$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: vIUcSqdoUgvnPPcsJ/nmgkzNcwjPCD8lWvrdbF1lxgQ= Subject key identifier: E5:C0:C5:5A:1E:0F:5D:98:46:6F:01:07:5C:4C:A9:40:D6:CC:82:8A Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 3499 Signing time: Mon 12 May 2025 14:35:22 +0000 Manifest this update: Mon 12 May 2025 14:35:22 +0000 Manifest next update: Mon 19 May 2025 14:35:22 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: VKEj+MRZCpk4N5+y84gLt17+N6OYObKUfKyUvXMaxPk=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: Ml46u2z0U+I2ZQaPPsePPmtgvCBhdMDLTPQJk8d3bl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: May 12 14:35:22 2025 GMT Not After : May 19 14:35:22 2025 GMT Subject: CN=6822072a-1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:36:81:b4:c4:72:b5:2c:9b:43:c9:b4:34: 9a:ca:56:a8:04:e2:d7:52:40:25:c0:d7:c3:52:ba: 97:32:bc:b1:72:01:1d:e0:45:ed:33:eb:d4:52:e6: b7:04:86:4f:a8:ce:1d:9b:a0:e3:e2:a9:79:b6:01: 54:2a:d7:2c:72:96:e5:ef:c8:7f:e6:a2:48:e1:4b: 82:17:f4:89:6e:4e:2e:26:36:6c:8e:bc:e4:48:d5: e8:22:07:95:47:96:9b:53:77:40:8e:90:33:28:24: 7a:06:bd:3b:23:8d:9d:95:03:58:77:b7:a0:84:41: 98:65:b6:01:7f:83:20:b0:6a:95:29:d7:6e:dd:c8: bf:6e:f8:8c:56:fb:3c:3b:69:e7:2c:58:5e:23:ad: 45:5b:d1:36:a8:24:38:92:49:73:84:73:c1:7e:06: 38:11:2c:f2:72:78:7c:50:df:aa:b7:4a:ef:b3:5e: b5:6c:7c:2d:70:36:84:f5:18:7e:41:63:a5:fd:29: f1:36:ab:49:90:0f:26:61:fb:d0:76:0a:ee:f0:c6: 7c:ae:1b:34:fc:1a:28:ae:a7:f3:82:b1:bd:93:ab: 70:2f:9a:da:f0:0c:34:a3:f9:b1:28:ae:48:07:c9: cc:c4:d9:78:6a:c1:0d:bd:28:6d:c6:fb:b6:73:24: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C0:C5:5A:1E:0F:5D:98:46:6F:01:07:5C:4C:A9:40:D6:CC:82:8A X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:43:b8:8b:92:4c:5f:bf:5c:91:e3:12:58:80:d4:75:fc: 5e:c1:5a:a5:43:90:c4:51:89:e8:cb:5c:a8:f0:7b:e6:8c:6d: f6:bd:cd:7d:71:ad:3e:1c:6a:55:a6:b0:f9:40:3b:90:a1:9f: 8a:3f:f4:07:92:56:b6:99:f2:31:e1:c9:e1:28:a8:2c:af:6b: a7:b8:83:a3:62:fd:05:1f:05:2d:c9:10:55:34:65:9f:52:89: 9d:af:d8:4a:84:42:5c:e4:6e:de:60:ed:9e:9c:93:f5:45:08: 60:fb:65:97:3e:e1:b8:e2:7a:1d:ee:aa:6d:e4:8c:d9:75:84: 04:35:b0:74:99:ba:44:9c:bb:97:76:51:84:95:0b:76:64:9c: ff:cc:8b:b3:e0:44:1f:2d:a5:26:93:1d:58:f9:90:5e:1f:bd: d2:b2:64:a3:fb:cd:93:55:ec:29:a5:7c:6b:71:08:cb:a1:9c: 9b:78:ce:08:e3:f1:18:99:6a:95:11:f7:36:ee:84:e3:61:f7: e9:91:52:54:e2:a3:14:91:89:f4:32:6b:7a:17:46:8f:61:9d: 65:44:3b:29:49:47:5d:ca:52:69:41:e8:31:f8:d2:04:bb:ba: b2:4d:6e:b6:f0:27:c0:85:59:4c:70:74:3d:82:c2:12:03:12: e0:6b:b4:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUwNTEyMTQzNTIyWhcNMjUwNTE5MTQzNTIyWjAYMRYwFAYD VQQDEw02ODIyMDcyYS0xOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdk2gbTEcrUsm0PJtDSaylaoBOLXUkAlwNfDUrqXMryxcgEd4EXtM+vUUua3 BIZPqM4dm6Dj4ql5tgFUKtcscpbl78h/5qJI4UuCF/SJbk4uJjZsjrzkSNXoIgeV R5abU3dAjpAzKCR6Br07I42dlQNYd7eghEGYZbYBf4MgsGqVKddu3ci/bviMVvs8 O2nnLFheI61FW9E2qCQ4kklzhHPBfgY4ESzycnh8UN+qt0rvs161bHwtcDaE9Rh+ QWOl/SnxNqtJkA8mYfvQdgru8MZ8rhs0/BoorqfzgrG9k6twL5ra8Aw0o/mxKK5I B8nMxNl4asENvShtxvu2cyS1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXAxVoe D12YRm8BB1xMqUDWzIKKMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTB0O4i5JMX79ckeMSWIDUdfxewVqlQ5DEUYnoy1yo8HvmjG32vc19 ca0+HGpVprD5QDuQoZ+KP/QHkla2mfIx4cnhKKgsr2unuIOjYv0FHwUtyRBVNGWf Uomdr9hKhEJc5G7eYO2enJP1RQhg+2WXPuG44nod7qpt5IzZdYQENbB0mbpEnLuX dlGElQt2ZJz/zIuz4EQfLaUmkx1Y+ZBeH73SsmSj+82TVewppXxrcQjLoZybeM4I 4/EYmWqVEfc27oTjYffpkVJU4qMUkYn0Mmt6F0aPYZ1lRDspSUddylJpQegx+NIE u7qyTW628CfAhVlMcHQ9gsISAxLga7Ql -----END CERTIFICATE-----Generated at Tue May 13 01:51:28 2025 by rpki-client