$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: bxPDYGvoZpKqBowxwqhkNIMEP47JySENPYKHTljq1Hk= Subject key identifier: DE:D2:B9:DA:DB:97:B8:53:24:63:B3:8D:58:88:4A:9A:39:4C:A8:D7 Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 53 Signing time: Fri 25 Apr 2025 06:17:40 +0000 Manifest this update: Fri 25 Apr 2025 06:17:39 +0000 Manifest next update: Fri 02 May 2025 06:17:39 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: JgziV4du6ouDQCyGEpjhNdjplc9gPTtX08JHFHGVWhw=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Apr 25 06:17:39 2025 GMT Not After : May 2 06:17:39 2025 GMT Subject: CN=680b2904-60b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:12:49:a2:d2:79:98:06:00:87:9e:4e:21: 28:0b:54:1a:3c:1b:ca:e2:39:5c:9e:bc:3b:65:fd: 9d:21:fe:c2:3e:bb:d0:97:d2:e9:0e:36:01:dd:2f: 6e:27:61:ce:7b:32:3d:fa:5c:55:e2:97:0f:83:dc: d4:51:83:9b:de:52:71:95:11:54:1c:dd:13:7f:a7: d0:b5:1c:3b:a3:f6:e7:53:0a:7a:d5:11:a9:47:c7: 94:5f:b4:84:1b:02:69:5c:3a:89:1b:22:89:2b:05: 5b:4b:d2:f1:ca:97:ce:64:6a:49:85:14:9a:c5:85: 68:30:45:9e:bc:68:a8:03:82:0d:c2:be:ea:f6:81: f8:07:99:5b:a6:37:c6:f5:5d:19:a7:00:90:29:05: 50:54:10:c6:77:84:d2:10:c2:f3:00:3c:98:d1:5f: 64:85:95:64:89:68:7e:3b:95:a6:80:20:85:0f:8a: 69:3c:89:98:71:ad:5d:47:58:6a:5d:a6:ec:ed:3d: e0:e3:43:27:25:39:6c:11:d4:33:c4:a1:14:8d:57: bc:f8:fd:ec:19:42:75:f5:a3:e7:76:15:72:a3:c4: b5:ac:1e:56:09:d5:20:98:68:a6:f1:74:1c:a9:88: ea:dd:93:2c:1a:06:94:e3:7c:12:2c:bb:20:a7:e7: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:B9:DA:DB:97:B8:53:24:63:B3:8D:58:88:4A:9A:39:4C:A8:D7 X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b5:67:6e:44:a9:af:e7:5a:04:0a:8d:ed:e3:95:db:08:b0: 8d:8c:e8:ae:5b:d0:6e:06:e7:06:4e:39:25:f6:da:fa:16:ba: 80:b0:45:9a:11:e8:72:e9:ea:3e:a9:86:6e:21:91:c4:2b:14: e7:59:c0:99:bf:e9:e8:0d:81:85:20:d9:f5:eb:31:3a:3a:e3: 10:67:bb:08:f5:9e:44:f1:65:6c:48:0a:79:a4:e3:34:fd:af: 6a:2e:0b:0e:7d:35:88:92:48:5f:02:c0:08:6d:b3:07:de:29: 1c:b0:d9:f7:a1:c3:9c:d4:71:fb:32:b7:b0:fd:7a:a0:f2:e3: a5:cc:e1:4b:97:81:5b:94:f3:36:77:b0:6e:d0:ce:1e:d0:41: 1e:52:ef:2a:31:83:f9:3e:c0:ef:49:b9:49:83:1b:20:7b:0d: 84:bf:5f:f3:c0:9a:ad:79:e2:06:dd:d3:6b:c0:7f:fb:e7:0b: d5:df:d8:10:5d:96:7f:78:1a:a5:d2:e6:7f:7b:a8:a0:43:8e: 7a:6d:f9:39:8c:ac:d5:34:19:28:2d:83:99:d1:17:08:c2:dd: 38:5e:1b:04:7c:cc:3c:f6:2e:8b:60:cd:3b:e7:8e:9c:1b:7a: 98:c0:36:78:7a:95:da:b8:c3:30:9e:59:4f:d7:8e:d9:d5:25: 56:fd:43:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjFBRTExMC8GA1UEBRMoODJBNzY5REQ3NDZDODMxRjRDNERCMjlENkE2NURFMDhE NkFEOTVFRDAeFw0yNTA0MjUwNjE3MzlaFw0yNTA1MDIwNjE3MzlaMBgxFjAUBgNV BAMTDTY4MGIyOTA0LTYwYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIAhJJotJ5mAYAh55OISgLVBo8G8riOVyevDtl/Z0h/sI+u9CX0ukONgHdL24n Yc57Mj36XFXilw+D3NRRg5veUnGVEVQc3RN/p9C1HDuj9udTCnrVEalHx5RftIQb AmlcOokbIokrBVtL0vHKl85kakmFFJrFhWgwRZ68aKgDgg3Cvur2gfgHmVumN8b1 XRmnAJApBVBUEMZ3hNIQwvMAPJjRX2SFlWSJaH47laaAIIUPimk8iZhxrV1HWGpd puztPeDjQyclOWwR1DPEoRSNV7z4/ewZQnX1o+d2FXKjxLWsHlYJ1SCYaKbxdByp iOrdkywaBpTjfBIsuyCn5yGpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3tK52tuX uFMkY7ONWIhKmjlMqNcwHwYDVR0jBBgwFoAUgqdp3XRsgx9MTbKdamXeCNatle0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMUFFLzc0OTEyQjJDQUM3 MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3FkcDNYUnNneDlNVGJLZGFtWGVDTmF0bGUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky MUFFLzc0OTEyQjJDQUM3MzExRUZBM0NCRDE0QUM0RjlBRTAyL2dxZHAzWFJzZ3g5 TVRiS2RhbVhlQ05hdGxlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA61Z25Eqa/nWgQKje3jldsIsI2M6K5b0G4G5wZOOSX22voWuoCwRZoR 6HLp6j6phm4hkcQrFOdZwJm/6egNgYUg2fXrMTo64xBnuwj1nkTxZWxICnmk4zT9 r2ouCw59NYiSSF8CwAhtswfeKRyw2fehw5zUcfsyt7D9eqDy46XM4UuXgVuU8zZ3 sG7Qzh7QQR5S7yoxg/k+wO9JuUmDGyB7DYS/X/PAmq154gbd02vAf/vnC9Xf2BBd ln94GqXS5n97qKBDjnpt+TmMrNU0GSgtg5nRFwjC3TheGwR8zDz2LotgzTvnjpwb epjANnh6ldq4wzCeWU/XjtnVJVb9Q+o= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:42 2025 by rpki-client