$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: 4hxFXdvzzSW9b3msTDbI3+B4Im5D4bEaADlsQOIyk5c= Subject key identifier: 8F:5F:2D:C1:4E:96:C4:EE:9C:1D:B6:B1:9E:97:AF:05:4F:FC:70:88 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 0207 Signing time: Sun 11 May 2025 01:33:49 +0000 Manifest this update: Sun 11 May 2025 01:33:49 +0000 Manifest next update: Sun 18 May 2025 01:33:49 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: BLEYs1Ga7/R+fjxmmg+K3JBWRUyh18KotIbb0uhNRqQ=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: May 11 01:33:49 2025 GMT Not After : May 18 01:33:49 2025 GMT Subject: CN=681ffe7d-4458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:2a:e8:fb:f5:2f:e4:4f:97:d0:a5:34:83: 05:2a:fb:6c:a5:ca:01:16:33:fc:a9:1c:e0:6c:21: fb:ac:4e:c4:d9:8a:63:69:ec:67:5b:36:1b:eb:7c: d5:eb:e7:61:5c:4b:c2:aa:ec:da:e0:5b:e1:32:73: 56:3b:e4:33:84:5d:a8:4d:2a:e3:8a:10:21:93:ef: 09:b9:c9:4a:e4:c3:21:e8:1b:a7:72:cb:70:e5:3e: 5a:98:18:fd:83:6d:81:0d:ae:12:45:fd:0e:e6:9e: 0f:3e:44:6d:51:e3:d9:a4:99:70:44:e5:34:b8:fe: 88:b8:4e:2e:83:f7:e8:8d:90:e8:e8:92:4c:e8:b1: 63:5d:45:18:98:d3:2d:88:0b:fc:96:af:37:f9:96: ab:65:57:c9:32:46:1e:1f:de:66:a9:03:26:0f:f8: b3:36:9f:e5:cd:63:80:03:08:6d:a9:c8:53:03:33: 1b:1c:53:c6:ba:56:2e:93:be:cd:0c:23:79:7e:38: 2f:6a:15:10:8a:0b:fd:50:3c:04:4c:fa:c8:fc:ab: e1:a0:36:97:32:d6:67:79:d5:90:cb:23:08:16:7b: 9b:67:cd:b7:1f:50:7a:a1:5c:8d:02:74:6a:61:6e: 6d:69:18:b2:c6:f7:6e:fa:64:c8:0f:38:7f:fe:f4: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5F:2D:C1:4E:96:C4:EE:9C:1D:B6:B1:9E:97:AF:05:4F:FC:70:88 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:34:49:76:78:99:d8:fe:28:cd:62:d8:0b:69:34:d1:3a:49: c3:b7:77:8f:30:62:74:3c:d7:cc:d3:f4:f1:20:86:22:ec:58: 49:a9:59:64:6d:07:68:f8:73:5f:8c:bc:2d:fa:81:08:35:fe: d4:41:db:95:01:a4:3d:d8:69:1d:7e:85:36:54:f6:44:1b:9f: ad:b5:fa:23:89:8b:2e:f9:f3:d1:21:03:86:b6:fd:e8:93:9c: da:24:a0:ed:0f:39:97:9e:3d:9e:1c:b2:cd:79:df:18:c4:fb: 20:c4:bb:22:30:1e:c8:d2:29:6c:da:3b:ec:a8:58:95:90:8b: 12:56:bb:61:36:34:0a:54:7b:90:90:e1:f4:2d:2d:b2:0b:50: a7:b0:ee:b2:dc:61:14:14:0a:d7:f6:fb:03:3a:61:7e:07:58: 81:32:50:8c:aa:94:5e:84:57:b3:22:24:8b:a1:98:89:48:26: ab:9e:80:46:30:5a:4c:f7:3e:f3:e1:6c:5b:f5:a6:93:62:31: 8a:b3:a0:0f:22:e9:99:52:c0:47:d5:0c:d2:22:c6:c5:d8:73: 22:57:3a:de:f7:a5:0a:03:9b:7d:03:f2:8b:eb:38:23:ee:eb: f1:40:2b:fa:87:ed:47:93:8a:29:61:72:d3:94:5d:1a:57:7b: 53:0d:2b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUwNTExMDEzMzQ5WhcNMjUwNTE4MDEzMzQ5WjAYMRYwFAYD VQQDEw02ODFmZmU3ZC00NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRAq6Pv1L+RPl9ClNIMFKvtspcoBFjP8qRzgbCH7rE7E2YpjaexnWzYb63zV 6+dhXEvCquza4FvhMnNWO+QzhF2oTSrjihAhk+8JuclK5MMh6Buncstw5T5amBj9 g22BDa4SRf0O5p4PPkRtUePZpJlwROU0uP6IuE4ug/fojZDo6JJM6LFjXUUYmNMt iAv8lq83+ZarZVfJMkYeH95mqQMmD/izNp/lzWOAAwhtqchTAzMbHFPGulYuk77N DCN5fjgvahUQigv9UDwETPrI/KvhoDaXMtZnedWQyyMIFnubZ823H1B6oVyNAnRq YW5taRiyxvdu+mTIDzh//vTIXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9fLcFO lsTunB22sZ6XrwVP/HCIMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgNEl2eJnY/ijNYtgLaTTROknDt3ePMGJ0PNfM0/TxIIYi7FhJqVlk bQdo+HNfjLwt+oEINf7UQduVAaQ92GkdfoU2VPZEG5+ttfojiYsu+fPRIQOGtv3o k5zaJKDtDzmXnj2eHLLNed8YxPsgxLsiMB7I0ils2jvsqFiVkIsSVrthNjQKVHuQ kOH0LS2yC1CnsO6y3GEUFArX9vsDOmF+B1iBMlCMqpRehFezIiSLoZiJSCarnoBG MFpM9z7z4Wxb9aaTYjGKs6APIumZUsBH1QzSIsbF2HMiVzre96UKA5t9A/KL6zgj 7uvxQCv6h+1Hk4opYXLTlF0aV3tTDSvM -----END CERTIFICATE-----Generated at Mon May 12 22:07:15 2025 by rpki-client