$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: X6WzkuBwMcqF3ziOzJ7fVSNDK3c885zQuib6yVeTTP4= Subject key identifier: 19:64:A1:6D:9C:55:3B:2D:2F:82:83:EE:C1:47:30:C8:7A:58:B7:09 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 092C Signing time: Mon 12 May 2025 20:06:49 +0000 Manifest this update: Mon 12 May 2025 20:06:49 +0000 Manifest next update: Mon 19 May 2025 20:06:49 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: FPO0pm6P36yxrF33iUJL0kJrH861W7davy9XKF8OFfk=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: oKOcbNnwPGTy3q5emliwbRxX0Ls/8MFVWMAhcz5HBKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: May 12 20:06:49 2025 GMT Not After : May 19 20:06:49 2025 GMT Subject: CN=682254d9-1561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:c5:c1:6b:1d:f7:8a:d7:07:c0:67:d3:ca: 12:9d:1b:e8:5f:bc:85:23:b3:58:a8:53:0b:25:47: 5e:0a:16:4b:ca:97:05:c5:8e:e5:a1:57:9a:9d:df: 75:fb:fb:0e:ac:05:cc:e4:c4:8a:1d:53:d0:7e:f6: d1:f6:40:d6:7a:bd:95:0e:f0:65:74:39:4d:9a:34: 51:2e:d8:ea:ac:aa:eb:ab:e3:69:4a:35:8d:4f:20: d3:34:32:f9:d5:55:0a:1b:ae:eb:a5:fe:bb:7c:32: 1d:e4:43:c5:62:56:2f:b9:85:28:f9:1b:39:e5:17: ef:f9:08:36:c0:83:0b:53:c0:1d:7d:3a:95:9f:14: 86:02:64:fc:78:75:ba:23:5e:18:28:77:fa:01:be: 72:f4:6a:23:cf:9e:d5:e4:bf:ee:fa:d4:1b:0a:f2: db:7b:76:bc:00:39:7f:6c:fa:8a:43:c7:d0:bb:c2: 2a:01:2b:73:72:62:65:48:78:e5:c8:12:43:f3:b1: 82:83:a9:48:96:41:55:99:73:ea:bc:24:54:0e:2e: a0:50:b9:6b:46:15:df:06:dd:62:5c:0b:c3:d1:4f: 4b:af:25:ee:8a:a3:1e:02:0d:93:94:1c:df:78:b4: 31:96:50:0a:cd:b5:a9:26:00:95:4b:20:63:1e:3f: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:A1:6D:9C:55:3B:2D:2F:82:83:EE:C1:47:30:C8:7A:58:B7:09 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:dc:f3:cd:17:09:2a:1d:2a:2d:06:f4:9b:c7:74:b8:de:eb: 8f:a9:98:bf:e1:d3:23:c2:5a:53:e8:92:3b:47:ee:98:d6:7e: ce:2f:4e:15:04:3f:02:7d:4a:bf:2c:5f:b0:a3:25:7a:32:12: 5b:ae:83:0d:79:fe:57:dd:8b:74:0e:ed:c5:99:67:35:ea:d8: ba:ae:7b:ba:68:2b:f7:58:83:a0:1c:76:81:c4:13:7b:63:76: 90:ed:95:05:51:34:ce:55:bb:6b:48:48:05:0b:53:96:8d:e0: 36:15:25:de:30:4a:e3:c0:81:c3:da:cf:b7:31:19:3a:45:d2: 6c:1d:58:53:3c:44:19:a2:e1:c2:78:79:7b:c3:bd:6d:1f:ea: 4c:f1:d2:3d:c6:0a:92:5b:85:98:b6:8a:10:ea:4c:e6:0e:61: dc:41:22:3e:6d:17:76:61:3f:d2:cf:dd:cf:28:fb:a2:e3:4a: 54:0f:ff:c7:be:02:35:b0:21:5a:dc:fb:be:06:40:17:1a:98: 28:46:80:e9:ef:87:75:96:de:08:49:11:78:8f:f8:65:3f:69: 52:6d:36:e5:b8:f8:8f:c4:da:a9:74:14:ad:94:1a:e3:4b:6f: 6c:c6:b1:65:2e:c4:b4:9f:6d:26:df:69:0f:d5:2d:d9:49:47: 5e:24:2e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNTEyMjAwNjQ5WhcNMjUwNTE5MjAwNjQ5WjAYMRYwFAYD VQQDEw02ODIyNTRkOS0xNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwXFwWsd94rXB8Bn08oSnRvoX7yFI7NYqFMLJUdeChZLypcFxY7loVeand91 +/sOrAXM5MSKHVPQfvbR9kDWer2VDvBldDlNmjRRLtjqrKrrq+NpSjWNTyDTNDL5 1VUKG67rpf67fDId5EPFYlYvuYUo+Rs55Rfv+Qg2wIMLU8AdfTqVnxSGAmT8eHW6 I14YKHf6Ab5y9Gojz57V5L/u+tQbCvLbe3a8ADl/bPqKQ8fQu8IqAStzcmJlSHjl yBJD87GCg6lIlkFVmXPqvCRUDi6gULlrRhXfBt1iXAvD0U9LryXuiqMeAg2TlBzf eLQxllAKzbWpJgCVSyBjHj//MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlkoW2c VTstL4KD7sFHMMh6WLcJMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp3PPNFwkqHSotBvSbx3S43uuPqZi/4dMjwlpT6JI7R+6Y1n7OL04V BD8CfUq/LF+woyV6MhJbroMNef5X3Yt0Du3FmWc16ti6rnu6aCv3WIOgHHaBxBN7 Y3aQ7ZUFUTTOVbtrSEgFC1OWjeA2FSXeMErjwIHD2s+3MRk6RdJsHVhTPEQZouHC eHl7w71tH+pM8dI9xgqSW4WYtooQ6kzmDmHcQSI+bRd2YT/Sz93PKPui40pUD//H vgI1sCFa3Pu+BkAXGpgoRoDp74d1lt4ISRF4j/hlP2lSbTbluPiPxNqpdBStlBrj S29sxrFlLsS0n20m32kP1S3ZSUdeJC7Q -----END CERTIFICATE-----Generated at Wed May 14 20:30:36 2025 by rpki-client