$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft File: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json) Hash identifier: kKMYM1Ove5ppw4MW2ryoU0hsrVHS0yCXs0RVZaIgMrI= Subject key identifier: 9B:E2:5C:A2:DB:2D:F5:01:F4:76:CD:0C:E1:13:EF:98:44:4C:98:14 Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft Manifest number: 06C3 Signing time: Thu 24 Apr 2025 21:55:01 +0000 Manifest this update: Thu 24 Apr 2025 21:55:01 +0000 Manifest next update: Thu 01 May 2025 21:55:01 +0000 Files and hashes: 1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: gLITPIRzUmGeNopGhSBj8P4FENHaUPT4lEmCXHmAt1Y=) 2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A Validity Not Before: Apr 24 21:55:01 2025 GMT Not After : May 1 21:55:01 2025 GMT Subject: CN=680ab335-9463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:3a:46:fe:cb:e2:2d:e4:1c:06:36:56:7a: 9e:12:e4:ff:77:6c:4e:b5:e7:44:14:25:ae:c2:68: 08:89:af:fb:ea:5d:2f:88:86:76:c3:cd:53:5f:91: 7b:1d:cc:17:8c:56:2e:5f:37:3a:bd:01:44:20:bb: 8d:1d:5a:9c:65:93:79:43:f4:65:42:f1:72:a2:23: a8:26:93:a8:98:3c:f2:b8:af:79:47:f0:12:82:89: 4a:e9:38:1a:1e:27:62:ca:77:be:46:5f:43:cb:1b: 7e:eb:a6:c8:b2:01:14:cd:d0:77:3c:ff:7f:fc:53: 26:85:3a:45:62:56:03:7a:62:31:16:7a:31:ff:29: e5:0f:f3:a6:f7:4e:c4:27:3d:b8:7e:32:0c:d5:50: 85:a8:ac:d2:0d:0f:3a:ab:7d:3f:53:67:8f:81:e1: ba:ca:20:8b:63:b9:a4:30:63:d3:91:75:03:eb:15: a8:3d:e1:05:16:a5:a4:11:4f:07:7d:9f:54:24:fe: 23:b5:de:36:67:c8:26:c8:a3:99:ca:e4:32:63:bf: a1:df:9d:fa:b4:65:cd:3b:e0:f5:ee:d2:0e:59:fa: 46:a9:93:37:4b:0b:38:1a:b9:5c:96:21:e5:a9:09: f3:20:b1:43:a3:0d:b2:b2:6d:70:58:84:d7:51:63: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:5C:A2:DB:2D:F5:01:F4:76:CD:0C:E1:13:EF:98:44:4C:98:14 X509v3 Authority Key Identifier: keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b8:70:3d:7f:16:de:1e:14:a3:c9:fb:64:c6:e3:0a:b6:5f: 35:91:c6:d7:16:6c:72:db:ed:98:01:ee:19:60:8f:18:b9:ca: 6b:1c:e3:58:71:da:c0:37:53:5d:16:02:bc:a6:ba:05:e6:de: 39:87:1b:dd:53:24:5e:93:9f:48:fd:44:76:1b:af:92:c8:21: d8:78:9a:ee:07:cd:08:d6:91:71:14:d6:0a:2f:de:dd:94:e9: 8b:f7:c5:ae:08:9e:da:02:49:06:21:9c:ef:66:f2:b4:4e:04: 1c:5d:c3:bd:10:01:7a:c1:02:4e:7a:33:ad:eb:ba:94:52:72: b3:53:96:c4:e2:93:7e:ff:46:25:3b:49:e8:b7:5c:f7:8c:79: 61:8e:5a:f6:37:5e:9a:de:5c:ff:2f:27:d5:cd:03:20:1a:a2: 08:c7:cf:a4:f5:37:5b:3a:da:aa:4f:dd:e9:8a:52:cb:be:c6: 4b:91:60:e4:3f:41:ad:7b:96:40:82:d5:2b:af:52:c7:1b:10: 50:0e:28:9f:b4:7c:a2:9a:4e:06:8c:b3:a4:7b:20:9f:6f:e3: dc:04:37:5a:95:43:c4:c5:e7:6d:d1:41:4d:2a:33:b6:b1:9d: ef:6f:e1:0f:54:91:66:64:66:f0:48:bf:78:9d:28:7f:0a:6c: d3:3b:17:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG MzFBMTY5MEEwHhcNMjUwNDI0MjE1NTAxWhcNMjUwNTAxMjE1NTAxWjAYMRYwFAYD VQQDEw02ODBhYjMzNS05NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeQ6Rv7L4i3kHAY2VnqeEuT/d2xOtedEFCWuwmgIia/76l0viIZ2w81TX5F7 HcwXjFYuXzc6vQFEILuNHVqcZZN5Q/RlQvFyoiOoJpOomDzyuK95R/ASgolK6Tga Hidiyne+Rl9Dyxt+66bIsgEUzdB3PP9//FMmhTpFYlYDemIxFnox/ynlD/Om907E Jz24fjIM1VCFqKzSDQ86q30/U2ePgeG6yiCLY7mkMGPTkXUD6xWoPeEFFqWkEU8H fZ9UJP4jtd42Z8gmyKOZyuQyY7+h3536tGXNO+D17tIOWfpGqZM3Sws4GrlcliHl qQnzILFDow2ysm1wWITXUWN3kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJviXKLb LfUB9HbNDOET75hETJgUMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2 QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ dERfVlExaVRqZEh6R2hhUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2uHA9fxbeHhSjyftkxuMKtl81kcbXFmxy2+2YAe4ZYI8YucprHONY cdrAN1NdFgK8proF5t45hxvdUyRek59I/UR2G6+SyCHYeJruB80I1pFxFNYKL97d lOmL98WuCJ7aAkkGIZzvZvK0TgQcXcO9EAF6wQJOejOt67qUUnKzU5bE4pN+/0Yl O0not1z3jHlhjlr2N16a3lz/LyfVzQMgGqIIx8+k9TdbOtqqT93pilLLvsZLkWDk P0Gte5ZAgtUrr1LHGxBQDiiftHyimk4GjLOkeyCfb+PcBDdalUPExedt0UFNKjO2 sZ3vb+EPVJFmZGbwSL94nSh/CmzTOxdf -----END CERTIFICATE-----Generated at Sat Apr 26 04:58:50 2025 by rpki-client