$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json) Hash identifier: 3VcbbnLSDuo01viyY+aDKHZRc4Cqfe3cXddbNw0ICq8= Subject key identifier: 43:FE:CB:8E:15:B3:9F:CC:4E:39:B4:E2:D3:2D:15:1C:7D:EA:DF:36 Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Certificate issuer: /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft Manifest number: 04E3 Signing time: Mon 12 May 2025 23:33:01 +0000 Manifest this update: Mon 12 May 2025 23:33:01 +0000 Manifest next update: Mon 19 May 2025 23:33:01 +0000 Files and hashes: 1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: qNJvFiQi0haJeMEVyvbHuMLIy50IQ1dCr720U4wvh7s=) 2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Validity Not Before: May 12 23:33:01 2025 GMT Not After : May 19 23:33:01 2025 GMT Subject: CN=6822852d-b9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f0:0d:a0:f7:4f:71:90:12:00:b5:68:ef:ca: cf:09:90:3c:5b:69:a0:75:be:ba:1d:9c:d8:59:3f: 85:0d:c3:31:e4:b5:d9:cf:ec:bc:18:5a:da:6f:3d: 1c:1d:d5:97:e9:ba:0d:eb:2d:f6:7a:79:1c:56:33: ab:ef:a8:8d:29:9f:c3:e3:9b:95:3a:3b:77:96:b2: 35:33:78:b3:01:c9:ed:6e:0e:86:41:06:cd:8e:2e: 1e:37:a1:fe:04:bc:85:9f:7b:97:ba:8f:12:ab:3a: 58:c7:75:d2:b4:a2:98:f0:b1:08:80:b4:ac:d5:0f: 3f:6b:f0:71:ed:18:63:1e:f1:af:15:cb:47:07:df: 81:64:62:3a:1e:22:1f:d8:ce:0a:32:86:f4:42:aa: 33:5f:af:33:a1:13:38:17:8a:2c:3f:65:6b:b9:b6: b0:1a:be:36:e8:09:7e:77:82:04:25:bc:aa:c5:63: 93:c5:e0:6f:10:6b:15:17:38:8b:0a:44:7c:6a:8e: f6:20:45:e5:c7:1f:27:d0:9b:f3:0e:0c:84:c5:ec: b6:1a:09:46:f7:78:0e:61:cd:12:65:4b:5e:7c:89: 91:03:88:3c:e5:87:e5:09:db:eb:0f:e2:bd:32:45: e6:2a:ad:cd:e9:34:50:37:68:81:31:9d:91:72:7b: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:CB:8E:15:B3:9F:CC:4E:39:B4:E2:D3:2D:15:1C:7D:EA:DF:36 X509v3 Authority Key Identifier: keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a1:f4:cc:b8:ae:f4:31:a0:40:3a:0a:29:2e:ec:cd:7b:17: f1:c4:41:b0:ab:5d:8d:b1:f9:c4:bb:82:76:e2:2f:f2:61:4f: 84:9e:86:e2:3e:7c:0b:f4:37:fc:2b:6a:f0:38:ed:4a:35:60: b4:bb:c2:75:32:a1:e4:c4:bd:07:73:2c:88:75:2f:50:9b:1a: 74:66:4b:0e:8a:bb:4d:b8:e8:09:0e:61:4d:67:ab:e8:eb:d1: ac:df:a3:58:ca:b7:76:0c:b5:74:99:9d:91:ab:4b:f1:01:f4: a4:ad:21:dc:f7:69:7b:8e:fc:79:c4:c6:48:9f:26:83:08:7e: 82:e2:e4:0f:10:70:9e:a5:0b:d7:cb:b1:bc:19:89:80:4f:ce: d3:de:ec:ff:c6:d9:ee:6f:56:76:ad:49:2f:63:3f:94:9d:6d: 2f:2d:26:4b:8a:03:94:67:47:39:ef:2c:45:cc:d0:d6:c7:e6: 2b:81:af:41:35:f0:bc:8b:51:cf:ce:d3:f8:0b:e6:cb:d5:8c: d1:24:15:77:90:e0:b7:32:84:3b:bb:4f:23:a2:58:5c:b6:b6: 92:5e:cd:2e:67:38:21:23:2a:94:56:c5:8f:df:11:04:d6:b8: 50:4c:41:2a:4f:f2:82:47:1e:1b:9a:7d:c0:3b:31:4a:07:cb: 9f:21:6c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF QTkxOTNCNjAwHhcNMjUwNTEyMjMzMzAxWhcNMjUwNTE5MjMzMzAxWjAYMRYwFAYD VQQDEw02ODIyODUyZC1iOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9PANoPdPcZASALVo78rPCZA8W2mgdb66HZzYWT+FDcMx5LXZz+y8GFrabz0c HdWX6boN6y32enkcVjOr76iNKZ/D45uVOjt3lrI1M3izAcntbg6GQQbNji4eN6H+ BLyFn3uXuo8SqzpYx3XStKKY8LEIgLSs1Q8/a/Bx7RhjHvGvFctHB9+BZGI6HiIf 2M4KMob0QqozX68zoRM4F4osP2VrubawGr426Al+d4IEJbyqxWOTxeBvEGsVFziL CkR8ao72IEXlxx8n0JvzDgyExey2GglG93gOYc0SZUtefImRA4g85YflCdvrD+K9 MkXmKq3N6TRQN2iBMZ2RcnujtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP+y44V s5/MTjm04tMtFRx96t82MB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3 NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZofTMuK70MaBAOgopLuzNexfxxEGwq12NsfnEu4J24i/yYU+Enobi PnwL9Df8K2rwOO1KNWC0u8J1MqHkxL0HcyyIdS9Qmxp0ZksOirtNuOgJDmFNZ6vo 69Gs36NYyrd2DLV0mZ2Rq0vxAfSkrSHc92l7jvx5xMZInyaDCH6C4uQPEHCepQvX y7G8GYmAT87T3uz/xtnub1Z2rUkvYz+UnW0vLSZLigOUZ0c57yxFzNDWx+Yrga9B NfC8i1HPztP4C+bL1YzRJBV3kOC3MoQ7u08jolhctraSXs0uZzghIyqUVsWP3xEE 1rhQTEEqT/KCRx4bmn3AOzFKB8ufIWze -----END CERTIFICATE-----Generated at Tue May 13 04:43:18 2025 by rpki-client