$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: 0bYu3wd7GGcKRIYTI2Fqea9opaE5fWVMP0PLWkMjLhU= Subject key identifier: 4F:0F:C8:CB:DA:EF:70:E1:05:F2:92:EC:E0:9E:14:B6:B1:0D:35:C0 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 07D1 Signing time: Sat 10 May 2025 20:16:08 +0000 Manifest this update: Sat 10 May 2025 20:16:08 +0000 Manifest next update: Sat 17 May 2025 20:16:07 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: Dapjdj6vPqXXjrFlF/IYr/NaBFxkOgK031nWEMuvb3s=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: May 10 20:16:08 2025 GMT Not After : May 17 20:16:07 2025 GMT Subject: CN=681fb408-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:5c:eb:2a:42:ce:4d:61:f9:7a:bb:6f:0e: dd:5b:aa:fc:d9:38:d7:6e:ee:9e:65:6a:fd:60:c4: 06:03:26:66:38:c9:1d:4d:16:47:8c:40:c2:a9:ad: fe:bd:c2:83:83:0c:78:db:ba:dc:93:b4:27:a8:cb: 3d:dd:6a:cd:8f:c3:9c:c2:8e:15:c6:4c:14:6c:43: 63:ef:5d:98:3c:58:df:01:a9:6e:75:74:b7:b6:a5: eb:28:ce:87:a8:14:79:27:53:71:97:25:a9:15:19: c3:73:a4:0a:8e:73:b8:00:6c:2c:37:7c:b5:22:3a: da:18:6c:c5:12:85:88:7a:48:24:0a:cf:2c:05:cb: c2:1a:d6:f5:8c:b6:55:ce:ff:90:be:c1:7c:f6:6c: 89:45:5d:ba:21:5f:c4:30:1c:30:54:90:3e:84:27: 3f:12:0c:5b:89:24:0d:13:6e:8a:7d:f4:3e:a9:dd: fb:fa:50:4b:b4:fe:21:d7:ce:bf:82:e2:cc:20:3b: 78:65:fd:37:2a:30:c7:e5:d8:8b:c2:1d:50:93:99: 0a:1b:b7:70:c1:c1:14:60:26:35:55:8f:53:fa:73: 00:0a:33:28:c3:64:31:e4:c8:e0:aa:f4:79:64:f7: 83:8e:1c:38:6e:71:b7:6d:7e:26:f2:06:40:8f:c8: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:C8:CB:DA:EF:70:E1:05:F2:92:EC:E0:9E:14:B6:B1:0D:35:C0 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:52:dc:3c:4a:85:64:c7:76:58:52:f7:99:25:ab:8f:a0: ef:09:08:d1:e8:27:f3:f4:9a:c3:73:8c:98:a2:ac:3a:98:0c: a6:39:44:e6:d6:ff:47:7e:19:01:75:41:a9:48:b1:4d:57:0e: d0:19:73:e7:61:2f:8d:87:31:a7:fa:26:eb:84:3a:a2:39:45: b3:79:5d:75:6b:0c:5d:e3:71:d3:7f:ba:a7:3e:ce:b9:4c:8f: 1c:66:98:2d:33:14:a6:d8:ba:6e:82:fe:ee:65:4d:9c:c4:5e: 6c:74:94:36:5c:41:09:6f:1f:e0:7e:a9:53:76:bc:82:c2:17: 5c:37:b4:e5:cb:2c:46:c7:6a:50:fd:fb:09:c0:75:c4:8b:bb: 78:52:0e:ec:34:3a:89:8b:4c:56:07:ab:15:49:f6:19:39:ab: 68:c7:76:19:a5:58:aa:27:c7:53:62:36:07:39:e6:ea:bc:43: 94:3f:25:43:38:9d:3a:20:dd:be:c1:e7:49:7c:25:ea:5b:92: 12:7c:42:07:ef:c9:99:6a:4a:9a:11:fb:48:9e:a1:b9:0d:f8: 1e:6c:ec:f4:30:28:cf:06:c7:40:59:38:18:98:21:a2:60:e2: 67:0d:29:1b:b2:e4:4f:61:b2:e4:d0:96:c8:86:8a:6c:c8:a8: f0:ae:7d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwNTEwMjAxNjA4WhcNMjUwNTE3MjAxNjA3WjAYMRYwFAYD VQQDEw02ODFmYjQwOC1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFhc6ypCzk1h+Xq7bw7dW6r82TjXbu6eZWr9YMQGAyZmOMkdTRZHjEDCqa3+ vcKDgwx427rck7QnqMs93WrNj8Ocwo4VxkwUbENj712YPFjfAaludXS3tqXrKM6H qBR5J1NxlyWpFRnDc6QKjnO4AGwsN3y1IjraGGzFEoWIekgkCs8sBcvCGtb1jLZV zv+QvsF89myJRV26IV/EMBwwVJA+hCc/EgxbiSQNE26KffQ+qd37+lBLtP4h186/ guLMIDt4Zf03KjDH5diLwh1Qk5kKG7dwwcEUYCY1VY9T+nMACjMow2Qx5MjgqvR5 ZPeDjhw4bnG3bX4m8gZAj8hWUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8PyMva 73DhBfKS7OCeFLaxDTXAMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABa1LcPEqFZMd2WFL3mSWrj6DvCQjR6Cfz9JrDc4yYoqw6mAymOUTm 1v9HfhkBdUGpSLFNVw7QGXPnYS+NhzGn+ibrhDqiOUWzeV11awxd43HTf7qnPs65 TI8cZpgtMxSm2Lpugv7uZU2cxF5sdJQ2XEEJbx/gfqlTdryCwhdcN7TlyyxGx2pQ /fsJwHXEi7t4Ug7sNDqJi0xWB6sVSfYZOatox3YZpViqJ8dTYjYHOebqvEOUPyVD OJ06IN2+wedJfCXqW5ISfEIH78mZakqaEftInqG5DfgebOz0MCjPBsdAWTgYmCGi YOJnDSkbsuRPYbLk0JbIhopsyKjwrn24 -----END CERTIFICATE-----Generated at Mon May 12 11:39:15 2025 by rpki-client