$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: CChVxRhPBNbwgrSaQO9Lkwjj5Xii5wAJo49J+u0tVQg= Subject key identifier: BC:D8:66:1A:2D:6C:BD:8F:6C:AD:29:03:B3:6E:39:AD:20:91:66:96 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 03C5 Signing time: Tue 13 May 2025 00:26:37 +0000 Manifest this update: Tue 13 May 2025 00:26:36 +0000 Manifest next update: Tue 20 May 2025 00:26:36 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: jbKLFoG3DTbJqg5meOmRi3x7F+4tTZRXXmAhCuj5/ps=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: r+2gczfolioxdOOu1jOVrEWd+Ns5v4HYtipze2KFuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: May 13 00:26:36 2025 GMT Not After : May 20 00:26:36 2025 GMT Subject: CN=682291bc-b3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:17:46:51:31:7a:4f:b0:39:9f:ac:3e:69: 4c:e1:e0:b6:4a:fd:70:d3:02:fa:f0:8f:0a:9f:62: bb:74:3f:56:ad:3a:98:1c:33:a9:17:1f:33:56:2c: cd:41:5d:0c:2e:ac:88:c0:40:24:f9:ad:e3:97:fa: 97:97:c3:7c:85:87:05:d5:94:48:fa:6d:60:f0:f6: 2d:2f:78:e7:1c:5c:83:7b:99:bb:76:23:44:af:ad: 9f:78:c4:d4:de:f1:af:b9:dc:be:78:42:da:18:27: 40:c2:df:5f:0d:39:1f:ba:65:2b:9c:94:99:9c:fa: 2b:12:a1:de:24:c5:53:6b:e0:5f:8d:f7:9f:b7:86: 2a:87:67:d2:6e:e0:a0:4e:29:83:70:5b:77:f8:d6: 47:d4:88:dd:8f:03:e7:ab:96:8e:b7:8b:98:a1:ad: 02:5b:e7:fd:12:0c:77:0c:13:10:74:a6:ce:10:c1: 46:31:a2:8a:49:c8:d0:6f:ff:91:76:8f:d6:b2:d8: 8b:ff:0b:2a:13:21:0b:24:06:17:f9:75:e5:a1:d0: 28:27:62:ad:c8:f7:40:38:2c:84:a5:f0:61:44:c9: 60:17:0d:04:87:ef:a1:0e:14:c3:88:0d:02:10:56: e5:24:39:86:04:73:07:45:f2:07:db:8f:be:73:e0: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:66:1A:2D:6C:BD:8F:6C:AD:29:03:B3:6E:39:AD:20:91:66:96 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:06:ef:7b:64:2e:6b:1f:c3:26:94:47:6a:bc:b5:2a:e4:32: 46:62:40:74:06:81:1f:6d:72:27:7a:28:8e:af:db:4f:45:c9: 80:e2:9f:91:6a:94:55:9e:d3:3a:14:aa:99:dc:ca:1f:f3:32: d3:86:20:0c:12:98:77:c5:ab:d3:78:70:47:36:af:c9:65:df: 90:63:1e:5f:e2:6d:c3:e1:9a:87:c8:af:73:e2:2f:e0:05:b9: 83:41:2e:a4:22:2a:3c:64:9a:5e:95:72:31:4c:5d:b5:cc:60: 31:39:c9:ac:0b:c2:19:f8:66:ec:8d:53:44:c7:93:b6:6b:05: 11:d2:8c:56:e1:ee:69:a6:f8:83:43:06:a3:30:11:be:44:37: 09:74:38:e7:49:09:1d:d0:fc:f3:34:1d:ec:ab:cc:38:c3:fa: 12:47:73:7f:82:e3:b5:91:6f:93:63:8f:8b:e5:25:8b:d6:94: 30:63:c4:7b:ad:ba:82:48:e3:ad:25:6c:e0:aa:58:ce:3f:93: d2:e7:f8:81:f0:1d:a4:7c:4f:34:ec:a7:bf:48:90:0b:ba:c0: c7:0b:1c:34:45:94:e9:77:d6:b2:60:6b:82:5d:92:26:cd:3b: f1:5e:c8:ae:db:c6:4e:9f:50:0d:32:9b:fd:eb:b6:dc:4a:45: 08:53:01:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUwNTEzMDAyNjM2WhcNMjUwNTIwMDAyNjM2WjAYMRYwFAYD VQQDEw02ODIyOTFiYy1iM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzsXRlExek+wOZ+sPmlM4eC2Sv1w0wL68I8Kn2K7dD9WrTqYHDOpFx8zVizN QV0MLqyIwEAk+a3jl/qXl8N8hYcF1ZRI+m1g8PYtL3jnHFyDe5m7diNEr62feMTU 3vGvudy+eELaGCdAwt9fDTkfumUrnJSZnPorEqHeJMVTa+Bfjfeft4Yqh2fSbuCg TimDcFt3+NZH1IjdjwPnq5aOt4uYoa0CW+f9Egx3DBMQdKbOEMFGMaKKScjQb/+R do/WstiL/wsqEyELJAYX+XXlodAoJ2KtyPdAOCyEpfBhRMlgFw0Eh++hDhTDiA0C EFblJDmGBHMHRfIH24++c+B59QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzYZhot bL2PbK0pA7NuOa0gkWaWMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Bu97ZC5rH8MmlEdqvLUq5DJGYkB0BoEfbXIneiiOr9tPRcmA4p+R apRVntM6FKqZ3Mof8zLThiAMEph3xavTeHBHNq/JZd+QYx5f4m3D4ZqHyK9z4i/g BbmDQS6kIio8ZJpelXIxTF21zGAxOcmsC8IZ+GbsjVNEx5O2awUR0oxW4e5ppviD QwajMBG+RDcJdDjnSQkd0PzzNB3sq8w4w/oSR3N/guO1kW+TY4+L5SWL1pQwY8R7 rbqCSOOtJWzgqljOP5PS5/iB8B2kfE807Ke/SJALusDHCxw0RZTpd9ayYGuCXZIm zTvxXsiu28ZOn1ANMpv967bcSkUIUwHj -----END CERTIFICATE-----Generated at Wed May 14 04:53:55 2025 by rpki-client