$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft File: GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json) Hash identifier: xZtZxLT0QiWg2DGxG46VBAK3NS4w7sM89NlDY4kdKXw= Subject key identifier: 3A:97:76:2C:37:DC:A9:17:BC:AB:2F:12:82:3D:0B:AC:BF:80:C1:34 Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 Certificate issuer: /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Certificate serial: 1569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft Manifest number: 155F Signing time: Sun 04 May 2025 16:54:57 +0000 Manifest this update: Sun 04 May 2025 16:54:57 +0000 Manifest next update: Sun 11 May 2025 16:54:57 +0000 Files and hashes: 1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: bvrW54mI2ivf70nW1DAsEqhSmh8yoFM2OgvowrkFZlQ=) 2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: xdBFNPkazDP5YP2MUntpZBwPWV+oy0u7bSlxk8ZVSa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5481 (0x1569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638 Validity Not Before: May 4 16:54:57 2025 GMT Not After : May 11 16:54:57 2025 GMT Subject: CN=68179be1-eb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:8a:a1:07:03:11:91:41:60:98:bf:af:d7: 2f:e5:3f:68:03:00:55:b1:ae:a2:31:e4:42:11:d5: 66:dc:8e:ab:36:54:2a:71:73:f6:bb:43:1d:10:48: 17:a5:45:82:be:07:2c:da:62:ce:a0:d3:ca:73:2f: 93:8e:29:a9:a5:5d:2d:5f:69:d2:fe:a6:a7:66:0b: 68:8e:40:e5:94:d5:ef:62:36:51:c1:a8:37:77:b0: 45:bc:0d:fc:97:7e:da:5c:55:12:49:a2:18:ea:47: 98:7a:bd:e8:e1:2a:56:f4:d6:08:79:d8:12:94:da: 2f:60:b5:c1:8f:c2:08:18:40:30:fe:08:21:3e:e8: b7:c2:95:5a:6d:9c:00:de:3a:7f:53:50:32:4f:70: bf:7d:8a:0b:fb:33:83:67:3e:e0:53:2a:f9:c9:cb: b0:9f:4b:2f:07:e2:60:db:d9:00:6c:e7:9e:6a:c2: 44:c6:60:cf:95:95:28:80:cc:51:ea:f4:d2:f5:71: be:53:3c:b2:4c:cf:8d:75:49:43:30:6f:b6:fe:77: fb:47:c4:ef:5a:fe:ce:9a:a7:99:fa:9f:42:22:79: e3:2a:d2:98:1b:34:e0:7f:ab:3e:ec:89:7f:8b:f2: 67:94:bb:3f:4b:6a:83:66:c1:56:85:6c:cf:68:5d: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:76:2C:37:DC:A9:17:BC:AB:2F:12:82:3D:0B:AC:BF:80:C1:34 X509v3 Authority Key Identifier: keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0e:c7:8f:47:a9:f6:b2:97:2c:66:de:7b:67:1b:35:86:51: 79:ec:ca:70:51:df:7e:c8:34:32:e6:6a:b3:bd:ba:19:51:cf: 7a:5e:f1:0c:61:37:5f:72:63:a9:7f:96:4c:09:88:83:fc:e2: a5:c8:78:8e:33:39:fa:f1:70:d8:fe:3d:5e:28:aa:4f:4f:b4: 17:3d:2b:68:5f:5d:38:13:30:79:b3:0e:04:98:76:11:b1:f8: cc:56:66:85:a0:df:aa:de:bb:7e:0c:76:e2:13:ba:bb:c2:f9: a9:b5:85:c8:2d:d4:b3:aa:a8:cb:0e:db:e8:35:e0:a5:23:b2: 43:9d:01:2d:ca:00:c9:06:8a:a8:97:91:ba:27:c5:71:7f:b7: ba:d2:e4:89:d2:76:35:c6:db:d9:8a:94:c3:97:f4:46:2e:0c: e6:97:c9:d2:9c:7e:4a:e9:67:aa:bb:c1:98:b0:9c:f1:73:a4: 97:9d:d7:8d:9c:86:c5:07:13:7b:49:27:d6:56:a0:62:bc:df: 3f:c8:af:41:c0:51:39:1b:00:43:d8:fe:bd:41:48:d3:de:f4: fb:64:79:19:17:02:dc:aa:c6:b1:91:3f:dd:23:d2:54:d5:9f: f5:44:58:66:2a:75:9a:f3:51:a3:44:9d:d4:e1:e7:a2:a6:c4: b7:51:7f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwMEUxMTAvBgNVBAUTKDE5NTJGRDM4NTMyNkEzRDkxRERBNDVDMzdBNjIyNTM5 NjNDM0Y2MzgwHhcNMjUwNTA0MTY1NDU3WhcNMjUwNTExMTY1NDU3WjAYMRYwFAYD VQQDEw02ODE3OWJlMS1lYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPmKoQcDEZFBYJi/r9cv5T9oAwBVsa6iMeRCEdVm3I6rNlQqcXP2u0MdEEgX pUWCvgcs2mLOoNPKcy+TjimppV0tX2nS/qanZgtojkDllNXvYjZRwag3d7BFvA38 l37aXFUSSaIY6keYer3o4SpW9NYIedgSlNovYLXBj8IIGEAw/gghPui3wpVabZwA 3jp/U1AyT3C/fYoL+zODZz7gUyr5ycuwn0svB+Jg29kAbOeeasJExmDPlZUogMxR 6vTS9XG+UzyyTM+NdUlDMG+2/nf7R8TvWv7OmqeZ+p9CInnjKtKYGzTgf6s+7Il/ i/JnlLs/S2qDZsFWhWzPaF0OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqXdiw3 3KkXvKsvEoI9C6y/gME0MB8GA1UdIwQYMBaAFBlS/ThTJqPZHdpFw3piJTljw/Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDAwRS84MDBFM0Y3MjM4 RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85a2Qya1hEZW1JbE9XUEQ5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWTDlPRk1tbzlrZDJrWERlbUlsT1dQRDlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDAwRS84MDBFM0Y3MjM4RTMxMUU4ODk3N0ZCMEZDNEY5QUUwMi9HVkw5T0ZNbW85 a2Qya1hEZW1JbE9XUEQ5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuDsePR6n2spcsZt57Zxs1hlF57MpwUd9+yDQy5mqzvboZUc96XvEM YTdfcmOpf5ZMCYiD/OKlyHiOMzn68XDY/j1eKKpPT7QXPStoX104EzB5sw4EmHYR sfjMVmaFoN+q3rt+DHbiE7q7wvmptYXILdSzqqjLDtvoNeClI7JDnQEtygDJBoqo l5G6J8Vxf7e60uSJ0nY1xtvZipTDl/RGLgzml8nSnH5K6Wequ8GYsJzxc6SXndeN nIbFBxN7SSfWVqBivN8/yK9BwFE5GwBD2P69QUjT3vT7ZHkZFwLcqsaxkT/dI9JU 1Z/1RFhmKnWa81GjRJ3U4eeipsS3UX8E -----END CERTIFICATE-----Generated at Mon May 5 05:24:17 2025 by rpki-client