMk2kxeWkoOIrrvz7fepeRUq5rVPiu3clVYH3gMifDHQ1U7/zj7wYu92DC TmCnCH1jYpI/aUsXXi/4tdF+MQ8a43FfsJA0ARvtvP5q5DTe0GmLw+WUHser2tsE twpUr0guc0mKNvBl+n+q1Ws4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT6s+hc vYUj2mapQhSMdgPNDeJpMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcmU33xCgvPvMBM7Oa5uU0f4L8GiskzM/x0KtM5g3IUpAAeneCAN5U r9ul47AtjmENYcdSddwI159dblGeuZjFLvlzpWHyJ1jptwkCYW3UflhbE+7Z7qxr DUB9bt/hAGsGQ/lcvikxx0LpjRl3mblI/0Rt+T2M0tPPd0HJiibowIVAO4OMQUSP Dx+2XaKHtb2lD9hjtCGcdupzBmeER7aBqemYCetzQpVGA8hWSatdXTJ3Il/aOCMT UKg/Z8JjaDW9QZ0xPEGRLfIyZZ4BW0s73uz4Q+c3VcOac7SEFKPWtwqQBx8K+N8m BRAoI3yfxn8kfaH4GQiB2hlMapZun8mF -----END CERTIFICATE-----Generated at Fri May 16 14:35:54 2025 by rpki-client