$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: tMSo1qvm1J0Q5At4NxWLACEltKbfOMWTNVQeMgR6jDk= Subject key identifier: 71:5E:A1:F1:3F:07:E9:6D:9B:2A:B0:18:5F:D6:B3:F3:1F:B9:78:ED Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 02EB Signing time: Sat 03 May 2025 01:24:48 +0000 Manifest this update: Sat 03 May 2025 01:24:48 +0000 Manifest next update: Sat 10 May 2025 01:24:48 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: ZrfX2fQJwhfNd3yLHJa/iUAGVIXKMSjUKcsZz7D25j0=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 01:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: May 3 01:24:48 2025 GMT Not After : May 10 01:24:48 2025 GMT Subject: CN=68157060-cdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:0a:f2:e8:4e:54:5e:6c:70:f8:4d:6b:12: aa:33:79:2a:c4:96:d2:17:87:aa:50:d0:eb:48:a6: 70:70:59:1a:8e:e1:14:63:30:0b:1e:70:8c:ce:a5: ca:c3:33:18:c8:de:ed:8d:32:ff:c5:e2:29:9a:b2: 6e:f6:9a:30:98:2d:09:fd:09:de:19:75:d0:13:64: 59:a9:1a:db:93:b9:f5:a8:48:ff:7f:34:80:89:dd: 77:8d:8a:1f:ce:a2:bf:c3:fa:4f:31:d9:5b:2d:36: 40:2e:f4:c8:6b:33:db:04:ee:39:50:74:3e:75:51: d0:93:8d:3b:90:44:df:d5:4e:e2:71:0c:db:ed:6f: d3:d2:6d:8b:f2:1d:3d:f6:4a:19:cb:e6:92:03:ac: 79:2c:7a:e2:7d:66:59:52:95:aa:65:e4:8f:d6:b7: 93:32:66:2b:ad:6d:2c:60:9a:cb:9f:95:1b:35:dd: ae:37:73:02:46:cc:c9:67:56:b9:96:d3:e0:04:9c: 66:bd:c5:43:55:9e:cd:80:58:09:1e:84:75:62:d1: 73:f9:4c:9f:31:1d:5c:56:c1:d2:5e:4e:e9:16:7e: 27:14:a4:cb:80:ae:60:87:cb:5b:04:0a:bd:1b:98: 6f:fb:01:34:9b:f4:b6:66:3d:16:c2:c5:2e:75:3f: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:A1:F1:3F:07:E9:6D:9B:2A:B0:18:5F:D6:B3:F3:1F:B9:78:ED X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:03:bb:2c:a4:db:61:c2:9b:10:06:f3:6a:ec:3b:88:7c: d4:01:d0:68:93:c9:b2:a0:16:31:d9:36:6e:58:16:5d:5a:1a: b0:1f:d6:17:6d:39:a5:1d:e1:c8:16:a3:84:0f:c2:d6:07:3a: 24:c9:7c:f7:9a:79:ba:23:75:14:53:ef:8e:a1:aa:c3:a6:a0: af:6e:34:b4:ae:86:e6:6d:de:79:d6:79:b4:51:24:4c:c4:63: 5c:26:d3:be:d2:87:f1:f7:ce:4b:6e:8f:12:02:96:2b:a1:ea: 79:18:86:3b:a8:c0:21:91:bc:f9:5d:fb:4e:dd:c0:17:a4:26: 0d:34:d9:ca:5e:b9:ee:1e:d3:a1:45:39:9f:fd:2c:03:fd:ce: 55:f7:c1:b5:4f:5e:b7:bd:fd:a2:96:be:00:da:49:ba:f0:d5: 3a:15:09:94:d6:7a:2f:ce:4f:5e:33:e4:5e:93:12:ec:4e:31: 79:64:bb:f9:2b:06:11:23:02:cb:e6:49:47:55:b9:db:9e:47: 15:e0:d7:a8:92:3c:2d:ef:52:2b:2d:9b:91:4e:0a:f3:f7:04: 15:ed:8e:16:f7:61:0a:73:53:e7:50:3a:b7:e2:e0:a2:53:1c: 11:a4:2d:af:75:65:b1:10:53:3f:06:aa:86:79:b9:d5:90:b5: e6:17:9b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUwNTAzMDEyNDQ4WhcNMjUwNTEwMDEyNDQ4WjAYMRYwFAYD VQQDEw02ODE1NzA2MC1jZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXsK8uhOVF5scPhNaxKqM3kqxJbSF4eqUNDrSKZwcFkajuEUYzALHnCMzqXK wzMYyN7tjTL/xeIpmrJu9powmC0J/QneGXXQE2RZqRrbk7n1qEj/fzSAid13jYof zqK/w/pPMdlbLTZALvTIazPbBO45UHQ+dVHQk407kETf1U7icQzb7W/T0m2L8h09 9koZy+aSA6x5LHrifWZZUpWqZeSP1reTMmYrrW0sYJrLn5UbNd2uN3MCRszJZ1a5 ltPgBJxmvcVDVZ7NgFgJHoR1YtFz+UyfMR1cVsHSXk7pFn4nFKTLgK5gh8tbBAq9 G5hv+wE0m/S2Zj0WwsUudT9JMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFeofE/ B+ltmyqwGF/Ws/MfuXjtMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZqgO7LKTbYcKbEAbzauw7iHzUAdBok8myoBYx2TZuWBZdWhqwH9YX bTmlHeHIFqOED8LWBzokyXz3mnm6I3UUU++OoarDpqCvbjS0robmbd551nm0USRM xGNcJtO+0ofx985Lbo8SApYroep5GIY7qMAhkbz5XftO3cAXpCYNNNnKXrnuHtOh RTmf/SwD/c5V98G1T163vf2ilr4A2km68NU6FQmU1novzk9eM+RekxLsTjF5ZLv5 KwYRIwLL5klHVbnbnkcV4Neokjwt71IrLZuRTgrz9wQV7Y4W92EKc1PnUDq34uCi UxwRpC2vdWWxEFM/BqqGebnVkLXmF5tT -----END CERTIFICATE-----Generated at Mon May 5 02:14:39 2025 by rpki-client