$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft File: GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json) Hash identifier: VhnWqh91hazTSj8eRxW8K0BXgARZvVATzc8nPbjBxss= Subject key identifier: BB:62:FA:0C:E1:04:E4:69:37:7E:44:53:6D:18:2F:17:4F:D1:C2:F7 Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 Certificate issuer: /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft Manifest number: 0281 Signing time: Sun 11 May 2025 01:11:06 +0000 Manifest this update: Sun 11 May 2025 01:11:05 +0000 Manifest next update: Sun 18 May 2025 01:11:05 +0000 Files and hashes: 1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: va9zpKopfQhj7bcgO7fQUDLPizUPp5ZKKToxGUpiBaw=) 2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: kMCJJ8NAnniqHWPJmFXYj+p1oepcYEa7mi3n3n8XfS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68 Validity Not Before: May 11 01:11:05 2025 GMT Not After : May 18 01:11:05 2025 GMT Subject: CN=681ff929-ef66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:b1:2b:6d:ea:5c:b6:d6:57:ab:08:b6:83: de:90:46:b3:2d:9d:06:6c:be:ec:4b:b1:de:9c:9b: c0:46:11:17:10:94:58:d1:22:02:6c:da:5e:d2:b7: 41:fc:0c:85:4f:3e:37:5a:9d:80:0c:cf:7a:c9:f2: b2:9b:b7:5e:b6:4c:d0:ef:be:77:cc:99:f1:21:b1: e2:54:a7:6e:dc:38:79:33:a6:59:c7:f3:76:d8:f1: 30:16:21:09:ec:29:6a:3a:bc:d9:68:23:aa:7f:a5: 00:5c:d7:91:4b:2d:8c:36:fe:53:78:30:9a:93:91: 4b:38:08:4f:c7:eb:3e:d2:4b:c9:06:44:50:e8:91: e2:0a:d2:1f:68:04:25:95:04:fc:72:71:e6:14:f3: ca:54:e7:21:b8:08:ef:c0:27:c4:00:e6:29:b7:c4: b2:40:8c:60:8c:a8:0f:ec:ce:2a:90:60:47:5d:ce: d6:48:c9:1e:b6:ff:bc:12:f2:5d:7f:d3:cc:d3:90: 89:77:7e:16:94:5f:1c:06:bc:74:5f:e4:70:58:6c: c9:1f:c0:86:11:d7:51:1b:18:26:3e:78:7b:d0:af: c8:e0:2b:fe:84:a3:8d:63:4a:9b:88:6f:25:e4:f9: 46:49:d2:3a:66:9d:9e:47:ac:d4:04:cf:f6:9a:3f: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:FA:0C:E1:04:E4:69:37:7E:44:53:6D:18:2F:17:4F:D1:C2:F7 X509v3 Authority Key Identifier: keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2d:0b:28:82:26:58:08:f2:8d:2b:23:9a:ec:01:60:37:64: f0:95:fb:0a:aa:75:5a:d3:5f:cb:45:8c:4f:2b:28:b2:c7:04: c0:f2:4e:fc:9b:ca:f2:d1:65:1b:e7:81:07:0f:96:05:c5:ba: 8e:7d:dc:eb:71:42:1e:d1:96:de:a2:5d:14:aa:e3:91:71:f6: a1:74:f9:e8:c0:d1:db:99:26:db:c5:3a:19:7e:5a:71:3c:ff: c4:c2:25:4f:2d:85:d5:ae:43:85:2c:2c:53:d4:86:0e:28:10: 4f:9a:f0:2c:58:f2:15:12:76:5d:32:84:22:d0:03:69:3b:d9: 6c:a1:9d:66:73:cc:1c:57:25:ea:74:c4:82:6d:5d:d5:2f:f1: b6:9c:fa:3e:aa:37:be:af:4a:d2:8a:83:03:21:ed:8d:0a:6f: 6a:bd:48:7d:be:84:4f:f4:77:71:b3:d3:41:48:69:4e:82:9b: b1:d6:59:6c:bf:4a:3b:c2:26:07:77:d6:51:56:da:8d:9b:e7: ca:03:a1:1a:ed:ab:24:05:01:f3:02:6d:8d:73:9f:10:41:3e: ae:f4:45:5f:4a:bc:58:f4:ee:f7:9f:e9:db:2d:fc:a8:4f:dc: a7:4a:0b:d4:3f:3e:73:fe:d3:48:47:4a:73:dd:27:0f:a7:52: e3:26:ae:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD ODlCNzJENjgwHhcNMjUwNTExMDExMTA1WhcNMjUwNTE4MDExMTA1WjAYMRYwFAYD VQQDEw02ODFmZjkyOS1lZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMyxK23qXLbWV6sItoPekEazLZ0GbL7sS7HenJvARhEXEJRY0SICbNpe0rdB /AyFTz43Wp2ADM96yfKym7detkzQ7753zJnxIbHiVKdu3Dh5M6ZZx/N22PEwFiEJ 7ClqOrzZaCOqf6UAXNeRSy2MNv5TeDCak5FLOAhPx+s+0kvJBkRQ6JHiCtIfaAQl lQT8cnHmFPPKVOchuAjvwCfEAOYpt8SyQIxgjKgP7M4qkGBHXc7WSMketv+8EvJd f9PM05CJd34WlF8cBrx0X+RwWGzJH8CGEddRGxgmPnh70K/I4Cv+hKONY0qbiG8l 5PlGSdI6Zp2eR6zUBM/2mj9I9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLti+gzh BORpN35EU20YLxdP0cL3MB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3 NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRLQsogiZYCPKNKyOa7AFgN2TwlfsKqnVa01/LRYxPKyiyxwTA8k78 m8ry0WUb54EHD5YFxbqOfdzrcUIe0Zbeol0UquORcfahdPnowNHbmSbbxToZflpx PP/EwiVPLYXVrkOFLCxT1IYOKBBPmvAsWPIVEnZdMoQi0ANpO9lsoZ1mc8wcVyXq dMSCbV3VL/G2nPo+qje+r0rSioMDIe2NCm9qvUh9voRP9Hdxs9NBSGlOgpux1lls v0o7wiYHd9ZRVtqNm+fKA6Ea7askBQHzAm2Nc58QQT6u9EVfSrxY9O73n+nbLfyo T9ynSgvUPz5z/tNIR0pz3ScPp1LjJq5o -----END CERTIFICATE-----Generated at Sun May 11 18:53:16 2025 by rpki-client