$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: GHPHtADBJ5ZnJcUaovKCovxh5WoDPPoouW8ub6GKzBw= Subject key identifier: 88:8B:18:5A:BE:0A:03:79:91:31:A9:1E:A7:C7:52:32:A3:88:6E:8F Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 03AB Signing time: Tue 13 May 2025 00:31:37 +0000 Manifest this update: Tue 13 May 2025 00:31:37 +0000 Manifest next update: Tue 20 May 2025 00:31:37 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: /uDCC7UcrAs2+bm7Oty6hffWUHfIruV+f3lmWlXwt/M=) 2: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: oAqMSF81/AVYaU8nGd+cBMsrnw20XyD/T/zdIoEB4NE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: May 13 00:31:37 2025 GMT Not After : May 20 00:31:37 2025 GMT Subject: CN=682292e9-a401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:a2:83:b9:15:bb:3f:62:93:94:ae:15:49: 88:02:b5:9a:ea:57:1f:e1:38:59:f3:4d:80:84:38: a3:c1:c7:9d:53:18:ef:cb:98:e6:11:31:8d:40:3d: 74:15:ef:7d:0f:70:8f:08:48:a8:fb:9a:ad:69:2d: 24:91:78:ec:53:bc:50:bc:c9:0a:56:c8:ea:d3:54: ff:82:78:84:6e:73:e5:cb:09:49:e6:85:33:67:f8: 4e:14:4f:bd:e6:2a:a3:b7:59:d1:24:eb:76:4f:d3: 7b:b7:eb:b1:36:b7:ec:c4:72:c5:8d:ee:79:87:32: 6e:c5:b8:9c:38:f0:39:f7:9e:20:47:1e:06:ab:16: 3e:c8:63:e7:81:8f:26:01:72:8a:5b:5b:85:b9:4d: d6:0d:39:a2:9e:43:4d:6b:33:37:9a:f0:60:40:9f: 3b:26:73:84:a1:6c:49:8d:82:2a:5b:9d:16:56:e0: f6:b3:72:c2:67:ea:2a:7e:15:11:b6:79:f4:e8:03: 99:27:ae:ce:0b:05:4e:7a:e1:9b:b4:2e:26:ef:ba: f1:0f:bc:49:2c:d3:64:d8:4f:96:21:b1:99:71:2d: 7f:ee:0c:ec:d1:6c:98:9a:89:86:9a:26:1e:b4:b8: 77:9c:5b:f5:8f:d5:7a:1d:f9:66:cd:03:ca:1f:25: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8B:18:5A:BE:0A:03:79:91:31:A9:1E:A7:C7:52:32:A3:88:6E:8F X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9f:fd:6e:24:39:75:9d:42:24:27:bb:b3:b2:49:9d:28:e9: 15:dd:9a:da:33:92:8b:55:45:6f:3a:88:90:98:d9:05:38:7b: fb:92:28:cf:1b:a2:f0:e7:34:c2:6b:d8:50:39:d3:52:e3:a0: 9d:9c:f4:d9:dd:e8:e2:c3:06:f0:9e:4a:c7:78:06:8a:8a:ae: ed:a4:29:97:90:80:bb:60:e6:fe:2d:11:55:fb:46:44:35:bb: b3:ae:93:c5:f6:22:a8:13:a6:5a:27:be:83:6f:b6:e2:16:77: 06:f2:34:1f:9a:ea:df:13:13:f3:41:5a:87:34:72:19:f3:04: 66:98:2c:fc:f0:05:67:6e:3d:2b:90:01:f6:58:8e:a2:a4:0f: 43:f9:a2:b4:b6:9c:f6:e3:3e:d7:3c:d1:fe:19:fe:c4:cc:26: b4:28:5d:c6:94:a3:7b:dd:ec:5a:35:f0:42:7c:10:31:a4:b7: db:f3:45:65:ff:76:ee:03:32:42:3e:fb:aa:cc:55:4a:2e:4c: 05:85:60:b8:7d:b2:b0:1f:2e:d3:65:04:02:5a:42:59:81:1d: f3:89:2b:3b:7c:ea:cd:a2:ac:15:54:e4:14:3b:33:dc:6e:62: f8:c6:19:98:a7:98:85:86:7d:4a:bc:31:e8:74:e3:be:2c:3d: d8:73:9a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNTEzMDAzMTM3WhcNMjUwNTIwMDAzMTM3WjAYMRYwFAYD VQQDEw02ODIyOTJlOS1hNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Liig7kVuz9ik5SuFUmIArWa6lcf4ThZ802AhDijwcedUxjvy5jmETGNQD10 Fe99D3CPCEio+5qtaS0kkXjsU7xQvMkKVsjq01T/gniEbnPlywlJ5oUzZ/hOFE+9 5iqjt1nRJOt2T9N7t+uxNrfsxHLFje55hzJuxbicOPA5954gRx4GqxY+yGPngY8m AXKKW1uFuU3WDTminkNNazM3mvBgQJ87JnOEoWxJjYIqW50WVuD2s3LCZ+oqfhUR tnn06AOZJ67OCwVOeuGbtC4m77rxD7xJLNNk2E+WIbGZcS1/7gzs0WyYmomGmiYe tLh3nFv1j9V6HflmzQPKHyVLCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiLGFq+ CgN5kTGpHqfHUjKjiG6PMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYn/1uJDl1nUIkJ7uzskmdKOkV3ZraM5KLVUVvOoiQmNkFOHv7kijP G6Lw5zTCa9hQOdNS46CdnPTZ3ejiwwbwnkrHeAaKiq7tpCmXkIC7YOb+LRFV+0ZE NbuzrpPF9iKoE6ZaJ76Db7biFncG8jQfmurfExPzQVqHNHIZ8wRmmCz88AVnbj0r kAH2WI6ipA9D+aK0tpz24z7XPNH+Gf7EzCa0KF3GlKN73exaNfBCfBAxpLfb80Vl /3buAzJCPvuqzFVKLkwFhWC4fbKwHy7TZQQCWkJZgR3ziSs7fOrNoqwVVOQUOzPc bmL4xhmYp5iFhn1KvDHodOO+LD3Yc5r6 -----END CERTIFICATE-----Generated at Wed May 14 08:28:55 2025 by rpki-client