$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: MSVEQgSroDSeL+FazVwvMw0yOjaAYzARs7TYny14TBU= Subject key identifier: FD:6F:5F:AA:C1:A4:9E:E5:29:45:95:66:90:7C:ED:8D:15:31:82:75 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: DF Signing time: Sun 11 May 2025 04:24:15 +0000 Manifest this update: Sun 11 May 2025 04:24:15 +0000 Manifest next update: Sun 18 May 2025 04:24:15 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: w6GuLwhm2CdK+8LR9HAiR0pZjMdF3faeb1u0wGRRfoQ=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: May 11 04:24:15 2025 GMT Not After : May 18 04:24:15 2025 GMT Subject: CN=6820266f-1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:cf:af:a8:35:77:22:8d:ed:dd:d5:dc:68: 67:8f:ea:42:62:bf:f4:62:75:83:6b:1a:a0:9e:d9: 33:6f:11:04:a8:c5:95:e6:91:3e:b3:21:59:f7:ef: 00:36:55:ea:fd:ed:72:67:31:8b:5c:a7:90:aa:88: a2:32:cf:47:8b:c9:a6:1a:2f:89:d2:6e:b3:88:d6: 4b:09:68:e1:7e:1e:e2:d1:5c:b5:10:a2:d6:74:38: 4b:37:86:e0:9a:28:58:d5:5c:f0:af:19:43:97:46: d3:a3:5d:aa:4f:d4:90:e9:fa:65:30:a8:06:d3:75: 34:ec:23:40:e9:18:29:ac:81:f8:80:61:63:05:9d: 2d:2e:19:92:6d:41:97:eb:de:23:57:15:89:65:15: fd:a6:b7:0c:f5:a7:69:f9:a6:22:df:1b:e8:13:29: 42:26:6e:10:f4:80:56:d8:bd:6f:77:0d:79:ef:93: f9:3e:73:b8:3f:a1:d5:0e:0e:55:7a:41:43:69:bc: fb:9d:cb:86:47:cd:0f:73:01:49:57:7f:3a:ea:92: 4c:93:a7:04:bd:cc:35:68:34:c4:26:7f:14:8d:cb: ef:5a:dd:01:08:14:da:6a:03:85:37:b2:9c:89:53: 7e:e0:c4:82:21:01:57:73:07:7a:86:2a:16:d4:08: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:5F:AA:C1:A4:9E:E5:29:45:95:66:90:7C:ED:8D:15:31:82:75 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:81:b6:b7:a2:1b:a0:70:c1:a3:be:c0:bf:f9:be:e6:97:1f: 76:ee:a0:7b:52:30:e2:fc:82:0d:f0:bc:a0:0b:f1:6d:92:3c: 95:bb:f1:66:6d:a8:f9:c8:e3:8b:0a:e6:d8:79:f1:2d:43:01: c3:c1:33:17:66:e8:f4:44:8e:2f:01:1c:6f:63:80:33:a2:56: d9:aa:51:c5:d9:f2:2f:10:eb:ff:d1:bc:d7:5b:17:24:6f:c5: b1:1f:63:1b:95:48:e8:73:ea:95:0e:0c:12:2a:4d:aa:7f:33: a3:0e:73:50:97:61:ff:84:64:55:fb:6b:d9:51:fc:c2:cc:ba: 8f:5c:b5:df:9f:b8:c7:98:c3:1f:e6:27:7e:ed:cc:ac:d9:c3: 11:a2:2b:9a:b7:31:ae:37:15:4f:59:a2:97:88:2c:11:d7:c1: e2:7e:e9:ff:f2:8c:bd:bc:6f:ea:78:03:4a:53:28:b1:a4:28: 82:2c:be:50:dd:4c:d5:26:4f:2f:0d:bb:be:b7:86:ba:52:6f: 5f:6d:a6:ad:36:2e:6c:2a:86:32:08:d6:4d:b4:9a:99:f5:bf: 52:5f:b2:6f:70:70:86:08:4c:3c:61:4d:c5:27:d1:2e:ad:4d: 8a:80:83:f6:0f:28:4b:a5:17:f0:ff:9b:46:c2:13:fe:08:75: af:ab:62:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNTExMDQyNDE1WhcNMjUwNTE4MDQyNDE1WjAYMRYwFAYD VQQDEw02ODIwMjY2Zi0xODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjDPr6g1dyKN7d3V3Ghnj+pCYr/0YnWDaxqgntkzbxEEqMWV5pE+syFZ9+8A NlXq/e1yZzGLXKeQqoiiMs9Hi8mmGi+J0m6ziNZLCWjhfh7i0Vy1EKLWdDhLN4bg mihY1VzwrxlDl0bTo12qT9SQ6fplMKgG03U07CNA6RgprIH4gGFjBZ0tLhmSbUGX 694jVxWJZRX9prcM9adp+aYi3xvoEylCJm4Q9IBW2L1vdw1575P5PnO4P6HVDg5V ekFDabz7ncuGR80PcwFJV3866pJMk6cEvcw1aDTEJn8UjcvvWt0BCBTaagOFN7Kc iVN+4MSCIQFXcwd6hioW1AiADQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1vX6rB pJ7lKUWVZpB87Y0VMYJ1MB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVgba3ohugcMGjvsC/+b7mlx927qB7UjDi/IIN8LygC/FtkjyVu/Fm baj5yOOLCubYefEtQwHDwTMXZuj0RI4vARxvY4AzolbZqlHF2fIvEOv/0bzXWxck b8WxH2MblUjoc+qVDgwSKk2qfzOjDnNQl2H/hGRV+2vZUfzCzLqPXLXfn7jHmMMf 5id+7cys2cMRoiuatzGuNxVPWaKXiCwR18Hifun/8oy9vG/qeANKUyixpCiCLL5Q 3UzVJk8vDbu+t4a6Um9fbaatNi5sKoYyCNZNtJqZ9b9SX7JvcHCGCEw8YU3FJ9Eu rU2KgIP2DyhLpRfw/5tGwhP+CHWvq2Kf -----END CERTIFICATE-----Generated at Mon May 12 23:19:47 2025 by rpki-client