$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json) Hash identifier: P+OAj/19MxNJaGc+nmbu3ecOJVqDhthaF1zSQgjJeX0= Subject key identifier: E2:79:10:17:A5:9C:A7:D2:8D:62:DE:1B:48:47:A4:72:83:4C:19:BB Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Certificate issuer: /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft Manifest number: 8E Signing time: Tue 13 May 2025 05:37:26 +0000 Manifest this update: Tue 13 May 2025 05:37:26 +0000 Manifest next update: Tue 20 May 2025 05:37:26 +0000 Files and hashes: 1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: nSmfqbMyt+KcM2BwRm9wShmFjzdtY/BsyIPFFqF3wxI=) 2: 5221650C5ADE11EFBE0B0841C4F9AE02.roa (hash: DfXJNnGu5R78q4knIp+T6nbwy/V4l/65/i/LBotIC/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Validity Not Before: May 13 05:37:26 2025 GMT Not After : May 20 05:37:26 2025 GMT Subject: CN=6822da96-a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:06:e9:dc:ae:dd:e1:dd:b8:26:a1:75:d9: e2:3e:a3:54:18:52:9b:cb:47:68:aa:6d:5d:7a:83: 61:cf:c3:44:8c:90:ef:d2:68:4f:cb:cb:7e:e3:1f: db:9c:b5:ce:5c:8b:8b:3c:d9:82:d0:46:32:d1:ab: 2d:70:75:a6:da:cb:39:0a:7e:1e:1d:3d:75:c5:0b: d4:91:61:9e:81:ca:e9:8b:f5:1c:0d:7d:19:23:fd: 19:82:35:1c:b5:20:02:d5:70:eb:fe:be:93:eb:07: 2e:2a:54:c2:08:42:1b:74:a4:fa:7a:6b:1b:7b:53: 0c:2d:17:1e:de:ef:fc:86:3d:ac:7c:0e:ae:3d:4c: 66:e2:04:9b:45:da:71:c7:98:b3:90:bb:2f:2f:cc: c7:57:41:f5:cb:94:fc:1d:a7:c9:0f:89:be:8e:96: e8:f8:e2:ab:4d:d2:85:02:a9:17:17:d5:8c:06:45: b7:16:f0:3d:1a:86:a4:9f:6f:7b:11:b7:e7:bd:6b: 51:62:d9:a0:23:0f:f9:00:43:44:1e:d1:3a:88:26: 7c:4a:81:cf:c6:5b:33:53:17:fe:41:57:11:ce:82: a7:ab:91:d6:f0:54:dd:f0:47:40:24:0f:66:e0:87: 41:1c:48:9e:12:ee:b0:41:f1:55:54:0d:4d:24:51: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:79:10:17:A5:9C:A7:D2:8D:62:DE:1B:48:47:A4:72:83:4C:19:BB X509v3 Authority Key Identifier: keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f9:03:c7:38:21:b4:20:dc:c1:3f:e6:94:ac:ad:9e:4a:ea: bf:1c:2f:5e:2d:7e:58:4a:04:08:72:ef:4b:63:1f:c6:98:35: ac:03:d4:8e:b6:46:38:4e:55:b7:db:2b:6a:e4:a2:8f:6b:25: b6:8d:17:a7:9a:b9:d3:7a:e4:bd:d8:81:c9:20:56:fe:67:f7: 4c:da:9f:c3:7e:54:14:46:5f:5c:86:c0:31:07:90:4d:63:f3: ce:e6:0a:c5:d7:27:b3:03:17:74:82:f6:b9:c2:a5:ce:3a:3e: 84:7d:eb:f8:09:7c:b3:bb:46:e1:d1:fa:3b:88:35:34:00:4e: 4a:ad:6a:a2:c7:05:fc:85:0b:a9:a2:bd:5e:ea:f3:31:3f:74: 25:29:fe:ba:10:09:43:2f:04:ba:67:2a:bf:18:e8:9c:6e:2e: ac:80:54:6d:a3:6a:ac:31:8e:28:5d:0a:ff:48:63:d4:f2:c1: 42:64:5a:68:31:b1:eb:1c:7f:bd:c8:9f:13:ff:47:b6:04:26: 02:d8:e8:a0:9a:66:0d:18:21:d3:dd:22:31:dc:aa:ef:e4:ed: 2f:13:d7:a4:78:13:e3:5b:9b:fe:e9:ba:73:05:e8:4f:6a:13: ac:33:ec:27:6b:09:50:0b:f4:05:50:ed:96:e0:2a:39:d0:83: 80:ea:11:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZGNkJBMEI2RUQ2 Q0M0MUUxMEIwHhcNMjUwNTEzMDUzNzI2WhcNMjUwNTIwMDUzNzI2WjAYMRYwFAYD VQQDEw02ODIyZGE5Ni1hMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk4G6dyu3eHduCahddniPqNUGFKby0doqm1deoNhz8NEjJDv0mhPy8t+4x/b nLXOXIuLPNmC0EYy0astcHWm2ss5Cn4eHT11xQvUkWGegcrpi/UcDX0ZI/0ZgjUc tSAC1XDr/r6T6wcuKlTCCEIbdKT6emsbe1MMLRce3u/8hj2sfA6uPUxm4gSbRdpx x5izkLsvL8zHV0H1y5T8HafJD4m+jpbo+OKrTdKFAqkXF9WMBkW3FvA9Goakn297 EbfnvWtRYtmgIw/5AENEHtE6iCZ8SoHPxlszUxf+QVcRzoKnq5HW8FTd8EdAJA9m 4IdBHEieEu6wQfFVVA1NJFEZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ5EBel nKfSjWLeG0hHpHKDTBm7MB8GA1UdIwQYMBaAFIGZSTrSZa0txzOW9roLbtbMQeEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREMzMi8wRjA5Mjg1NDVB REUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJTM0hNNWIydWd0dTFzeEI0 UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dabEpPdEpsclMzSE01YjJ1Z3R1MXN4QjRRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RKbHJT M0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+QPHOCG0INzBP+aUrK2eSuq/HC9eLX5YSgQIcu9LYx/GmDWsA9SO tkY4TlW32ytq5KKPayW2jRenmrnTeuS92IHJIFb+Z/dM2p/DflQURl9chsAxB5BN Y/PO5grF1yezAxd0gva5wqXOOj6Efev4CXyzu0bh0fo7iDU0AE5KrWqixwX8hQup or1e6vMxP3QlKf66EAlDLwS6Zyq/GOicbi6sgFRto2qsMY4oXQr/SGPU8sFCZFpo MbHrHH+9yJ8T/0e2BCYC2OigmmYNGCHT3SIx3Krv5O0vE9ekeBPjW5v+6bpzBehP ahOsM+wnawlQC/QFUO2W4Co50IOA6hHg -----END CERTIFICATE-----Generated at Wed May 14 16:20:48 2025 by rpki-client