$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft File: gxf8eoKw7oZSDfGP_VcpURbaXfI.mft (raw, json) Hash identifier: lVYxydKdUMMTlFQixla9Yzg6Nzxegkd0G8Ghc/g6TV4= Subject key identifier: C5:91:1D:0C:EA:64:9D:3C:37:F6:D9:4F:54:3A:E5:10:80:2F:AD:14 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 06:05:16 +0000 Manifest this update: Fri 25 Apr 2025 06:05:15 +0000 Manifest next update: Fri 02 May 2025 06:05:15 +0000 Files and hashes: 1: gxf8eoKw7oZSDfGP_VcpURbaXfI.crl (hash: J1IqegMP+2KCAmiQOJdKfFC86YmxHQcaCAUzqv2OXmQ=) 2: 5B39EBD693B511EF8AEA6810C4F9AE02.roa (hash: bSwFDk6awCLG4yCeUFAgFzFigutUzb6MBdN06ltlpqE=) 3: 1A824A0E993511EF9BB0A677C4F9AE02.roa (hash: hHmJZ4kZTc3eByWyfovBTyBy7zoc4MRBKG9FMUzpQOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Apr 25 06:05:15 2025 GMT Not After : May 2 06:05:15 2025 GMT Subject: CN=680b261b-d6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:71:5b:a6:f3:0c:26:f5:18:6f:ed:40:26: 21:76:d8:dc:c9:d2:b6:42:12:7d:f8:a1:78:51:ee: 39:a6:fb:dd:f7:8d:da:b5:f3:fd:af:65:14:38:b6: e4:86:88:df:65:d4:f7:87:5b:a6:a1:56:ae:c5:9c: 04:ed:da:33:90:73:84:4c:b0:19:e8:e6:83:c9:f1: 35:f8:1d:cf:3a:f6:4f:43:19:ab:a0:83:77:48:f0: 68:73:8c:6c:83:4d:3d:de:44:a1:ba:47:59:92:16: 57:c8:9d:c6:46:4a:90:ae:7c:e9:b9:2f:49:3a:d3: 5c:2d:f4:a8:b5:11:f1:dc:62:fb:27:0f:22:a9:44: ca:a2:f7:1b:f8:60:a3:e1:4a:7c:42:75:cf:cf:1c: 0e:47:89:f0:3c:e5:89:0d:4f:89:23:d0:dd:1d:65: 04:1b:92:bf:68:e6:23:63:d7:6a:fe:3f:02:75:0d: 5d:4c:af:2d:f1:e3:77:7c:9e:b4:09:98:04:75:0c: c3:87:ad:58:86:d8:3a:8f:78:06:84:59:1d:13:87: dd:1d:63:2a:2d:fc:a1:b0:5f:bd:1b:ec:85:c9:74: 2b:c3:9a:82:1c:59:40:7f:bd:15:ce:f7:c6:92:50: bb:0c:94:69:46:f2:78:f7:71:d5:fd:a9:62:36:8f: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:1D:0C:EA:64:9D:3C:37:F6:D9:4F:54:3A:E5:10:80:2F:AD:14 X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:9c:b7:9c:a3:14:b4:31:5e:1f:6e:bb:1f:78:4e:fe:58:90: f6:67:c0:aa:ae:74:2d:62:0b:d0:78:06:05:f5:cb:b8:b5:d1: 01:74:21:f8:40:bd:bb:84:46:d4:cd:c9:ad:d0:08:37:c9:9c: 13:d7:53:a2:da:9c:9b:b8:a4:fb:9c:e9:57:43:b0:ed:6a:31: c8:59:28:26:ee:d3:d9:c7:cd:11:ac:a9:0c:35:2d:f8:57:3b: 4f:35:6d:7b:4f:45:ac:d9:fe:d0:71:f5:e6:10:ac:9c:de:db: 69:93:da:93:d4:e9:12:3e:f7:d4:36:b5:f6:d5:4d:d3:bd:72: 91:55:9b:7a:fa:89:0c:53:10:af:d6:bd:84:55:c0:c4:e9:b2: 47:7d:bd:35:2c:72:07:97:8a:f7:07:a6:10:fc:1b:10:23:69: ec:64:e5:36:b7:4b:a0:03:18:a5:44:de:ea:f3:a7:48:68:4c: 78:3e:1b:55:60:13:3c:b8:aa:4f:cf:1e:b8:5f:c5:83:6d:10: c8:9b:04:d4:18:13:10:c2:ae:4a:ac:80:43:af:05:7c:26:26: c6:f3:bb:df:e3:5e:22:cc:d8:16:45:c0:dd:58:db:34:d6:19: 3b:dd:5a:34:57:d5:ce:b6:03:5e:96:79:d0:e0:c5:b4:4e:62: af:2b:88:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzhGMDExMC8GA1UEBRMoODMxN0ZDN0E4MkIwRUU4NjUyMERGMThGRkQ1NzI5NTEx NkRBNURGMjAeFw0yNTA0MjUwNjA1MTVaFw0yNTA1MDIwNjA1MTVaMBgxFjAUBgNV BAMTDTY4MGIyNjFiLWQ2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ83FbpvMMJvUYb+1AJiF22NzJ0rZCEn34oXhR7jmm+933jdq18/2vZRQ4tuSG iN9l1PeHW6ahVq7FnATt2jOQc4RMsBno5oPJ8TX4Hc869k9DGaugg3dI8GhzjGyD TT3eRKG6R1mSFlfIncZGSpCufOm5L0k601wt9Ki1EfHcYvsnDyKpRMqi9xv4YKPh SnxCdc/PHA5HifA85YkNT4kj0N0dZQQbkr9o5iNj12r+PwJ1DV1Mry3x43d8nrQJ mAR1DMOHrViG2DqPeAaEWR0Th90dYyot/KGwX70b7IXJdCvDmoIcWUB/vRXO98aS ULsMlGlG8nj3cdX9qWI2j4ulAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxZEdDOpk nTw39tlPVDrlEIAvrRQwHwYDVR0jBBgwFoAUgxf8eoKw7oZSDfGP/VcpURbaXfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzOEYwLzBBNzcxQTM2OTNB RTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3hmOGVvS3c3b1pTRGZHUF9WY3BVUmJhWGZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz OEYwLzBBNzcxQTM2OTNBRTExRUY4RjQ4QUI0M0M0RjlBRTAyL2d4Zjhlb0t3N29a U0RmR1BfVmNwVVJiYVhmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmct5yjFLQxXh9uux94Tv5YkPZnwKqudC1iC9B4BgX1y7i10QF0IfhA vbuERtTNya3QCDfJnBPXU6LanJu4pPuc6VdDsO1qMchZKCbu09nHzRGsqQw1LfhX O081bXtPRazZ/tBx9eYQrJze22mT2pPU6RI+99Q2tfbVTdO9cpFVm3r6iQxTEK/W vYRVwMTpskd9vTUscgeXivcHphD8GxAjaexk5Ta3S6ADGKVE3urzp0hoTHg+G1Vg Ezy4qk/PHrhfxYNtEMibBNQYExDCrkqsgEOvBXwmJsbzu9/jXiLM2BZFwN1Y2zTW GTvdWjRX1c62A16WedDgxbROYq8riIs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:45 2025 by rpki-client