$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft File: GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json) Hash identifier: fIDzaNOxDihsnqGSPnNl2zbFY5kRgDMTZUv4jwlyFfQ= Subject key identifier: 4E:37:60:B1:3D:EE:1F:B0:30:56:28:E4:E7:23:1E:58:7A:C7:79:88 Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 Certificate issuer: /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft Manifest number: 0138 Signing time: Fri 09 May 2025 03:34:49 +0000 Manifest this update: Fri 09 May 2025 03:34:49 +0000 Manifest next update: Fri 16 May 2025 03:34:49 +0000 Files and hashes: 1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: qtGq2AWLRwEStYNDwkpC/TF4MsmV30z3AZkAh25rrgc=) 2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: iKZhrYsqwja6p9Jg0/rXm6hAG4LxSI3ekb53k0lCuBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382 Validity Not Before: May 9 03:34:49 2025 GMT Not After : May 16 03:34:49 2025 GMT Subject: CN=681d77d9-7960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:28:93:40:99:d9:f1:75:0b:be:49:6e:bb: 3e:47:32:70:80:3d:74:00:78:5d:6c:8f:24:5f:06: ad:62:76:c7:40:2e:32:25:ff:26:78:fc:a7:c1:39: 51:1b:e2:96:2c:84:91:51:b6:a7:ea:8b:75:08:bf: d5:3a:32:42:78:35:d7:f5:52:c9:7e:ba:2a:79:e9: 00:20:d8:24:ef:1e:f2:38:ba:1f:1a:a2:59:2c:7f: 47:48:c9:fd:65:dd:28:1f:fa:2c:40:fa:24:6d:ea: 2e:b0:5d:c4:e1:8d:e0:47:df:1a:af:31:04:28:8d: 31:71:3c:a1:da:d9:2f:1a:64:1d:dc:a4:0c:44:b1: 90:9d:c8:f0:e7:43:bc:2c:47:a7:69:6b:b8:f3:47: 96:58:c5:dd:21:01:5a:e0:3e:99:97:1e:d4:ab:3d: 1f:77:86:8e:fb:2d:cd:7c:ba:ae:30:a6:7b:7a:d2: 4d:83:61:22:f4:c0:58:41:f2:05:dd:c1:3d:bf:36: 44:e8:2a:0f:9d:88:96:fb:15:1b:9f:c5:f1:81:cd: c5:5b:fd:db:8b:26:df:ce:e9:2c:c0:29:da:c1:12: e3:b6:6c:82:4b:ee:29:82:3e:2c:da:88:94:28:c8: f4:e5:4f:dc:26:e6:fd:17:69:29:51:4e:f6:87:73: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:37:60:B1:3D:EE:1F:B0:30:56:28:E4:E7:23:1E:58:7A:C7:79:88 X509v3 Authority Key Identifier: keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1c:5b:17:48:d5:d8:73:f9:cf:d5:eb:18:f7:c1:7c:f7:0f: b9:3d:c6:63:e9:8a:5c:88:a3:ef:31:4d:e6:7b:cc:f4:62:1a: 93:3d:09:24:5d:c7:ea:6b:9f:e8:74:5d:6e:19:a8:17:44:2f: b1:12:b7:59:e8:3b:ce:5e:b6:84:49:5b:f6:eb:64:5f:0e:1d: bb:fa:7e:a4:d2:8d:30:07:af:29:22:8f:13:94:8b:e9:0e:e4: e5:c6:ef:c5:bc:1b:51:a2:01:3e:e9:ee:2f:09:89:67:76:57: bc:38:85:f4:69:65:86:16:f5:e7:18:87:9c:19:98:9b:c9:c6: 99:7f:f8:03:e9:1d:1f:4c:4b:71:e9:f5:e0:d9:e3:17:c0:0d: f4:8f:f7:dd:98:0e:17:36:1a:e3:4b:29:ec:15:5a:c5:bd:88: a6:ab:25:d7:6b:5e:48:0c:bd:2f:6a:94:20:48:d8:4a:13:47: 8d:21:aa:83:fe:31:3e:42:58:83:b6:b6:77:50:b1:20:12:ef: 6a:cd:d7:8f:9a:04:2f:ec:a1:e1:18:0d:f0:a6:d6:7c:01:c6: db:cd:5f:35:6b:13:2f:a9:9f:88:92:ba:9b:6b:80:6a:ee:d3: 96:51:1a:50:ff:ab:6f:70:50:69:f4:92:1f:af:58:a2:d9:71: 73:2b:50:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy MjZBMzIzODIwHhcNMjUwNTA5MDMzNDQ5WhcNMjUwNTE2MDMzNDQ5WjAYMRYwFAYD VQQDEw02ODFkNzdkOS03OTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWsok0CZ2fF1C75Jbrs+RzJwgD10AHhdbI8kXwatYnbHQC4yJf8mePynwTlR G+KWLISRUban6ot1CL/VOjJCeDXX9VLJfroqeekAINgk7x7yOLofGqJZLH9HSMn9 Zd0oH/osQPokbeousF3E4Y3gR98arzEEKI0xcTyh2tkvGmQd3KQMRLGQncjw50O8 LEenaWu480eWWMXdIQFa4D6Zlx7Uqz0fd4aO+y3NfLquMKZ7etJNg2Ei9MBYQfIF 3cE9vzZE6CoPnYiW+xUbn8Xxgc3FW/3biybfzukswCnawRLjtmyCS+4pgj4s2oiU KMj05U/cJub9F2kpUU72h3MWKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE43YLE9 7h+wMFYo5OcjHlh6x3mIMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2 Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDFDMy9GQjcxQzU2NjU2Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJY d1BDNDBtTFM1ZFlpYWpJNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaHFsXSNXYc/nP1esY98F89w+5PcZj6YpciKPvMU3me8z0YhqTPQkk Xcfqa5/odF1uGagXRC+xErdZ6DvOXraESVv262RfDh27+n6k0o0wB68pIo8TlIvp DuTlxu/FvBtRogE+6e4vCYlndle8OIX0aWWGFvXnGIecGZibycaZf/gD6R0fTEtx 6fXg2eMXwA30j/fdmA4XNhrjSynsFVrFvYimqyXXa15IDL0vapQgSNhKE0eNIaqD /jE+QliDtrZ3ULEgEu9qzdePmgQv7KHhGA3wptZ8AcbbzV81axMvqZ+Ikrqba4Bq 7tOWURpQ/6tvcFBp9JIfr1ii2XFzK1AA -----END CERTIFICATE-----Generated at Fri May 9 12:28:52 2025 by rpki-client