$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft File: gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json) Hash identifier: 5GLn0jfzUISuVCjIQdgf6yyFLOIKkCIuMUARFG0qdoA= Subject key identifier: D8:E1:1B:E0:E7:39:7E:79:C6:3A:5D:F4:78:BB:90:55:C8:80:41:AB Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F Certificate issuer: /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft Manifest number: 69 Signing time: Tue 13 May 2025 06:11:19 +0000 Manifest this update: Tue 13 May 2025 06:11:18 +0000 Manifest next update: Tue 20 May 2025 06:11:18 +0000 Files and hashes: 1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: YwAcQVHUw11L+GtjVIFPD+G3fHnh7cylLIWoGgTNNNI=) 2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F Validity Not Before: May 13 06:11:18 2025 GMT Not After : May 20 06:11:18 2025 GMT Subject: CN=6822e287-e4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:0f:c4:66:f6:19:7a:f7:4b:7d:39:f1:ae: 9b:a7:7f:63:12:1c:2d:5d:92:d7:d7:b3:39:ec:16: 4e:62:80:de:4c:a4:f7:f7:a8:1a:78:d8:02:48:1e: 61:17:fe:5a:72:91:36:18:3a:9e:d8:85:c4:97:bf: 06:3e:3e:b1:52:77:5c:17:20:3f:a5:c2:33:c4:fd: 49:fe:e7:18:8e:9c:03:a7:47:17:83:80:b3:6b:b3: 7b:d5:ec:54:76:6b:02:da:f0:df:aa:61:bd:5e:df: ee:a0:8f:41:75:17:2e:79:93:be:55:6d:ab:7c:5b: 29:d9:a3:25:ac:7b:8c:31:6c:29:f7:77:c3:cf:c4: ab:b0:81:1a:ef:3d:8d:33:e5:c6:ed:a8:d1:3b:f1: 84:60:81:a0:98:72:57:c1:c5:03:ea:5e:47:aa:f4: 70:9a:6a:94:11:f4:1e:2e:14:27:56:df:1d:77:27: 94:0a:cd:b5:af:c3:8f:22:a5:54:18:2e:07:42:04: 6b:77:53:dc:8a:9e:6c:ec:b5:75:f5:b1:88:72:5e: 8d:ea:03:3a:5d:65:f0:94:1d:55:72:ba:3b:08:8f: 8e:fe:68:5f:ce:96:91:79:26:bc:74:51:cc:c9:a8: e9:84:68:98:e8:a6:5b:0a:4f:5a:5c:09:3f:7d:f0: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E1:1B:E0:E7:39:7E:79:C6:3A:5D:F4:78:BB:90:55:C8:80:41:AB X509v3 Authority Key Identifier: keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b6:8e:b7:c3:d2:f4:41:37:dc:47:0b:51:da:45:46:0c:2b: 67:52:71:69:8e:a1:e5:cc:b3:aa:4c:5c:29:99:49:39:05:fd: 20:8d:24:f0:93:9a:4d:14:be:15:64:60:f9:7b:04:ef:87:06: 0a:d3:bd:37:ff:21:fb:bf:25:6d:ce:21:ec:99:17:9b:5f:59: 7b:c7:ab:59:ae:10:dc:13:62:b3:2c:05:14:1d:29:d6:98:bb: 2a:6f:0e:fd:6c:79:8b:d9:c2:9a:d3:67:ac:e8:1d:5c:3d:5d: e5:c2:71:ca:5c:86:1f:64:2f:3d:b2:06:8a:13:86:91:21:83: 8a:29:45:65:97:80:f3:53:74:49:4e:2e:1b:2e:a8:cc:77:86: 82:ff:3d:f8:b7:21:a1:72:f9:02:01:0f:dd:5c:65:76:9c:70: 5f:a5:02:58:e8:5b:d9:5d:55:2b:9b:f3:67:25:a4:00:43:d1: d9:f5:d1:99:aa:09:0f:f9:44:c3:6f:ef:14:17:ef:b1:b9:17: 2b:41:c2:a9:f4:ca:b9:53:04:2d:3c:a3:6b:d7:af:9f:7b:90: 46:0b:ed:0c:69:2a:62:8c:6a:d1:f9:48:f3:59:9b:bf:6f:b3: a1:b6:8e:2e:a2:a7:78:25:a1:06:c0:c0:85:cf:ac:76:61:79: 6e:d5:00:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEU3MDExMC8GA1UEBRMoODFDMjZGM0Q4RjQxMzZFNTE5MENDN0ExN0Q2QUY3MjI0 MjJFQjY2RjAeFw0yNTA1MTMwNjExMThaFw0yNTA1MjAwNjExMThaMBgxFjAUBgNV BAMTDTY4MjJlMjg3LWU0YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2QQ/EZvYZevdLfTnxrpunf2MSHC1dktfXsznsFk5igN5MpPf3qBp42AJIHmEX /lpykTYYOp7YhcSXvwY+PrFSd1wXID+lwjPE/Un+5xiOnAOnRxeDgLNrs3vV7FR2 awLa8N+qYb1e3+6gj0F1Fy55k75Vbat8WynZoyWse4wxbCn3d8PPxKuwgRrvPY0z 5cbtqNE78YRggaCYclfBxQPqXkeq9HCaapQR9B4uFCdW3x13J5QKzbWvw48ipVQY LgdCBGt3U9yKnmzstXX1sYhyXo3qAzpdZfCUHVVyujsIj47+aF/OlpF5Jrx0UczJ qOmEaJjoplsKT1pcCT998CSRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2OEb4Oc5 fnnGOl30eLuQVciAQaswHwYDVR0jBBgwFoAUgcJvPY9BNuUZDMehfWr3IkIutm8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RTcwLzJEOTk3MEQ4OTU1 QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2NKdlBZOUJOdVVaRE1laGZXcjNJa0l1dG04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 RTcwLzJEOTk3MEQ4OTU1QTExRUZCRDlFMDI0QUM0RjlBRTAyL2djSnZQWTlCTnVV WkRNZWhmV3IzSWtJdXRtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF62jrfD0vRBN9xHC1HaRUYMK2dScWmOoeXMs6pMXCmZSTkF/SCNJPCT mk0UvhVkYPl7BO+HBgrTvTf/Ifu/JW3OIeyZF5tfWXvHq1muENwTYrMsBRQdKdaY uypvDv1seYvZwprTZ6zoHVw9XeXCccpchh9kLz2yBooThpEhg4opRWWXgPNTdElO LhsuqMx3hoL/Pfi3IaFy+QIBD91cZXaccF+lAljoW9ldVSub82clpABD0dn10Zmq CQ/5RMNv7xQX77G5FytBwqn0yrlTBC08o2vXr597kEYL7QxpKmKMatH5SPNZm79v s6G2ji6ip3gloQbAwIXPrHZheW7VADM= -----END CERTIFICATE-----Generated at Wed May 14 12:56:55 2025 by rpki-client