$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: wk0AjnrYmz24PHyDy7qwpAo2LJNk60z+BhnHqXnwwwo= Subject key identifier: 53:8B:41:ED:23:55:0A:E6:57:FD:30:78:7F:C0:3F:58:E7:4B:39:1A Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 1E Signing time: Thu 15 May 2025 12:08:44 +0000 Manifest this update: Thu 15 May 2025 12:08:43 +0000 Manifest next update: Thu 22 May 2025 12:08:43 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: TCmJoiwv2oPfQgNuWGVRYI3GLA+HcOsN/rcqgnx8wNs=) 2: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: flX3irYKlYgZGHT2kvpQWpKKvTykKg+AN7X91kuuF4c=) 3: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: rfQkg7k3FOtxE3QH+1b/dgEb3pjSHYuBHOu/Aw1ktps=) 4: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: Z2oCf9VHu+Nlt7KaEbBkyqcl7gO+UQwxVS+M1hIhebk=) 5: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: BtSPkMAc6JmUbVgs04DwYummrrWRw2IMsZrBj4wxrVc=) 6: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: Xrg0tE5OWYBtPUZ5NZncP6ifYaxEX/Vp4aRquzOzr2Y=) 7: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: 77gNSThyGJ0AnlBE5SHj9Jhjf0hxCyKERlvCEcqZ/Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 12:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: May 15 12:08:43 2025 GMT Not After : May 22 12:08:43 2025 GMT Subject: CN=6825d94b-cd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:86:09:65:4a:f9:1e:75:ab:7e:c9:c4:ca: 53:34:eb:31:c7:5e:05:41:0f:02:c9:c6:c0:b0:2b: 2e:6c:7f:93:67:f4:f2:55:ea:b8:1e:27:82:b1:b1: 3c:a4:43:0a:c8:54:ef:c2:da:3c:3b:f9:0e:f0:1c: ff:10:93:5f:cc:24:8a:18:ff:cf:87:e9:02:ec:2a: 4b:bb:68:68:a7:dd:54:c8:30:45:6e:32:dc:7e:99: 16:79:a1:82:22:17:8f:50:1c:ce:e3:a8:dd:81:fe: 50:a6:45:3e:ba:74:33:17:db:0e:76:7d:b4:b5:2d: 51:f0:18:8b:de:a9:18:cd:41:bb:cd:13:a2:0a:8e: 9d:65:e5:18:73:69:19:b1:ae:7b:e6:84:b8:ae:cf: e2:cc:85:79:7e:81:80:99:e1:2f:23:c4:4a:40:60: 45:9e:47:e6:c5:96:7e:04:73:75:8e:f8:e4:35:4c: e1:d3:9a:ad:39:9d:9a:4a:6f:c1:50:3a:23:c1:31: ac:b6:25:67:3b:44:6e:46:0e:b4:35:0c:34:6f:e5: 7c:b8:bf:c9:53:b6:53:2b:84:8d:2b:be:d5:33:82: 15:ae:a5:b4:b6:a0:92:64:4e:78:04:1e:28:c5:a6: a7:3f:37:2f:2f:16:c7:f4:4f:14:ad:96:f7:bd:ee: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8B:41:ED:23:55:0A:E6:57:FD:30:78:7F:C0:3F:58:E7:4B:39:1A X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4f:66:4e:69:e0:df:f3:ef:75:75:c1:d7:e0:c3:39:6c:23: 85:30:6a:a9:28:c7:a6:7a:4a:b9:2f:63:9e:c3:78:43:be:ec: 73:5b:03:4f:56:b7:38:f6:f0:96:3d:2c:08:ef:16:ef:bf:b5: ad:e9:9b:98:ea:49:1b:d4:a4:82:71:fd:47:b0:64:82:2e:2a: a1:37:25:0f:32:b1:cf:53:75:0a:93:b2:27:25:88:e0:04:32: 7c:e5:fc:3f:0d:96:8d:b9:99:d2:bc:24:30:44:59:77:4c:47: da:18:07:98:cb:22:1e:9b:04:7c:9c:b9:5e:e4:32:54:0f:3d: d0:00:4c:99:23:40:da:c5:97:d1:2e:9b:07:87:ae:7c:a5:22: bc:97:1f:98:9b:69:92:73:53:96:80:2b:e2:07:0f:0f:29:87: 6a:e1:08:72:45:9a:8f:fd:e2:24:ef:a3:06:f7:02:16:2a:65: bc:60:33:9f:8e:b2:1e:24:80:c2:b5:a5:17:7c:bd:4e:0e:cc: 8c:38:6b:3a:dc:20:75:b1:02:d1:db:ef:3e:3e:56:bb:c9:b9: a7:ca:72:df:32:66:f0:89:60:13:9e:3b:93:f3:b3:79:52:13: 71:62:64:70:0a:22:5b:d1:36:26:cf:b0:6c:1e:67:ae:0a:d5: 5d:cc:62:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA1MTUxMjA4NDNaFw0yNTA1MjIxMjA4NDNaMBgxFjAUBgNV BAMTDTY4MjVkOTRiLWNkMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg2YYJZUr5HnWrfsnEylM06zHHXgVBDwLJxsCwKy5sf5Nn9PJV6rgeJ4KxsTyk QwrIVO/C2jw7+Q7wHP8Qk1/MJIoY/8+H6QLsKku7aGin3VTIMEVuMtx+mRZ5oYIi F49QHM7jqN2B/lCmRT66dDMX2w52fbS1LVHwGIveqRjNQbvNE6IKjp1l5RhzaRmx rnvmhLiuz+LMhXl+gYCZ4S8jxEpAYEWeR+bFln4Ec3WO+OQ1TOHTmq05nZpKb8FQ OiPBMay2JWc7RG5GDrQ1DDRv5Xy4v8lTtlMrhI0rvtUzghWupbS2oJJkTngEHijF pqc/Ny8vFsf0TxStlve97mKLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU4tB7SNV CuZX/TB4f8A/WOdLORowHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVPZk5p4N/z73V1wdfgwzlsI4Uwaqkox6Z6SrkvY57DeEO+7HNbA09W tzj28JY9LAjvFu+/ta3pm5jqSRvUpIJx/UewZIIuKqE3JQ8ysc9TdQqTsicliOAE Mnzl/D8Nlo25mdK8JDBEWXdMR9oYB5jLIh6bBHycuV7kMlQPPdAATJkjQNrFl9Eu mweHrnylIryXH5ibaZJzU5aAK+IHDw8ph2rhCHJFmo/94iTvowb3AhYqZbxgM5+O sh4kgMK1pRd8vU4OzIw4azrcIHWxAtHb7z4+VrvJuafKct8yZvCJYBOeO5Pzs3lS E3FiZHAKIlvRNibPsGweZ64K1V3MYoo= -----END CERTIFICATE-----Generated at Fri May 16 06:22:00 2025 by rpki-client