$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft File: gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json) Hash identifier: 3fnV5WB6AAAptXE1gUs6caRHAhZU+kt7aaf+cWGK+zI= Subject key identifier: FE:0B:C1:25:24:D4:E3:45:F7:52:81:94:FE:A8:C1:F3:4E:E9:2D:79 Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft Manifest number: 0715 Signing time: Wed 14 May 2025 21:55:14 +0000 Manifest this update: Wed 14 May 2025 21:55:14 +0000 Manifest next update: Wed 21 May 2025 21:55:14 +0000 Files and hashes: 1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: NgCYsygh0AC/brPFh9ROQrFcv1l8/Bg0q8D0mrzsrS0=) 2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: May 14 21:55:14 2025 GMT Not After : May 21 21:55:14 2025 GMT Subject: CN=68251142-0e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:aa:86:19:82:a7:3f:08:6e:44:1b:c3:06: 57:64:b8:8b:f2:8d:36:c0:91:60:0d:ed:7c:5d:d5: 31:1b:dc:8e:20:83:b9:13:b9:19:7f:3b:33:32:3e: 12:92:11:22:18:2d:dd:72:fa:9b:69:5d:02:66:69: 67:f5:9a:64:3d:a0:68:29:83:c3:3f:f2:6b:7a:cc: af:34:16:1d:5f:a9:bc:bf:36:a7:07:19:20:60:c3: 6f:0c:ad:a2:15:83:97:ea:b2:c6:9a:9b:34:f7:14: b7:a4:23:04:a7:be:8f:0c:d3:21:fa:51:40:c9:6c: 53:3f:b5:e3:1f:d5:8f:fd:05:39:41:64:25:8f:bf: af:fa:5c:ff:6f:8a:3f:8e:fd:da:7a:f8:95:55:5a: 6b:d4:ef:91:1f:e6:8e:87:6d:e9:ad:f9:af:cb:50: bf:3c:a3:f4:63:e0:2f:c4:e9:af:c5:2c:2e:37:94: b2:be:b3:d2:ed:80:ce:d1:fc:b3:db:1d:96:51:a1: d8:79:08:82:84:ec:26:79:05:0e:67:e8:98:de:0c: e8:b8:12:a8:5b:d2:b3:6b:d9:df:5d:f6:c4:3f:92: 76:74:5f:e4:aa:3f:e4:a6:f0:f7:99:75:76:df:1c: 9a:9d:fe:19:be:38:d3:3f:56:95:92:6b:e7:46:b3: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0B:C1:25:24:D4:E3:45:F7:52:81:94:FE:A8:C1:F3:4E:E9:2D:79 X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:3f:e2:82:fc:e3:97:58:13:5a:f4:fd:e4:1c:af:ef:8f:ea: 76:ea:2e:92:97:f8:da:eb:54:87:ff:34:e2:c9:bf:c6:af:a0: 63:51:cd:dc:b3:22:26:03:29:7b:77:06:7c:75:68:5f:84:a2: c7:c5:89:64:87:f2:5e:20:73:21:5c:6d:9b:75:09:a6:cc:0c: cb:c5:cc:65:49:3d:5b:77:df:ce:1e:8e:13:dd:08:78:3f:14: 4d:2a:36:32:9e:a7:9e:3a:42:8c:24:89:85:6d:1e:b1:09:b7: 9a:30:37:77:c3:f5:23:7f:cd:0c:a6:e5:7d:5f:b7:3c:8c:b5: 40:e4:bf:03:7d:04:97:ef:f4:bd:67:1d:41:59:9a:54:cc:dc: 96:f1:fa:c2:70:09:08:49:b0:ed:58:d3:d4:67:6a:3d:56:39: c6:fd:75:6b:4f:55:4a:52:dd:9a:8f:cb:81:3e:6f:f1:49:67: 72:4f:34:69:0c:7b:c0:7f:50:bd:a5:0f:ea:0c:eb:7e:5d:22: 78:09:d3:6b:a0:c3:63:4f:60:94:cc:d6:5f:ce:84:4b:73:77: 7e:d5:f0:5e:86:62:28:11:47:60:e1:b9:a0:f8:ed:48:c4:96: 76:88:50:9f:f6:46:a1:ec:a3:6c:35:a8:58:18:8c:8d:60:36: 5d:e9:c3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjUwNTE0MjE1NTE0WhcNMjUwNTIxMjE1NTE0WjAYMRYwFAYD VQQDEw02ODI1MTE0Mi0wZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutWqhhmCpz8IbkQbwwZXZLiL8o02wJFgDe18XdUxG9yOIIO5E7kZfzszMj4S khEiGC3dcvqbaV0CZmln9ZpkPaBoKYPDP/JresyvNBYdX6m8vzanBxkgYMNvDK2i FYOX6rLGmps09xS3pCMEp76PDNMh+lFAyWxTP7XjH9WP/QU5QWQlj7+v+lz/b4o/ jv3aeviVVVpr1O+RH+aOh23prfmvy1C/PKP0Y+AvxOmvxSwuN5SyvrPS7YDO0fyz 2x2WUaHYeQiChOwmeQUOZ+iY3gzouBKoW9Kza9nfXfbEP5J2dF/kqj/kpvD3mXV2 3xyanf4ZvjjTP1aVkmvnRrO9ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4LwSUk 1ONF91KBlP6owfNO6S15MB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR QXlWU3hDYkVOVFBzcklOUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxP+KC/OOXWBNa9P3kHK/vj+p26i6Sl/ja61SH/zTiyb/Gr6BjUc3c syImAyl7dwZ8dWhfhKLHxYlkh/JeIHMhXG2bdQmmzAzLxcxlST1bd9/OHo4T3Qh4 PxRNKjYynqeeOkKMJImFbR6xCbeaMDd3w/Ujf80MpuV9X7c8jLVA5L8DfQSX7/S9 Zx1BWZpUzNyW8frCcAkISbDtWNPUZ2o9VjnG/XVrT1VKUt2aj8uBPm/xSWdyTzRp DHvAf1C9pQ/qDOt+XSJ4CdNroMNjT2CUzNZfzoRLc3d+1fBehmIoEUdg4bmg+O1I xJZ2iFCf9kah7KNsNahYGIyNYDZd6cNY -----END CERTIFICATE-----Generated at Thu May 15 06:42:18 2025 by rpki-client