$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft File: GwdUmyUM_APdrXtURD2oOIkYEco.mft (raw, json) Hash identifier: IkbzPJFpOtD/+3YVs6R4uj1lU8scSHPDWVGkvrFTNKg= Subject key identifier: DB:26:BB:C9:AE:63:69:40:1A:ED:3C:0A:EC:9F:34:6A:BD:45:72:7F Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA Certificate issuer: /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft Manifest number: 69 Signing time: Tue 13 May 2025 06:03:36 +0000 Manifest this update: Tue 13 May 2025 06:03:35 +0000 Manifest next update: Tue 20 May 2025 06:03:35 +0000 Files and hashes: 1: GwdUmyUM_APdrXtURD2oOIkYEco.crl (hash: woYDOGIa2W02dViFfV4NRKH6q/UHJNW631o2vcy3YJI=) 2: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (hash: dMptlIu2hEGUJL7wHDTpb5B0NGrE6jX2dVguRw6q6C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA Validity Not Before: May 13 06:03:35 2025 GMT Not After : May 20 06:03:35 2025 GMT Subject: CN=6822e0b7-427f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:7e:c9:23:39:3c:d4:29:94:e3:aa:69:fa: 36:0e:53:46:bc:c3:03:56:e1:5b:fe:e2:9e:5e:d7: e6:e7:50:3e:da:8f:00:75:da:6c:0a:ca:68:a1:44: 05:44:f2:6f:e5:71:89:d1:8d:61:fa:99:63:4f:c9: d6:52:d2:b7:04:1e:1a:7a:9b:35:c3:8f:94:5f:7a: 72:df:46:24:70:c0:0f:c1:c2:32:1f:85:cf:52:14: 9e:ac:3f:04:28:95:32:69:9e:20:fb:e2:80:d3:dc: a7:36:84:55:8d:f5:a1:c8:1f:df:e9:5e:4f:66:aa: 86:85:7a:44:d7:10:19:55:76:21:7e:58:ad:7a:79: 3a:55:81:3d:55:1a:93:33:01:4b:f2:b9:5c:b9:00: bb:25:61:84:5a:4e:19:fd:b0:3b:68:13:47:07:19: f0:40:1b:ed:cf:75:e4:79:27:9a:8d:e8:3a:9f:4e: 31:91:3e:a8:9c:5b:f4:73:49:e3:b8:40:aa:2e:6a: d8:22:48:f5:ed:ad:fd:98:07:8c:e9:67:d5:30:c9: 79:e8:85:a0:29:9f:1c:7b:b9:92:9b:ef:e2:27:f4: eb:bd:2f:9c:b2:ce:96:25:72:b2:87:e2:dc:ad:e8: 50:34:ed:20:3a:e6:6b:fa:93:ed:e5:e7:29:87:3d: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:BB:C9:AE:63:69:40:1A:ED:3C:0A:EC:9F:34:6A:BD:45:72:7F X509v3 Authority Key Identifier: keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:43:f4:62:0d:88:ad:e3:25:24:66:88:67:bd:7e:7d:51:10: 7e:02:f8:d5:4f:42:cb:92:72:5c:53:01:01:e6:5e:2d:62:b0: cc:be:cf:38:8b:48:46:5e:e4:2c:c1:45:17:eb:ed:4a:13:46: 8b:cc:b0:e8:5b:f7:2c:91:fb:90:2a:3f:2a:70:ad:64:c2:95: 89:5c:e8:3b:4a:f6:d5:14:f0:1c:1b:88:7b:a9:1c:3a:08:53: 91:cf:94:8a:56:ed:6d:68:e3:cb:8e:ea:79:e2:7d:10:fb:e0: 59:a8:d2:ff:1d:fc:02:28:46:a1:75:1c:1e:bc:86:d2:ff:2a: fb:da:a8:8a:8e:b6:de:d1:2b:f8:6f:57:5d:f0:8a:53:cf:e8: f3:33:36:9c:fe:3e:3f:36:0f:56:d1:8b:6a:fd:56:6d:61:fe: 4f:ce:c6:e5:66:15:e6:7a:55:0e:5a:81:0d:3b:6e:27:c4:94: 8e:6e:f6:3b:e4:df:1a:2e:24:a4:58:a1:d7:b4:66:13:1d:99: bf:b5:61:55:84:47:1b:92:a0:d7:0d:3a:12:94:c9:d0:49:43: 9e:cf:18:ca:50:57:72:5f:15:c0:f3:12:8c:33:d8:fd:81:e0: 9e:de:57:f0:5a:62:76:39:b6:9b:21:c7:05:28:64:ac:84:4d: 06:e6:87:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MThBQzExMC8GA1UEBRMoMUIwNzU0OUIyNTBDRkMwM0REQUQ3QjU0NDQzREE4Mzg4 OTE4MTFDQTAeFw0yNTA1MTMwNjAzMzVaFw0yNTA1MjAwNjAzMzVaMBgxFjAUBgNV BAMTDTY4MjJlMGI3LTQyN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvQH7JIzk81CmU46pp+jYOU0a8wwNW4Vv+4p5e1+bnUD7ajwB12mwKymihRAVE 8m/lcYnRjWH6mWNPydZS0rcEHhp6mzXDj5RfenLfRiRwwA/BwjIfhc9SFJ6sPwQo lTJpniD74oDT3Kc2hFWN9aHIH9/pXk9mqoaFekTXEBlVdiF+WK16eTpVgT1VGpMz AUvyuVy5ALslYYRaThn9sDtoE0cHGfBAG+3PdeR5J5qN6DqfTjGRPqicW/RzSeO4 QKouatgiSPXtrf2YB4zpZ9UwyXnohaApnxx7uZKb7+In9Ou9L5yyzpYlcrKH4tyt 6FA07SA65mv6k+3l5ymHPXB/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ya7ya5j aUAa7TwK7J80ar1Fcn8wHwYDVR0jBBgwFoAUGwdUmyUM/APdrXtURD2oOIkYEcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxOEFDL0Q0QkEzRDk4OTZD QzExRUY4RUZDQjg0OUM0RjlBRTAyL0d3ZFVteVVNX0FQZHJYdFVSRDJvT0lrWUVj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3dkVW15VU1fQVBkclh0VVJEMm9PSWtZRWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx OEFDL0Q0QkEzRDk4OTZDQzExRUY4RUZDQjg0OUM0RjlBRTAyL0d3ZFVteVVNX0FQ ZHJYdFVSRDJvT0lrWUVjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElD9GINiK3jJSRmiGe9fn1REH4C+NVPQsuSclxTAQHmXi1isMy+zziL SEZe5CzBRRfr7UoTRovMsOhb9yyR+5AqPypwrWTClYlc6DtK9tUU8BwbiHupHDoI U5HPlIpW7W1o48uO6nnifRD74Fmo0v8d/AIoRqF1HB68htL/KvvaqIqOtt7RK/hv V13wilPP6PMzNpz+Pj82D1bRi2r9Vm1h/k/OxuVmFeZ6VQ5agQ07bifElI5u9jvk 3xouJKRYode0ZhMdmb+1YVWERxuSoNcNOhKUydBJQ57PGMpQV3JfFcDzEowz2P2B 4J7eV/BaYnY5tpshxwUoZKyETQbmhwQ= -----END CERTIFICATE-----Generated at Tue May 13 19:08:05 2025 by rpki-client