$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft File: gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json) Hash identifier: tpT8U3d59D5KfUdJjHIAGcIJq7xoWz7iYhTQRol84zw= Subject key identifier: AD:7C:F6:FD:65:61:85:DD:A0:3B:62:70:C8:E5:2F:2F:10:88:99:28 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3F4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft Manifest number: 3AE0 Signing time: Thu 24 Apr 2025 14:20:00 +0000 Manifest this update: Thu 24 Apr 2025 14:19:59 +0000 Manifest next update: Thu 01 May 2025 14:19:59 +0000 Files and hashes: 1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: ZXFqjQ6IeJHufFDYop0msTaRGjiad1KGmYLmc/0PyH8=) 2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: PALIyVWAsvtscgbg+sm73eiiYRuD68MSbPN0evXTaxE=) 3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: XIkS3fiVeDxNk75oObZc/USCn6ndycSaKmVzL41B8c0=) 4: CB608BD0D13311EE8B61C185C4F9AE02.roa (hash: GhiisK+xkE915yTtyPUFYsaGYRY3S2Kd3NQqsg2cf3U=) 5: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: YU4YZ74T7xW8XI8cuLhtjNp6mdFgmcLPCumM3sCTd+o=) 6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: 4LrbAymfyErsiUGk8ioJ8VeDxysNk9CIt+uac7LIaSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16205 (0x3f4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Apr 24 14:19:59 2025 GMT Not After : May 1 14:19:59 2025 GMT Subject: CN=680a4890-ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:98:8f:e4:d4:0f:03:fd:27:31:4c:c9:01: 97:9f:cf:49:b3:e5:d0:98:0a:ad:03:87:89:71:b1: e4:24:be:ee:1b:92:01:da:6a:85:40:b7:85:09:c6: 2f:57:a2:b0:8d:9f:2c:48:84:b6:09:b7:74:6e:42: 8e:1f:e9:45:34:8e:c9:56:7a:c3:2d:c4:87:70:aa: 68:62:2c:f3:d8:59:d9:25:18:8d:85:1a:c4:64:6b: da:92:c7:05:9e:6e:5b:03:3e:3a:26:d8:8a:52:ae: cb:fc:b8:04:65:35:01:bd:32:9b:28:24:bf:e3:9b: 0c:0a:e8:be:4c:04:fc:26:ee:1f:f9:18:d3:8e:19: 8b:d4:3c:e2:31:b4:7e:72:3b:a8:59:e1:66:17:17: 76:f9:4d:d4:15:79:31:08:69:8f:e9:9a:c7:48:48: 0b:5d:ea:ce:eb:91:34:74:e4:74:e7:6f:14:4a:6f: 67:a1:41:85:af:64:07:30:6d:89:39:90:d8:9d:fb: b7:a6:bf:83:9d:2e:4c:97:43:77:ce:0d:ef:61:2a: 50:7a:29:35:5a:7e:e9:d8:93:0e:18:99:3d:5d:72: 47:fb:44:88:ac:d5:78:f0:9d:88:ad:e5:0b:50:a3: f8:30:92:5b:97:8d:42:f3:7d:6e:0f:a6:2a:75:80: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7C:F6:FD:65:61:85:DD:A0:3B:62:70:C8:E5:2F:2F:10:88:99:28 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:e5:e1:28:71:ac:99:69:d5:b8:71:3a:43:67:08:eb:43: 3f:0a:71:53:eb:2d:25:cd:f5:9a:52:9f:59:11:d9:81:d0:a5: 44:c4:32:d0:65:45:1a:10:73:94:ad:54:0c:8d:cf:1a:ed:21: 72:d4:0e:01:01:14:80:76:2a:b4:61:6e:c3:3e:c8:3e:d6:65: e1:1d:82:88:38:48:9b:4e:fa:57:fc:b5:92:7f:92:a3:45:ff: 91:86:d8:a6:79:c1:cd:3e:33:26:6a:15:d6:80:b8:12:9b:40: ea:39:b0:50:a2:f3:21:d3:81:77:62:ea:65:57:20:0f:9c:6c: 76:be:33:3d:73:d4:7e:96:98:22:83:74:f7:86:83:b8:5b:3a: 4f:06:a7:5b:fe:5f:13:78:cd:45:de:5b:66:e6:7e:8e:54:70: ef:6f:94:71:7d:04:b1:c1:0c:d9:7d:52:10:91:6c:2a:af:36: 76:a2:ea:85:e6:e1:b3:4a:97:3c:a1:07:42:32:75:44:ba:da: 5c:7a:76:9b:e3:0d:27:de:a1:80:89:dd:8d:bc:3a:11:f3:5f: 6c:07:fa:47:fc:05:8e:85:a3:59:bb:6f:a9:4a:1a:cd:66:71: 77:02:17:bc:f0:69:55:54:70:b9:32:b8:ae:52:25:7d:18:db: 81:76:25:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICP00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjUwNDI0MTQxOTU5WhcNMjUwNTAxMTQxOTU5WjAYMRYwFAYD VQQDEw02ODBhNDg5MC1kZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nqYj+TUDwP9JzFMyQGXn89Js+XQmAqtA4eJcbHkJL7uG5IB2mqFQLeFCcYv V6KwjZ8sSIS2Cbd0bkKOH+lFNI7JVnrDLcSHcKpoYizz2FnZJRiNhRrEZGvakscF nm5bAz46JtiKUq7L/LgEZTUBvTKbKCS/45sMCui+TAT8Ju4f+RjTjhmL1DziMbR+ cjuoWeFmFxd2+U3UFXkxCGmP6ZrHSEgLXerO65E0dOR0528USm9noUGFr2QHMG2J OZDYnfu3pr+DnS5Ml0N3zg3vYSpQeik1Wn7p2JMOGJk9XXJH+0SIrNV48J2IreUL UKP4MJJbl41C831uD6YqdYAvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK189v1l YYXdoDticMjlLy8QiJkoMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDAxRS8zNUZBMEY1NjFENzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0 d2dHSmY1bTh4dUtfcUkwQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcB+XhKHGsmWnVuHE6Q2cI60M/CnFT6y0lzfWaUp9ZEdmB0KVExDLQ ZUUaEHOUrVQMjc8a7SFy1A4BARSAdiq0YW7DPsg+1mXhHYKIOEibTvpX/LWSf5Kj Rf+RhtimecHNPjMmahXWgLgSm0DqObBQovMh04F3YuplVyAPnGx2vjM9c9R+lpgi g3T3hoO4WzpPBqdb/l8TeM1F3ltm5n6OVHDvb5RxfQSxwQzZfVIQkWwqrzZ2ouqF 5uGzSpc8oQdCMnVEutpcenab4w0n3qGAid2NvDoR819sB/pH/AWOhaNZu2+pShrN ZnF3Ahe88GlVVHC5MriuUiV9GNuBdiUp -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:43 2025 by rpki-client