$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft File: gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json) Hash identifier: V6ksFWVyR1UKPEAtJWviJBYyPMm13sg+0y61sWgWTCU= Subject key identifier: 10:CC:3A:2F:29:B4:BD:24:62:78:26:8C:A7:9D:3E:52:C7:A7:E1:BB Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 Certificate issuer: /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:35:36 +0000 Manifest this update: Fri 25 Apr 2025 05:35:35 +0000 Manifest next update: Fri 02 May 2025 05:35:35 +0000 Files and hashes: 1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: sc9p8r8TPchv83ysraGQH2YQdbbEgTsC4BZjkM7NLYg=) 2: 833934745B9E11EFA7D10E5BC4F9AE02.roa (hash: Z7ymI4gwgufBDRVS5UuVZ13UBlK2Svt1pgBpOJn+u0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Validity Not Before: Apr 25 05:35:35 2025 GMT Not After : May 2 05:35:35 2025 GMT Subject: CN=680b1f27-8c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:67:ad:56:a2:f2:3a:b6:88:1b:14:4e:e6: ef:dc:98:7d:ab:7d:94:ef:56:e1:fc:4c:73:59:a6: 9f:47:9b:98:81:ec:bc:c9:db:c4:f1:3d:1f:79:70: 88:54:63:43:2d:9a:7b:51:51:ed:3e:a9:11:72:76: e5:98:6f:50:63:db:69:1a:3f:f1:f0:78:2d:97:e2: ff:b6:50:1b:30:e7:7b:95:16:67:a2:59:11:ec:91: 0e:e1:e4:26:50:5f:a5:e8:a9:04:ca:a4:13:44:7a: 26:ce:29:30:3f:6a:ab:dc:db:d4:eb:01:10:6b:0a: db:d9:0d:11:99:e3:90:b2:f6:e1:75:24:11:fb:1f: 80:5a:38:32:1a:46:21:36:e8:e1:c4:79:d2:48:10: 38:bc:30:f1:af:0f:02:70:50:86:02:22:28:36:c7: 9c:85:12:28:fc:ca:af:5c:97:5f:f0:a2:e6:ed:a4: 08:aa:19:6b:3e:24:b7:bd:fa:38:5a:d5:02:96:65: 25:8d:76:15:57:a0:e5:e9:c9:43:a4:8a:2a:e6:e4: 7c:5b:f4:3d:d8:49:d7:7d:23:df:f3:a5:20:eb:db: c8:15:71:0b:74:21:6b:ec:d3:9c:55:78:96:fa:ab: 13:43:09:42:3f:9c:a8:23:f8:a9:33:87:f8:f5:85: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CC:3A:2F:29:B4:BD:24:62:78:26:8C:A7:9D:3E:52:C7:A7:E1:BB X509v3 Authority Key Identifier: keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:6e:ad:c9:ab:8b:6e:9f:4c:0f:4c:b7:51:40:d3:64:9f: 27:74:2d:77:eb:14:a1:e5:be:0a:e1:cd:49:ba:1d:c3:ea:16: 47:da:bc:b8:e9:c9:10:9f:20:bb:ee:32:e3:09:f5:a7:3c:98: cf:c2:41:1a:e6:2b:5b:95:9e:d9:20:ab:c2:37:7f:42:65:c3: b1:41:a6:66:00:f0:92:fa:b2:a8:a4:3c:d9:ec:40:c6:63:e2: d4:fc:25:c1:f8:73:53:ce:6f:3d:8a:8c:6d:d8:51:d8:bd:98: 5e:05:0d:09:50:f9:44:7d:05:89:13:a4:1a:db:c8:b9:57:56: 2e:27:4d:7e:c9:4f:54:73:d2:98:e5:b1:e9:53:be:8b:d7:a5: 36:bc:01:38:a5:de:3a:0b:5a:02:85:ae:8e:02:49:cf:b9:a6: cb:54:cb:84:f7:4c:95:09:41:2e:b2:d8:7b:5a:b2:95:e4:3a: 9c:ad:19:50:1e:3c:4f:87:eb:61:17:f3:fa:70:6c:57:53:53: 95:4c:48:b6:4f:4b:76:0c:e8:04:c5:46:fa:ca:c6:ee:59:72: 38:31:a6:da:52:1b:3b:1c:89:42:01:19:ca:b2:37:d5:2d:df: 3b:a6:9f:ad:c8:5a:40:3a:a8:ca:bf:3b:bc:36:33:9b:f1:5f: f2:48:21:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MTExMTAvBgNVBAUTKDgyOUFEODU3NTcyNTY4N0IxRjBBNEM1NUY5NDIyQUYz M0IwMEZDQjEwHhcNMjUwNDI1MDUzNTM1WhcNMjUwNTAyMDUzNTM1WjAYMRYwFAYD VQQDEw02ODBiMWYyNy04YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHlnrVai8jq2iBsUTubv3Jh9q32U71bh/ExzWaafR5uYgey8ydvE8T0feXCI VGNDLZp7UVHtPqkRcnblmG9QY9tpGj/x8Hgtl+L/tlAbMOd7lRZnolkR7JEO4eQm UF+l6KkEyqQTRHomzikwP2qr3NvU6wEQawrb2Q0RmeOQsvbhdSQR+x+AWjgyGkYh NujhxHnSSBA4vDDxrw8CcFCGAiIoNsechRIo/MqvXJdf8KLm7aQIqhlrPiS3vfo4 WtUClmUljXYVV6Dl6clDpIoq5uR8W/Q92EnXfSPf86Ug69vIFXELdCFr7NOcVXiW +qsTQwlCP5yoI/ipM4f49YUu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDMOi8p tL0kYngmjKedPlLHp+G7MB8GA1UdIwQYMBaAFIKa2FdXJWh7HwpMVflCKvM7APyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUxMS8yRENGRjYxMjVC OUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFIc2ZDa3hWLVVJcTh6c0Ff TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwcllWMWNsYUhzZkNreFYtVUlxOHpzQV9MRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUxMS8yRENGRjYxMjVCOUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFI c2ZDa3hWLVVJcTh6c0FfTEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHhm6tyauLbp9MD0y3UUDTZJ8ndC136xSh5b4K4c1Juh3D6hZH2ry4 6ckQnyC77jLjCfWnPJjPwkEa5itblZ7ZIKvCN39CZcOxQaZmAPCS+rKopDzZ7EDG Y+LU/CXB+HNTzm89ioxt2FHYvZheBQ0JUPlEfQWJE6Qa28i5V1YuJ01+yU9Uc9KY 5bHpU76L16U2vAE4pd46C1oCha6OAknPuabLVMuE90yVCUEusth7WrKV5DqcrRlQ HjxPh+thF/P6cGxXU1OVTEi2T0t2DOgExUb6ysbuWXI4MabaUhs7HIlCARnKsjfV Ld87pp+tyFpAOqjKvzu8NjOb8V/ySCEN -----END CERTIFICATE-----Generated at Sat Apr 26 05:16:39 2025 by rpki-client