$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: chUSimKe66n0IWQObm4qZ98I1fCNVRRM6LHLHao/8oc= Subject key identifier: A6:BF:4F:3E:F0:34:9D:64:51:CA:07:BC:AF:EE:E9:0B:AC:F1:EF:B3 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 045B Signing time: Sat 17 May 2025 00:26:21 +0000 Manifest this update: Sat 17 May 2025 00:26:21 +0000 Manifest next update: Sat 24 May 2025 00:26:20 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: eqvzhL1a3t1amjTMz1cOQHtK7mopgjS7FYb3S2/hEIE=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: May 17 00:26:21 2025 GMT Not After : May 24 00:26:20 2025 GMT Subject: CN=6827d7ad-c329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:fd:57:91:cf:2f:85:48:8b:c7:67:ca:eb: e7:a3:86:a1:09:1c:12:bf:b3:de:d3:e6:9d:ea:3c: f6:cb:24:6d:e6:ee:8a:f1:c0:72:85:5e:b9:70:c0: dc:74:92:fb:72:9e:7c:67:00:39:09:a3:94:16:d3: f0:49:b3:a9:98:b6:6a:69:21:39:7a:ea:f5:dc:63: d4:90:46:49:88:cc:c4:dc:e3:fa:2d:ca:f5:86:af: a4:b9:9b:e3:fb:bf:ff:eb:80:d0:1e:ce:47:4f:b8: 5c:67:ad:8f:81:9f:a2:a1:44:0d:a4:58:6b:34:22: b3:ce:ee:20:c5:80:a7:bc:f5:33:0a:e5:42:59:84: 5b:ac:b6:81:74:28:39:1f:4a:bf:7c:e9:a1:72:4a: 8c:7d:c2:47:3a:a3:68:25:ce:b3:bd:15:02:70:3b: 19:a5:e8:2c:39:99:44:d1:55:aa:d1:c5:b2:dd:84: 39:f8:56:16:14:68:66:96:23:90:97:5c:89:fd:53: 46:f0:da:2d:52:7c:4f:05:17:01:a3:60:bb:32:9c: fb:01:b6:8a:b5:77:e3:6c:2f:24:6f:57:8e:bf:c8: ff:fb:b7:da:29:89:65:80:5c:9b:66:db:5d:de:4e: 23:1c:aa:c0:5c:d5:2b:00:92:dc:a1:5f:e3:ca:79: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:4F:3E:F0:34:9D:64:51:CA:07:BC:AF:EE:E9:0B:AC:F1:EF:B3 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a7:8c:ca:54:34:85:92:03:ce:4e:c0:eb:fe:c3:fc:d1:e4: 84:fe:25:9d:07:a7:fb:94:0f:f2:08:fb:70:fa:e4:dc:2e:af: 96:dc:d7:94:c7:10:f8:b5:a7:e7:c7:43:44:89:d5:94:68:b0: 25:7d:f6:4a:16:13:ed:ed:c3:c9:12:2e:07:85:bd:58:dc:f1: db:f0:d1:a0:8e:e2:70:b8:84:86:08:99:20:3b:97:0d:02:fe: e1:af:da:15:ca:90:58:60:3d:05:ae:bc:b6:5d:84:ed:28:ca: db:3e:39:b2:fb:2c:a2:99:52:c0:84:00:8a:0c:08:ee:3a:a2: 71:42:af:2e:7f:46:31:2b:a4:94:c3:15:4e:fb:b5:ae:f5:dd: d1:d2:80:12:55:ce:ee:6e:07:ef:46:0a:f0:2f:f6:51:bb:8b: d2:9f:29:45:37:78:2c:ae:76:38:25:c7:3f:0c:08:20:a5:75: c5:cc:78:bb:ad:ae:1f:30:53:ce:01:01:da:76:c6:9d:d7:e8: 81:24:60:37:19:4f:ad:c9:83:0a:5c:4a:0d:76:d4:76:9b:d3: 9e:fb:84:fa:50:63:fe:88:50:c4:e5:c6:a4:11:af:4b:6d:8d: 39:21:f9:cd:15:61:bd:18:3f:23:67:90:ad:d7:70:4b:f6:96: 21:e4:c9:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwNTE3MDAyNjIxWhcNMjUwNTI0MDAyNjIwWjAYMRYwFAYD VQQDEw02ODI3ZDdhZC1jMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kr9V5HPL4VIi8dnyuvno4ahCRwSv7Pe0+ad6jz2yyRt5u6K8cByhV65cMDc dJL7cp58ZwA5CaOUFtPwSbOpmLZqaSE5eur13GPUkEZJiMzE3OP6Lcr1hq+kuZvj +7//64DQHs5HT7hcZ62PgZ+ioUQNpFhrNCKzzu4gxYCnvPUzCuVCWYRbrLaBdCg5 H0q/fOmhckqMfcJHOqNoJc6zvRUCcDsZpegsOZlE0VWq0cWy3YQ5+FYWFGhmliOQ l1yJ/VNG8NotUnxPBRcBo2C7Mpz7AbaKtXfjbC8kb1eOv8j/+7faKYllgFybZttd 3k4jHKrAXNUrAJLcoV/jynnurQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa/Tz7w NJ1kUcoHvK/u6Qus8e+zMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkp4zKVDSFkgPOTsDr/sP80eSE/iWdB6f7lA/yCPtw+uTcLq+W3NeU xxD4tafnx0NEidWUaLAlffZKFhPt7cPJEi4Hhb1Y3PHb8NGgjuJwuISGCJkgO5cN Av7hr9oVypBYYD0Frry2XYTtKMrbPjmy+yyimVLAhACKDAjuOqJxQq8uf0YxK6SU wxVO+7Wu9d3R0oASVc7ubgfvRgrwL/ZRu4vSnylFN3gsrnY4Jcc/DAggpXXFzHi7 ra4fMFPOAQHadsad1+iBJGA3GU+tyYMKXEoNdtR2m9Oe+4T6UGP+iFDE5cakEa9L bY05IfnNFWG9GD8jZ5Ct13BL9pYh5Mki -----END CERTIFICATE-----Generated at Sat May 17 11:37:00 2025 by rpki-client