$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft File: gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json) Hash identifier: /ZoTpbp8hyfg7s9e4psBX65P0iP9Kydi0liKf/AT8hY= Subject key identifier: CE:32:61:A4:25:A5:6B:BF:C0:E0:CA:5D:A9:CA:77:B7:E7:AF:1D:D8 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft Manifest number: 051E Signing time: Thu 08 May 2025 23:22:34 +0000 Manifest this update: Thu 08 May 2025 23:22:34 +0000 Manifest next update: Thu 15 May 2025 23:22:33 +0000 Files and hashes: 1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: Darpy88tcP88TvtAlY6tXdt6ATn0I/eUHNw+tQR7G/E=) 2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DeWvXrtTOlNASLEtVwCRq5xJVs2BWXsb8zrs6Aq/kZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: May 8 23:22:34 2025 GMT Not After : May 15 23:22:33 2025 GMT Subject: CN=681d3cba-9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:45:f9:b5:d6:b1:40:82:7a:19:96:84:e9: a9:01:3f:f7:c2:7e:0f:58:f5:f4:1e:2f:1f:12:f7: 44:9a:ff:1f:60:55:66:a1:6b:ad:38:ba:3e:af:58: ef:2b:71:a8:6c:c5:12:3f:d7:49:35:27:04:cd:b0: 12:d8:14:08:26:2f:2b:d7:f2:94:6e:e5:d5:65:90: fa:3c:f8:1b:61:84:67:05:a9:6e:1a:55:6e:14:98: b5:0f:0b:6f:9f:90:0c:8c:10:6b:1b:20:a7:07:92: 87:ff:6f:44:84:e8:74:2b:6b:30:1c:79:3c:5d:66: 32:f2:16:78:c3:0e:d2:d3:19:9f:a3:2a:16:d1:9a: 6d:0d:dc:a5:ae:51:c5:22:e8:87:0d:8e:6e:c6:de: 69:1c:14:f2:29:33:c1:b8:f0:3e:06:f6:6a:45:f8: 74:98:a2:62:80:fc:d0:9b:33:18:d4:69:5e:c0:ae: 8f:1e:94:f4:1f:f6:b4:bf:61:23:72:d6:34:94:59: 54:5c:d1:52:bb:33:ac:d9:0e:42:af:f7:be:57:b6: d0:d3:ea:d8:27:af:d4:12:7b:ac:b1:65:13:b8:b9: c5:75:21:15:29:53:06:d0:e4:df:1a:6e:a8:76:eb: 2d:e8:68:26:da:b7:0e:7a:c6:30:7c:c6:3a:65:30: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:61:A4:25:A5:6B:BF:C0:E0:CA:5D:A9:CA:77:B7:E7:AF:1D:D8 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8e:a0:96:58:d7:fa:5f:99:6f:13:69:35:8f:70:f8:63:08: ea:b0:a7:ad:9b:47:97:82:f0:20:9c:f9:4d:a4:89:d3:c7:57: f3:c8:da:af:8b:d5:d6:0a:7a:c7:38:f3:fe:43:8b:15:7b:56: c3:53:18:76:d2:89:0a:d0:01:11:91:d5:6f:e8:33:a8:89:e7: 28:20:29:a6:c9:0e:84:04:6f:2e:96:c7:aa:8e:8c:ec:19:cd: 4c:ba:eb:59:25:78:9c:7c:b0:bb:54:57:9c:6a:b8:0c:c3:a9: 05:c0:1e:d6:c0:db:78:d4:b8:28:92:1b:72:e8:ae:b6:d4:a8: cb:41:52:57:aa:28:1b:98:b6:0c:18:22:d4:14:bf:03:60:4f: 45:96:84:0e:22:cf:a7:06:ac:e8:2d:e0:17:50:e7:f0:20:7f: 01:15:aa:27:39:45:e8:25:38:ca:44:d2:dc:1f:e1:fa:4f:62: a0:6e:11:c9:21:92:13:42:e8:45:f5:a5:f8:67:bc:85:7f:bf: 9f:32:b9:dc:c9:e9:65:08:f2:04:db:cd:35:fb:89:2f:da:ba: 3e:bb:48:09:2a:1a:77:1c:87:03:7c:65:4a:7f:56:45:59:84: 56:57:bb:35:fe:86:6f:b0:74:69:ba:67:53:34:b1:99:83:cb: 0b:e6:9a:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUwNTA4MjMyMjM0WhcNMjUwNTE1MjMyMjMzWjAYMRYwFAYD VQQDEw02ODFkM2NiYS05YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQJF+bXWsUCCehmWhOmpAT/3wn4PWPX0Hi8fEvdEmv8fYFVmoWutOLo+r1jv K3GobMUSP9dJNScEzbAS2BQIJi8r1/KUbuXVZZD6PPgbYYRnBaluGlVuFJi1Dwtv n5AMjBBrGyCnB5KH/29EhOh0K2swHHk8XWYy8hZ4ww7S0xmfoyoW0ZptDdylrlHF IuiHDY5uxt5pHBTyKTPBuPA+BvZqRfh0mKJigPzQmzMY1GlewK6PHpT0H/a0v2Ej ctY0lFlUXNFSuzOs2Q5Cr/e+V7bQ0+rYJ6/UEnussWUTuLnFdSEVKVMG0OTfGm6o dust6Ggm2rcOesYwfMY6ZTCI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4yYaQl pWu/wODKXanKd7fnrx3YMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNDNy83QjJGNTM4QUZFNjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNC SzM1OEp6RGRCZ2ZoRGJnUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSjqCWWNf6X5lvE2k1j3D4YwjqsKetm0eXgvAgnPlNpInTx1fzyNqv i9XWCnrHOPP+Q4sVe1bDUxh20okK0AERkdVv6DOoiecoICmmyQ6EBG8ulseqjozs Gc1MuutZJXicfLC7VFecargMw6kFwB7WwNt41Lgokhty6K621KjLQVJXqigbmLYM GCLUFL8DYE9FloQOIs+nBqzoLeAXUOfwIH8BFaonOUXoJTjKRNLcH+H6T2KgbhHJ IZITQuhF9aX4Z7yFf7+fMrncyellCPIE2801+4kv2ro+u0gJKhp3HIcDfGVKf1ZF WYRWV7s1/oZvsHRpumdTNLGZg8sL5ppj -----END CERTIFICATE-----Generated at Sat May 10 05:03:56 2025 by rpki-client