$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json) Hash identifier: 9h1mMXYqWxSKxum84zLGwBW38/vBjqTrSqhHHUBTlPA= Subject key identifier: A9:53:40:93:89:09:B1:FD:8E:9A:64:57:22:08:B7:1A:6C:94:C3:95 Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft Manifest number: 0653 Signing time: Sun 04 May 2025 22:10:13 +0000 Manifest this update: Sun 04 May 2025 22:10:12 +0000 Manifest next update: Sun 11 May 2025 22:10:12 +0000 Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 1qtdklowO8Cx76QXYAexWAfltfPTPjCSW6s5jLMkkfc=) 2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: May 4 22:10:12 2025 GMT Not After : May 11 22:10:12 2025 GMT Subject: CN=6817e5c5-8345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:a9:3f:0f:99:74:cf:35:b8:a2:48:ee:1c: 08:64:4c:0e:48:84:68:fa:69:38:3a:ba:a9:0f:e8: 0d:b1:6d:15:5f:4b:f1:3c:93:16:a6:e6:a6:c0:a3: 4b:7e:77:30:9c:29:ee:72:55:e0:22:7d:1f:ef:50: dc:3e:cf:89:82:0a:5c:b9:b2:8c:83:2a:b6:a2:af: d9:5d:f6:4c:e4:b6:ba:3f:96:52:74:a8:2b:11:db: 65:d4:f7:9d:98:74:0c:37:65:c4:b2:19:69:26:e0: 9e:4d:61:c7:e2:1d:26:2c:ff:fa:52:db:c8:0b:dd: 5f:8c:6c:0b:25:5b:c3:cb:d3:69:69:78:e6:27:a0: 20:cf:5d:53:e3:af:87:f5:07:d7:68:7d:f5:b3:45: 58:59:33:27:67:b7:c0:ee:54:e3:9b:aa:68:29:42: 0a:3a:60:49:a1:99:23:bf:68:f6:73:ef:2c:33:e7: 03:af:bd:d4:5d:7c:7d:89:fd:fe:85:3c:bd:1f:1e: 88:c9:0a:5e:09:5a:a2:d4:b0:ca:9d:54:c2:70:9b: f8:7f:19:e0:5b:ea:53:43:5f:5e:c8:83:2e:5c:7e: 7a:9e:9f:f2:ce:a4:f3:ae:27:f6:43:5c:c7:cb:59: bd:d0:61:aa:a3:db:d8:b1:aa:e1:60:b3:ed:84:d9: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:40:93:89:09:B1:FD:8E:9A:64:57:22:08:B7:1A:6C:94:C3:95 X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:17:ff:30:f7:2a:93:08:e8:93:21:83:87:57:e1:e0:99:7c: 4a:3e:46:ba:52:53:87:eb:89:81:f9:8e:4e:bb:14:4b:71:71: c2:12:e2:47:4f:8a:03:d1:bc:c4:d9:9d:9b:0b:b3:2a:f4:07: c6:81:74:cf:fb:20:1b:fc:d8:8b:5f:09:0b:be:4d:e8:31:0d: 91:45:aa:17:4a:57:e8:1c:37:be:70:e0:c9:37:7c:81:3e:03: d2:dd:4d:d8:db:ac:86:53:d6:10:85:41:b6:01:a0:37:10:22: a8:8b:bb:7d:0c:7a:7f:53:e6:e9:a0:ff:b8:f3:13:18:8d:04: 94:fa:77:02:88:b3:09:b4:17:18:e5:6f:8d:fb:66:cd:55:ae: 84:48:67:2c:89:12:b8:10:1a:72:0d:0f:5b:6d:42:fd:27:f9: 38:d0:d6:f8:61:79:b9:0b:9e:fd:e1:9f:ca:74:12:be:03:bd: d0:e3:98:af:b4:08:e0:2a:a7:94:b8:27:82:35:c0:55:74:4a: 5a:65:e4:98:ff:ce:4e:a3:ab:0f:cd:01:a4:cb:68:9d:52:d8: 9a:5a:24:4d:37:4e:16:0b:b1:ce:8f:45:0a:70:63:9d:ef:90: d8:12:04:1c:e9:92:e7:fe:b9:17:a6:b3:21:df:6b:fa:78:c4: f9:28:e3:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwNTA0MjIxMDEyWhcNMjUwNTExMjIxMDEyWjAYMRYwFAYD VQQDEw02ODE3ZTVjNS04MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj+pPw+ZdM81uKJI7hwIZEwOSIRo+mk4OrqpD+gNsW0VX0vxPJMWpuamwKNL fncwnCnuclXgIn0f71DcPs+JggpcubKMgyq2oq/ZXfZM5La6P5ZSdKgrEdtl1Ped mHQMN2XEshlpJuCeTWHH4h0mLP/6UtvIC91fjGwLJVvDy9NpaXjmJ6Agz11T46+H 9QfXaH31s0VYWTMnZ7fA7lTjm6poKUIKOmBJoZkjv2j2c+8sM+cDr73UXXx9if3+ hTy9Hx6IyQpeCVqi1LDKnVTCcJv4fxngW+pTQ19eyIMuXH56np/yzqTzrif2Q1zH y1m90GGqo9vYsarhYLPthNmB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlTQJOJ CbH9jppkVyIItxpslMOVMB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83 Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzF/8w9yqTCOiTIYOHV+HgmXxKPka6UlOH64mB+Y5OuxRLcXHCEuJH T4oD0bzE2Z2bC7Mq9AfGgXTP+yAb/NiLXwkLvk3oMQ2RRaoXSlfoHDe+cODJN3yB PgPS3U3Y26yGU9YQhUG2AaA3ECKoi7t9DHp/U+bpoP+48xMYjQSU+ncCiLMJtBcY 5W+N+2bNVa6ESGcsiRK4EBpyDQ9bbUL9J/k40Nb4YXm5C5794Z/KdBK+A73Q45iv tAjgKqeUuCeCNcBVdEpaZeSY/85Oo6sPzQGky2idUtiaWiRNN04WC7HOj0UKcGOd 75DYEgQc6ZLn/rkXprMh32v6eMT5KOO9 -----END CERTIFICATE-----Generated at Mon May 5 13:24:15 2025 by rpki-client