$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: cPbSpAF0DnBh0pVxG1ZIXJuPYXsI97VaUzc6tTWVjJ4= Subject key identifier: 7B:29:44:C1:CA:6E:1F:A5:F2:B2:8C:4C:81:B7:03:0F:83:C3:5B:D4 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:09:42 +0000 Manifest this update: Fri 25 Apr 2025 02:09:42 +0000 Manifest next update: Fri 02 May 2025 02:09:42 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: ZTkv307QijL2Mta/p9YheevnFhqRjU1GYfQ1RVy2mbI=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Apr 25 02:09:42 2025 GMT Not After : May 2 02:09:42 2025 GMT Subject: CN=680aeee6-fd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:00:99:d8:f1:ef:f2:d9:fb:e0:b4:af:e7: 19:47:22:23:35:ae:54:a4:ca:48:17:b1:1c:fe:ae: 8b:f3:32:5a:86:b1:41:e3:0b:ea:be:ee:28:68:d7: 37:45:73:3a:d1:51:cd:0f:e2:d3:65:86:21:84:4f: 57:fe:d9:64:fb:27:22:84:a2:cc:b6:6c:30:b6:cd: 01:df:32:cd:b5:8d:a5:2e:5d:4b:0a:94:bd:9f:2c: b0:83:0b:63:09:f0:f3:0e:59:30:49:f2:41:1c:cc: 45:f7:1c:90:8d:01:cd:50:6b:c2:20:61:c5:55:92: 1c:31:b4:b7:ca:2d:88:64:44:f4:95:48:b0:c1:a5: 30:8f:ca:04:27:84:ba:6b:fc:75:02:d9:fb:de:0e: 51:c7:98:78:22:d1:fa:0a:d4:86:cd:c7:ab:f3:93: 1f:ad:80:78:8a:c6:39:48:e3:89:d5:17:7e:61:bd: aa:12:5e:ce:1f:64:98:40:82:e3:1d:8b:ad:ee:73: 86:bb:c3:b4:32:9b:a8:b0:cb:cc:03:c1:90:bc:06: 55:4a:86:14:3b:e6:da:05:4a:f8:ea:b2:55:52:8b: 4c:2a:43:c9:47:7b:98:fc:6f:eb:57:65:4a:35:ff: 46:61:71:4e:cb:b8:65:31:3b:91:10:0e:1d:4e:35: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:29:44:C1:CA:6E:1F:A5:F2:B2:8C:4C:81:B7:03:0F:83:C3:5B:D4 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:94:25:e5:65:0a:59:92:52:00:65:8e:4a:8f:c3:71:12:27: 3d:91:4f:6d:3b:1e:3a:19:a7:72:6c:9e:c3:f6:cc:fc:87:ba: 77:ba:ff:cc:ac:19:58:8c:3c:72:05:ef:fb:db:5e:d9:0b:a6: 19:18:63:76:e3:5e:56:31:56:a5:62:52:5c:29:1e:c5:59:64: 15:ab:17:a6:0b:77:f6:69:d8:70:9c:f4:39:57:b3:e4:4a:0f: b0:b0:1e:bd:0e:ec:0d:24:ac:d3:0d:c7:14:12:5b:ac:83:48: 23:d7:77:b5:04:2f:b7:d9:b0:0a:4e:20:4c:e9:88:2a:f6:1d: cb:37:b1:62:51:f5:bd:ac:3d:7c:1e:7d:20:86:61:c0:92:1b: 74:64:00:b9:b7:99:1a:ae:ed:99:bd:d4:b7:02:6e:23:17:94: c9:85:68:c8:42:0c:6c:1d:41:e9:95:12:97:34:15:84:03:7c: 0d:36:2e:9b:28:44:bd:a6:4c:9b:ab:cd:5e:57:f8:f5:37:6a: dd:d3:71:17:80:9e:99:80:b8:2d:d1:6d:23:f3:39:c4:0e:ce: 58:49:71:b5:2b:50:df:d6:d3:a5:f8:ed:96:94:c1:97:ad:7b: 56:08:89:b0:ad:91:0d:38:87:54:78:77:2d:96:9f:04:ad:bb: c3:31:27:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUwNDI1MDIwOTQyWhcNMjUwNTAyMDIwOTQyWjAYMRYwFAYD VQQDEw02ODBhZWVlNi1mZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu74Amdjx7/LZ++C0r+cZRyIjNa5UpMpIF7Ec/q6L8zJahrFB4wvqvu4oaNc3 RXM60VHND+LTZYYhhE9X/tlk+ycihKLMtmwwts0B3zLNtY2lLl1LCpS9nyywgwtj CfDzDlkwSfJBHMxF9xyQjQHNUGvCIGHFVZIcMbS3yi2IZET0lUiwwaUwj8oEJ4S6 a/x1Atn73g5Rx5h4ItH6CtSGzcer85MfrYB4isY5SOOJ1Rd+Yb2qEl7OH2SYQILj HYut7nOGu8O0MpuosMvMA8GQvAZVSoYUO+baBUr46rJVUotMKkPJR3uY/G/rV2VK Nf9GYXFOy7hlMTuREA4dTjVPoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHspRMHK bh+l8rKMTIG3Aw+Dw1vUMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIlCXlZQpZklIAZY5Kj8NxEic9kU9tOx46GadybJ7D9sz8h7p3uv/M rBlYjDxyBe/7217ZC6YZGGN2415WMValYlJcKR7FWWQVqxemC3f2adhwnPQ5V7Pk Sg+wsB69DuwNJKzTDccUElusg0gj13e1BC+32bAKTiBM6Ygq9h3LN7FiUfW9rD18 Hn0ghmHAkht0ZAC5t5karu2ZvdS3Am4jF5TJhWjIQgxsHUHplRKXNBWEA3wNNi6b KES9pkybq81eV/j1N2rd03EXgJ6ZgLgt0W0j8znEDs5YSXG1K1Df1tOl+O2WlMGX rXtWCImwrZENOIdUeHctlp8ErbvDMSet -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:22 2025 by rpki-client