$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft File: gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json) Hash identifier: L+dUPwmh+zJP3Vhkl1LP1kpFM3lZ52Evnc98N0vGfns= Subject key identifier: 74:1A:2C:CF:A5:27:AB:3A:DD:F1:B3:98:51:D4:0D:D8:C9:1E:E9:9C Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF Certificate issuer: /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft Manifest number: 02B8 Signing time: Fri 25 Apr 2025 01:12:09 +0000 Manifest this update: Fri 25 Apr 2025 01:12:09 +0000 Manifest next update: Fri 02 May 2025 01:12:09 +0000 Files and hashes: 1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: LbQNmnzVR1hkawQKj+2MNMH4qc/LFU5ldIPJA8zRIOU=) 2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: rj+UC+zA9sE5Q8EazPPN8LHfCTVfMALfkukIKXKN97M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF Validity Not Before: Apr 25 01:12:09 2025 GMT Not After : May 2 01:12:09 2025 GMT Subject: CN=680ae169-1b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:f5:16:a5:b0:de:c3:76:4d:e1:02:bc:26: a0:a0:b1:7f:7f:86:16:62:3e:16:7c:24:7c:78:b2: 28:52:ec:55:07:23:59:a0:87:7b:81:7b:2a:cc:47: e6:8f:1f:dc:ae:9b:37:7e:56:a3:b4:9f:cb:81:cf: e4:13:0d:cf:ab:ba:a3:22:11:cc:fe:30:5a:bc:a8: fa:58:79:18:a6:32:d2:c4:33:25:27:5a:20:d9:b9: 24:28:e3:a7:e3:f9:ea:eb:1d:0a:75:1b:ba:e9:df: 3b:cf:56:d2:82:09:d6:83:23:d0:4b:b2:ca:52:f9: 3c:9e:03:ed:95:01:fd:82:8c:4a:0a:d2:25:e8:e0: ac:f9:17:be:ff:58:71:f5:53:d5:65:f7:4d:57:ea: 61:bb:e0:aa:ae:75:69:42:a3:47:7a:dd:54:af:57: d4:57:06:da:0c:b8:17:33:54:84:c8:21:eb:0b:7f: ca:8d:51:46:c5:06:63:f9:99:2a:7d:fc:9a:e7:9e: e2:16:d9:91:ae:a4:22:95:fd:2f:d7:6c:b9:9c:5a: c5:4e:23:3d:b7:1e:ea:1d:00:4a:41:c2:be:b7:59: 66:a7:07:32:1d:65:43:d7:99:5b:ec:a9:04:02:7c: bc:54:6c:0b:cf:b1:97:75:86:07:39:7e:a1:03:63: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:2C:CF:A5:27:AB:3A:DD:F1:B3:98:51:D4:0D:D8:C9:1E:E9:9C X509v3 Authority Key Identifier: keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:da:6f:7a:2d:c5:85:95:ed:53:70:a2:42:19:32:d5:9c:76: ed:ef:df:63:e2:ae:57:84:fe:6f:80:38:bc:e5:a0:62:85:ed: df:1e:1e:95:88:5c:65:ab:9a:df:17:d7:7b:19:a1:19:33:c5: 5a:50:9f:a2:db:10:c2:a0:05:da:5a:03:12:35:10:e4:db:02: 33:14:03:3f:2d:fb:75:e0:ea:2f:56:12:a7:cc:18:c9:6e:c3: 60:b9:c7:27:3c:eb:d4:4a:33:e5:30:55:38:f7:69:b7:cd:6a: 36:38:a8:61:a6:4c:ef:4d:7a:8a:91:cb:3e:7f:b7:7c:d4:8f: f8:49:d7:28:28:35:70:c4:55:37:86:61:ec:a2:8c:ce:7c:22: 53:ce:05:1a:ee:d1:1e:1d:54:8e:21:98:12:1a:80:ed:36:f3: 0d:a8:f6:b8:ce:5b:e8:c0:88:fa:93:39:1d:47:2b:2c:2d:de: bf:1a:49:04:45:33:d7:23:c0:03:63:f0:61:6b:57:9d:4f:6d: b5:f4:f1:e9:54:6a:ac:93:69:52:5d:70:dd:19:d6:3d:bd:f2: 8d:46:c1:50:9d:34:5b:8b:2a:34:59:31:ce:f6:2f:30:60:49: 2b:45:9a:5c:ff:84:83:d6:78:4c:6c:61:0b:ba:ad:7a:63:47: c7:32:b4:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0 NzcyRThGRUYwHhcNMjUwNDI1MDExMjA5WhcNMjUwNTAyMDExMjA5WjAYMRYwFAYD VQQDEw02ODBhZTE2OS0xYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Uz1FqWw3sN2TeECvCagoLF/f4YWYj4WfCR8eLIoUuxVByNZoId7gXsqzEfm jx/crps3flajtJ/Lgc/kEw3Pq7qjIhHM/jBavKj6WHkYpjLSxDMlJ1og2bkkKOOn 4/nq6x0KdRu66d87z1bSggnWgyPQS7LKUvk8ngPtlQH9goxKCtIl6OCs+Re+/1hx 9VPVZfdNV+phu+CqrnVpQqNHet1Ur1fUVwbaDLgXM1SEyCHrC3/KjVFGxQZj+Zkq ffya557iFtmRrqQilf0v12y5nFrFTiM9tx7qHQBKQcK+t1lmpwcyHWVD15lb7KkE Any8VGwLz7GXdYYHOX6hA2MVAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQaLM+l J6s63fGzmFHUDdjJHumcMB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd2m96LcWFle1TcKJCGTLVnHbt799j4q5XhP5vgDi85aBihe3fHh6V iFxlq5rfF9d7GaEZM8VaUJ+i2xDCoAXaWgMSNRDk2wIzFAM/Lft14OovVhKnzBjJ bsNguccnPOvUSjPlMFU492m3zWo2OKhhpkzvTXqKkcs+f7d81I/4SdcoKDVwxFU3 hmHsoozOfCJTzgUa7tEeHVSOIZgSGoDtNvMNqPa4zlvowIj6kzkdRyssLd6/GkkE RTPXI8ADY/Bha1edT2219PHpVGqsk2lSXXDdGdY9vfKNRsFQnTRbiyo0WTHO9i8w YEkrRZpc/4SD1nhMbGELuq16Y0fHMrS0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:49 2025 by rpki-client