$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: ebWCTqvVLUBUM9tTNiVNtctN8eeaC3IpYamucfJjVXY= Subject key identifier: E9:90:79:85:77:FF:F5:98:1E:D2:43:3E:AD:94:6F:4A:16:0A:04:78 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 07EA Signing time: Wed 30 Apr 2025 20:42:01 +0000 Manifest this update: Wed 30 Apr 2025 20:42:01 +0000 Manifest next update: Wed 07 May 2025 20:42:01 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: KwhuzHNFl2najDlzAWYAvbcy+/XgaUYD761qPpAnywg=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: 0zq4g5RJk0E/VoR4Pr+LW71Q1CJOf0yYtzjcsTKINfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 20:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Apr 30 20:42:01 2025 GMT Not After : May 7 20:42:01 2025 GMT Subject: CN=68128b19-c85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:3b:b5:7a:12:15:c1:90:3f:ee:e5:27:28: cf:b0:37:9b:35:fa:2a:04:68:8e:0d:f9:22:62:7e: 95:2c:7b:2c:41:54:09:71:de:79:83:fe:ee:dd:7c: 96:10:8a:ca:6e:84:16:e6:36:30:8e:52:87:59:e7: 84:d2:d0:67:1c:f9:0f:93:24:14:27:e4:99:cd:21: 66:84:cf:fb:c8:b8:90:65:63:3c:ec:99:5e:1f:23: f6:d6:cd:09:48:be:66:2f:cf:c6:24:96:bf:6c:50: 55:f2:8b:3a:26:cf:22:e4:5c:e5:a2:d8:1a:24:42: 23:97:b7:ab:8c:18:0d:59:f0:6a:68:2b:7c:f1:66: fb:1d:9b:a8:b5:b5:89:15:65:1b:3c:27:c0:f8:14: 58:a1:a6:93:d0:71:fd:f6:4e:3d:e6:42:13:8d:9f: 27:df:26:39:2c:36:de:9d:4a:19:86:e1:f9:b7:ac: 31:c7:ea:31:d9:52:2d:bf:c3:b7:11:31:c5:28:8d: cb:7d:c3:e7:d4:70:ad:59:80:a8:ff:28:74:f8:2a: 81:34:79:74:7c:75:3b:dd:34:e4:50:e6:2c:02:46: 90:75:db:0d:51:ae:55:1b:bf:a7:70:16:17:10:26: 3b:9e:bf:15:5f:3d:9b:32:e0:c2:a7:47:96:8a:74: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:79:85:77:FF:F5:98:1E:D2:43:3E:AD:94:6F:4A:16:0A:04:78 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:3f:a6:d1:4c:82:79:7e:54:54:9d:ff:e2:c2:ba:59:e6:92: 4b:55:6a:ce:e2:e2:cd:dc:fa:35:45:df:15:08:84:a4:35:c6: c3:d9:f2:4a:6d:d7:11:6c:fa:4e:b3:5d:a3:fd:3f:64:6d:46: 8d:7d:00:f0:c3:1a:6c:91:3b:58:76:0e:a2:f0:d3:41:aa:01: 2d:34:80:e7:79:90:d0:de:78:3d:fd:5a:03:80:a0:1d:ab:8e: dd:52:c0:99:e2:f8:25:fc:07:78:4e:24:4c:d0:09:2c:a0:4f: 40:03:13:32:f3:90:4b:b0:67:00:7e:66:fb:cd:72:a0:48:7f: 6c:82:12:5c:83:a5:f3:c9:b0:04:57:60:0c:27:35:fe:ce:61: f1:51:43:a8:f3:60:14:38:e6:9c:7c:a8:d3:c3:44:be:bd:cb: 3d:3f:3d:26:91:95:c0:22:c7:a0:52:ad:a8:2a:88:dd:c0:de: b2:5e:b8:e3:25:b6:7e:45:8d:5e:96:07:04:78:b6:2c:d5:0d: 67:e0:3f:25:a8:9a:d6:1e:a4:f1:09:10:d2:46:c6:dc:67:2a: 6c:e6:23:18:9a:0a:fa:86:7c:69:46:b9:01:cd:7c:01:7f:8b: c9:07:e0:2a:d7:3d:2a:39:65:4a:74:75:da:97:88:46:ca:2a: 99:f1:f9:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwNDMwMjA0MjAxWhcNMjUwNTA3MjA0MjAxWjAYMRYwFAYD VQQDEw02ODEyOGIxOS1jODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP87tXoSFcGQP+7lJyjPsDebNfoqBGiODfkiYn6VLHssQVQJcd55g/7u3XyW EIrKboQW5jYwjlKHWeeE0tBnHPkPkyQUJ+SZzSFmhM/7yLiQZWM87JleHyP21s0J SL5mL8/GJJa/bFBV8os6Js8i5FzlotgaJEIjl7erjBgNWfBqaCt88Wb7HZuotbWJ FWUbPCfA+BRYoaaT0HH99k495kITjZ8n3yY5LDbenUoZhuH5t6wxx+ox2VItv8O3 ETHFKI3LfcPn1HCtWYCo/yh0+CqBNHl0fHU73TTkUOYsAkaQddsNUa5VG7+ncBYX ECY7nr8VXz2bMuDCp0eWinRnDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmQeYV3 //WYHtJDPq2Ub0oWCgR4MB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEP6bRTIJ5flRUnf/iwrpZ5pJLVWrO4uLN3Po1Rd8VCISkNcbD2fJK bdcRbPpOs12j/T9kbUaNfQDwwxpskTtYdg6i8NNBqgEtNIDneZDQ3ng9/VoDgKAd q47dUsCZ4vgl/Ad4TiRM0AksoE9AAxMy85BLsGcAfmb7zXKgSH9sghJcg6XzybAE V2AMJzX+zmHxUUOo82AUOOacfKjTw0S+vcs9Pz0mkZXAIsegUq2oKojdwN6yXrjj JbZ+RY1elgcEeLYs1Q1n4D8lqJrWHqTxCRDSRsbcZyps5iMYmgr6hnxpRrkBzXwB f4vJB+Aq1z0qOWVKdHXal4hGyiqZ8fnG -----END CERTIFICATE-----Generated at Thu May 1 23:35:01 2025 by rpki-client