$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: Y94DKLPziBpqVwctRo9PVTduSLH6F9MMX8DrxYQvm3g= Subject key identifier: 6F:91:4A:0F:45:A5:23:4D:FC:0A:FF:AC:8D:21:E6:57:03:A0:E4:3D Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 0772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 076D Signing time: Tue 06 May 2025 21:22:35 +0000 Manifest this update: Tue 06 May 2025 21:22:35 +0000 Manifest next update: Tue 13 May 2025 21:22:35 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: mAI9B/mmqsfWOug0OL4hxmhWXCAln2bNyKmXkhl1Mww=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: E7aUJSWkWctXuYXSTwS30+xAR7ERalIEla2LT/i5k8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 21:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: May 6 21:22:35 2025 GMT Not After : May 13 21:22:35 2025 GMT Subject: CN=681a7d9b-c0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:36:6b:49:ce:5f:4e:d0:95:06:ef:12:1a:da: 84:d8:cd:68:3a:c1:e8:e6:23:41:da:0f:e2:6a:37: d9:ab:2f:20:fe:0c:ba:44:98:f7:11:f5:12:f7:ac: c3:d8:b7:6f:4d:23:6a:05:74:f3:3c:65:47:5b:8c: 65:bb:a3:bf:5e:09:14:d5:e5:12:e3:94:27:05:53: 74:ee:53:9c:2f:f1:5e:e5:4f:b1:a0:63:49:31:79: e8:0d:47:d2:ba:68:65:c3:6a:21:4c:7c:59:32:9b: bd:c2:ff:71:be:c9:54:a3:8f:ed:ae:3f:0e:bd:b1: 6c:28:46:1a:34:72:d5:52:21:90:1c:ee:48:a2:c9: 0c:6d:65:96:c4:33:9c:c4:fd:7c:98:a6:34:1d:fa: ce:eb:68:f9:27:06:be:61:87:d2:ca:78:c6:fa:30: fa:22:e9:47:96:3b:1f:0c:66:4b:52:57:f8:ac:a7: 13:2e:3a:8c:ae:b2:fa:3d:dd:be:95:31:bd:f1:28: 4e:d3:60:8b:a1:cc:f7:73:55:08:58:d2:49:33:f3: 4f:9e:31:0b:0b:41:08:9d:f2:e6:26:cb:57:23:1f: b1:76:d1:7a:e3:39:04:15:7b:27:34:14:34:44:3b: e4:ed:83:01:5f:29:0e:06:2f:63:e7:28:80:cf:82: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:4A:0F:45:A5:23:4D:FC:0A:FF:AC:8D:21:E6:57:03:A0:E4:3D X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:42:36:21:75:c1:ba:9a:31:ac:93:c9:2e:9e:e0:45:85:a0: 9b:59:8b:46:30:17:0d:17:41:2e:e1:4c:ba:5d:51:f2:c5:8f: 4f:7c:83:1f:9e:df:10:8a:11:24:2e:5f:9f:94:08:a1:6a:7d: 02:0d:dc:26:69:16:13:d2:8c:d9:11:17:ea:27:21:b9:ab:4c: 4d:a9:cd:ab:67:74:76:49:eb:2d:91:b4:95:3c:d4:b2:57:44: 9e:93:89:f8:2f:f8:05:04:f4:b4:7a:2c:a8:42:0a:06:45:22: 89:48:b0:0d:a6:15:e2:bf:b6:14:f3:8a:27:27:0e:a7:22:92: 41:14:fe:c7:f6:0d:cb:63:8c:db:fc:d3:f0:1f:c9:d1:e2:8c: 2e:e6:af:8a:48:55:0c:ef:d5:ca:41:12:d3:d7:1b:6d:de:b9: 3a:94:3b:ff:53:1d:aa:ae:a4:1b:97:04:4b:f0:6b:17:ba:f2: 3d:4d:ea:1a:fc:fc:47:33:18:8d:88:b2:3e:5c:98:03:be:95: 9b:15:54:79:46:74:59:5c:f0:5c:e5:36:b4:fe:a6:fc:99:87: 2b:45:89:ba:a8:fc:e6:02:ae:17:b5:1d:2e:f7:ee:4c:ca:2d: bf:c7:0b:01:e8:b9:c6:9c:03:b2:15:ee:ea:b8:6d:df:c5:60: 96:10:65:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUwNTA2MjEyMjM1WhcNMjUwNTEzMjEyMjM1WjAYMRYwFAYD VQQDEw02ODFhN2Q5Yi1jMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/DZrSc5fTtCVBu8SGtqE2M1oOsHo5iNB2g/iajfZqy8g/gy6RJj3EfUS96zD 2LdvTSNqBXTzPGVHW4xlu6O/XgkU1eUS45QnBVN07lOcL/Fe5U+xoGNJMXnoDUfS umhlw2ohTHxZMpu9wv9xvslUo4/trj8OvbFsKEYaNHLVUiGQHO5IoskMbWWWxDOc xP18mKY0HfrO62j5Jwa+YYfSynjG+jD6IulHljsfDGZLUlf4rKcTLjqMrrL6Pd2+ lTG98ShO02CLocz3c1UIWNJJM/NPnjELC0EInfLmJstXIx+xdtF64zkEFXsnNBQ0 RDvk7YMBXykOBi9j5yiAz4IHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+RSg9F pSNN/Ar/rI0h5lcDoOQ9MB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQjYhdcG6mjGsk8kunuBFhaCbWYtGMBcNF0Eu4Uy6XVHyxY9PfIMf nt8QihEkLl+flAihan0CDdwmaRYT0ozZERfqJyG5q0xNqc2rZ3R2SestkbSVPNSy V0Sek4n4L/gFBPS0eiyoQgoGRSKJSLANphXiv7YU84onJw6nIpJBFP7H9g3LY4zb /NPwH8nR4owu5q+KSFUM79XKQRLT1xtt3rk6lDv/Ux2qrqQblwRL8GsXuvI9Teoa /PxHMxiNiLI+XJgDvpWbFVR5RnRZXPBc5Ta0/qb8mYcrRYm6qPzmAq4XtR0u9+5M yi2/xwsB6LnGnAOyFe7quG3fxWCWEGWl -----END CERTIFICATE-----Generated at Thu May 8 18:58:06 2025 by rpki-client