$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft File: gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json) Hash identifier: 4bUH4Isb7krmrbXU6/OCz+Rhk42s6DyTj/70o/YLKVY= Subject key identifier: 28:0D:19:DC:E5:60:98:36:7D:0D:35:D4:DE:63:5E:EB:CC:CF:CC:82 Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft Manifest number: 02AB Signing time: Mon 05 May 2025 01:05:43 +0000 Manifest this update: Mon 05 May 2025 01:05:42 +0000 Manifest next update: Mon 12 May 2025 01:05:42 +0000 Files and hashes: 1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: jx1bWtxYZaTRcWDR8ve9AHn6jSn8hwUaWzAFmjti5gE=) 2: 3785A958EF4711EF906AD167C4F9AE02.roa (hash: Xop4pF7LmPiWj4qFmNK9jXxRuc+SVOdI5Rsywj/dhPQ=) 3: 464B4494F7D911EF8EA69265C4F9AE02.roa (hash: kw7ZHY1axLvj55a+YPxHpHPEy1diN3j6tF6SRdvVlY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Validity Not Before: May 5 01:05:42 2025 GMT Not After : May 12 01:05:42 2025 GMT Subject: CN=68180ee7-f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:38:9d:74:eb:d1:ba:99:23:1c:45:21:bf: 1f:4b:dd:78:9d:b5:81:43:6c:00:da:18:94:84:fc: 39:10:a9:4b:72:8e:d0:ad:ed:b1:a0:db:16:ef:81: fb:0b:79:d0:d4:06:3d:a3:5b:23:c9:b7:66:a7:d4: 0b:3b:69:91:b8:59:3c:c6:d4:76:d4:b8:14:fe:c1: d2:e0:d6:fe:2e:58:2c:51:06:34:8a:57:aa:37:d3: f4:fc:48:8b:d9:2a:ea:64:94:5e:8f:5b:ae:7f:b6: e4:53:6b:cc:aa:d7:21:a2:a5:a0:6a:db:d9:ae:65: f5:6e:33:ba:f2:2c:88:e4:1b:da:04:c2:40:7f:bc: a4:50:6f:f1:ed:a7:7f:7d:7a:24:c7:7e:f7:ab:24: f1:80:46:7c:d9:b2:7a:be:c7:b5:a4:4f:f5:b6:3c: 8a:d7:de:aa:8f:ce:11:df:cd:ff:4e:87:ba:95:db: 21:d7:13:ea:dd:a8:61:f0:7b:16:fc:79:01:27:e5: 30:01:ed:64:3a:3f:c2:36:55:8d:3f:fd:89:31:30: 33:eb:fd:2e:90:14:59:c3:e7:47:4e:2a:7e:f6:c4: 4d:df:3c:34:94:99:e4:c2:45:bf:b9:99:c3:a3:6b: e0:35:77:6a:77:f3:1c:33:db:29:e0:e4:cf:46:28: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0D:19:DC:E5:60:98:36:7D:0D:35:D4:DE:63:5E:EB:CC:CF:CC:82 X509v3 Authority Key Identifier: keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:73:0b:da:27:34:7e:4d:0f:18:ae:7b:34:8d:ff:1c:0d:e6: de:c8:30:ad:bf:a4:35:5f:0c:0f:3f:32:c2:65:e2:aa:3e:f3: 9f:d0:31:16:b7:89:20:50:6d:ab:4d:dc:e8:8c:ee:8b:86:d0: 35:b6:12:60:23:1c:97:7f:87:8a:ec:8e:88:33:5f:66:f8:ed: 3b:db:d2:43:33:5c:e3:6c:d9:c7:56:81:20:a6:1a:33:59:26: ee:7a:bb:51:15:e6:07:96:27:d9:d3:4f:d9:0e:30:66:26:ca: 23:0e:0b:8a:a4:b5:d2:fb:e9:e3:5d:f2:53:58:64:65:65:44: 96:d5:cf:c6:6c:1f:ac:d7:18:17:b3:43:09:b1:ef:5a:80:81: ab:3b:9d:f9:07:fb:04:44:bf:7e:f6:c1:2a:e3:45:b7:7f:eb: 8f:d9:40:26:8c:23:bf:b0:f9:44:a9:20:96:13:db:cc:3f:6c: f6:4d:eb:1a:4a:c6:b0:7f:ba:ef:2d:44:c5:bc:51:d7:e6:52: 68:91:23:79:ea:3d:e7:7b:85:89:09:69:c6:cf:ef:c7:03:ae: 46:75:48:4e:42:42:64:d4:a6:56:5c:5e:db:80:b9:f6:38:36: 86:74:8c:7b:dd:72:d6:7e:b2:14:49:bf:f7:fd:ca:cc:de:50: 2d:dd:1e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0RjczQUVDRkEwOTU5 MEQxRjQxNEMwHhcNMjUwNTA1MDEwNTQyWhcNMjUwNTEyMDEwNTQyWjAYMRYwFAYD VQQDEw02ODE4MGVlNy1mM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd44nXTr0bqZIxxFIb8fS914nbWBQ2wA2hiUhPw5EKlLco7Qre2xoNsW74H7 C3nQ1AY9o1sjybdmp9QLO2mRuFk8xtR21LgU/sHS4Nb+LlgsUQY0ileqN9P0/EiL 2SrqZJRej1uuf7bkU2vMqtchoqWgatvZrmX1bjO68iyI5BvaBMJAf7ykUG/x7ad/ fXokx373qyTxgEZ82bJ6vse1pE/1tjyK196qj84R383/Toe6ldsh1xPq3ahh8HsW /HkBJ+UwAe1kOj/CNlWNP/2JMTAz6/0ukBRZw+dHTip+9sRN3zw0lJnkwkW/uZnD o2vgNXdqd/McM9sp4OTPRigmPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgNGdzl YJg2fQ011N5jXuvMz8yCMB8GA1UdIwQYMBaAFIGjjIsJZnIl7gT3Ouz6CVkNH0FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM1Ri9FQzM0NzQyQ0Y5 MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNpWHVCUGM2N1BvSldRMGZR VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhT01pd2xtY2lYdUJQYzY3UG9KV1EwZlFVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM1Ri9FQzM0NzQyQ0Y5MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNp WHVCUGM2N1BvSldRMGZRVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCccwvaJzR+TQ8Yrns0jf8cDebeyDCtv6Q1XwwPPzLCZeKqPvOf0DEW t4kgUG2rTdzojO6LhtA1thJgIxyXf4eK7I6IM19m+O0729JDM1zjbNnHVoEgphoz WSbuertRFeYHlifZ00/ZDjBmJsojDguKpLXS++njXfJTWGRlZUSW1c/GbB+s1xgX s0MJse9agIGrO535B/sERL9+9sEq40W3f+uP2UAmjCO/sPlEqSCWE9vMP2z2Tesa Ssawf7rvLUTFvFHX5lJokSN56j3ne4WJCWnGz+/HA65GdUhOQkJk1KZWXF7bgLn2 ODaGdIx73XLWfrIUSb/3/crM3lAt3R71 -----END CERTIFICATE-----Generated at Mon May 5 03:13:59 2025 by rpki-client