$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json) Hash identifier: IUTLr0yx1G9CnJCzZ7ufYM2BfSJ5gO2o2DQQFin2p2A= Subject key identifier: 2B:A2:2C:2A:37:A3:9B:C6:8B:5F:6A:1C:3F:6A:66:AD:5D:CA:3F:27 Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft Manifest number: 57 Signing time: Fri 25 Apr 2025 06:12:18 +0000 Manifest this update: Fri 25 Apr 2025 06:12:17 +0000 Manifest next update: Fri 02 May 2025 06:12:17 +0000 Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: bZy53iLrpsOASMRm+/1FHtBlEwgzFtjfRyZJ4mHniV4=) 2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: etgfr2FMXbKAdL4ONMDhHdEqlj7eq8Os+Vy9Aq6JfHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC Validity Not Before: Apr 25 06:12:17 2025 GMT Not After : May 2 06:12:17 2025 GMT Subject: CN=680b27c1-a3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:99:c5:00:68:6a:00:db:b2:e5:9c:46:7d: 13:c7:65:7a:40:dc:b0:b9:66:a0:5f:0b:94:3c:ba: 5b:1b:ae:3c:32:c8:7a:3d:eb:fe:cc:79:38:f8:35: 49:73:d9:52:a7:2f:90:35:8d:7a:df:11:f8:8c:04: 0c:cc:36:eb:62:25:e3:33:88:59:4e:3a:54:f6:56: b8:30:a0:a3:bb:1c:aa:c3:b0:ce:72:bf:d2:32:d0: 42:c8:bf:d2:f3:03:0e:95:63:72:c6:20:a0:10:43: 7e:73:19:53:6a:db:40:12:ed:c1:06:5f:1c:87:7f: 8f:99:40:25:ff:c5:d8:55:77:c6:13:8e:7a:86:f5: 41:8a:d2:79:27:5c:08:7d:21:3a:f4:5d:65:8b:6a: bc:e1:83:4b:fa:56:14:81:3f:69:fa:ea:f9:ae:37: 22:57:f4:b8:87:98:54:ef:9a:5f:59:af:b5:43:e2: 92:2a:f9:39:6d:7d:2f:c0:dc:47:3c:df:3a:57:5a: 3b:a3:5f:5a:47:05:0e:45:89:89:27:bc:c6:9b:3d: d3:3f:15:7e:58:8f:55:b9:69:d0:ef:95:12:fd:51: fe:7a:f1:5a:47:43:6c:e7:a7:e7:7b:a0:71:0f:cb: e3:b0:c2:0f:ae:2b:95:e8:bf:e8:1f:a0:04:b0:04: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:2C:2A:37:A3:9B:C6:8B:5F:6A:1C:3F:6A:66:AD:5D:CA:3F:27 X509v3 Authority Key Identifier: keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:26:b4:2c:19:4f:90:74:eb:58:20:6e:de:70:c5:22:ca:68: c0:aa:11:8c:48:0d:81:98:93:7b:cb:36:0a:7f:5d:78:ac:fb: cc:33:67:7f:46:67:e6:80:09:51:2f:83:e1:bc:25:cd:e3:e7: 8c:23:01:1c:d8:76:f4:d4:f1:bc:da:3b:0c:ed:cd:6a:4c:3f: b5:20:ac:12:27:6f:2f:a3:bf:ca:6c:c2:85:f0:46:32:54:15: 8c:a3:68:60:44:d1:ac:58:32:d9:ab:72:5b:e2:ae:cb:62:c8: 23:58:3c:1f:87:2a:45:23:ad:99:06:05:ab:d0:b0:72:32:e0: 60:bf:43:a4:f1:58:c8:86:ef:96:f2:8b:8e:e2:bd:01:82:f3: a1:17:38:00:a3:f9:f2:0b:9e:bb:0f:8b:59:d5:ea:db:79:4c: 17:b7:3f:bc:14:00:01:9c:71:10:c0:79:ba:f7:e6:06:7b:1c: d3:08:ec:59:b9:ad:5b:24:c0:2b:e7:8d:04:33:13:4a:b0:86: 4f:f9:99:70:c2:56:ed:a2:3f:ed:fd:bc:59:33:0d:32:13:a7: da:f4:a7:17:0e:13:e2:41:83:85:65:40:30:23:6b:0a:a9:41: a7:2a:5c:ea:7b:33:83:c4:81:7c:e2:f4:96:eb:d6:02:c3:a4: 69:30:e7:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjBFMjExMC8GA1UEBRMoODA3RTY4OEFBNTBCRDNFMzhCRTMxQjVENEM0RTA2MDgw NEVCMTVEQzAeFw0yNTA0MjUwNjEyMTdaFw0yNTA1MDIwNjEyMTdaMBgxFjAUBgNV BAMTDTY4MGIyN2MxLWEzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHcpnFAGhqANuy5ZxGfRPHZXpA3LC5ZqBfC5Q8ulsbrjwyyHo96/7MeTj4NUlz 2VKnL5A1jXrfEfiMBAzMNutiJeMziFlOOlT2VrgwoKO7HKrDsM5yv9Iy0ELIv9Lz Aw6VY3LGIKAQQ35zGVNq20AS7cEGXxyHf4+ZQCX/xdhVd8YTjnqG9UGK0nknXAh9 ITr0XWWLarzhg0v6VhSBP2n66vmuNyJX9LiHmFTvml9Zr7VD4pIq+TltfS/A3Ec8 3zpXWjujX1pHBQ5FiYknvMabPdM/FX5Yj1W5adDvlRL9Uf568VpHQ2znp+d7oHEP y+Owwg+uK5Xov+gfoASwBKl/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK6IsKjej m8aLX2ocP2pmrV3KPycwHwYDVR0jBBgwFoAUgH5oiqUL0+OL4xtdTE4GCATrFdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMEUyLzJCNEJCNDJFQTI1 RTExRUZBMzhEOTM3NUM0RjlBRTAyL2dINW9pcVVMMC1PTDR4dGRURTRHQ0FUckZk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ0g1b2lxVUwwLU9MNHh0ZFRFNEdDQVRyRmR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MEUyLzJCNEJCNDJFQTI1RTExRUZBMzhEOTM3NUM0RjlBRTAyL2dINW9pcVVMMC1P TDR4dGRURTRHQ0FUckZkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAmtCwZT5B061ggbt5wxSLKaMCqEYxIDYGYk3vLNgp/XXis+8wzZ39G Z+aACVEvg+G8Jc3j54wjARzYdvTU8bzaOwztzWpMP7UgrBInby+jv8pswoXwRjJU FYyjaGBE0axYMtmrclvirstiyCNYPB+HKkUjrZkGBavQsHIy4GC/Q6TxWMiG75by i47ivQGC86EXOACj+fILnrsPi1nV6tt5TBe3P7wUAAGccRDAebr35gZ7HNMI7Fm5 rVskwCvnjQQzE0qwhk/5mXDCVu2iP+39vFkzDTITp9r0pxcOE+JBg4VlQDAjawqp QacqXOp7M4PEgXzi9Jbr1gLDpGkw5zw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:48 2025 by rpki-client