$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft File: GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json) Hash identifier: sMOkClo3xHCnQq0GGtjVPkFylbM0PFMrta9JqCaONQs= Subject key identifier: 1C:FE:4B:CA:EC:DE:32:C5:20:53:7C:0B:19:EF:D1:C9:A8:18:52:8C Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C Certificate issuer: /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft Manifest number: 0430 Signing time: Fri 25 Apr 2025 00:05:59 +0000 Manifest this update: Fri 25 Apr 2025 00:05:59 +0000 Manifest next update: Fri 02 May 2025 00:05:59 +0000 Files and hashes: 1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: KP3LqLt3B0g9DB8QF8riyYUB1jvPvVq5Cl75xbn2pt0=) 2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: Y2D4bZVCWRU0pKNmh7gUDg+LE8MSxtojGL7g4PBL1wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C Validity Not Before: Apr 25 00:05:59 2025 GMT Not After : May 2 00:05:59 2025 GMT Subject: CN=680ad1e7-8e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:02:a5:3e:af:0a:77:37:39:32:ef:e8:73: 99:a6:e5:5e:46:43:11:79:24:07:22:ba:56:45:30: ea:f3:0e:b4:8c:0b:f2:cd:3d:75:47:4d:2d:5e:f6: ed:67:40:a6:eb:2e:8f:e8:66:54:75:af:a6:86:73: 26:5b:99:29:91:a4:8c:9d:aa:6c:0d:a5:da:72:ff: 9d:8d:52:0c:94:a9:e4:ec:6b:47:ff:cd:34:6b:be: f4:9e:97:1d:d4:5b:41:85:38:8a:1a:b1:d6:0d:8e: 27:4b:d8:97:0f:ff:27:5e:cf:56:28:ca:0a:a1:ba: f5:d4:cc:f2:60:7e:34:b1:e9:6f:9e:ff:0e:53:59: d9:df:85:00:e2:74:b1:91:23:3c:28:d6:13:04:2d: dc:06:cd:fd:07:95:38:73:dd:0f:3f:d1:eb:02:89: 47:ac:b8:e9:5c:63:54:cb:6c:7b:ee:59:c8:9e:4f: c4:6c:41:27:c9:e7:15:2b:5b:60:5c:80:03:3f:58: 07:14:e7:06:7a:05:76:6f:af:65:21:4b:59:51:d5: 93:b2:1f:f1:dc:f5:d1:45:8a:df:9c:17:5d:51:9b: 63:41:1a:3c:c5:5f:cb:cb:9a:05:6c:e9:96:74:22: e9:65:31:78:fb:d0:a6:2b:6a:b0:54:0f:47:00:6a: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FE:4B:CA:EC:DE:32:C5:20:53:7C:0B:19:EF:D1:C9:A8:18:52:8C X509v3 Authority Key Identifier: keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:63:19:e8:a3:a5:1a:b6:0b:bd:8c:a8:29:06:f6:15:fb: 97:1d:7b:5e:60:17:46:8d:a0:04:bd:dd:6a:43:ea:4d:fa:2c: 2c:b9:8e:24:66:de:a9:c0:20:fc:39:07:8f:c2:b1:39:e5:e6: 16:e6:12:a4:ea:09:f5:6b:7d:05:fc:31:7f:02:2b:8b:23:fe: a4:81:b9:d0:52:0c:6d:8b:29:5b:ec:ea:9c:b2:4f:eb:6a:b2: 8b:c9:46:62:2a:95:b1:86:e6:c3:8b:5a:74:e9:ea:39:15:93: 3d:01:db:37:20:7d:74:a4:4f:18:f9:4f:69:55:d4:07:92:0b: 92:5e:d6:cd:57:db:ba:d6:d6:f6:f5:a3:94:6e:33:7c:aa:cc: 56:2d:d2:3f:80:79:40:90:2b:81:0a:e1:d8:47:0b:f4:f2:79: ac:40:30:de:ab:fd:90:e2:58:ec:29:1d:4f:cb:cf:31:45:08: c4:fb:52:32:e7:4d:48:16:fb:98:d5:43:69:30:2e:4a:71:b1: 6f:5b:35:21:7e:8d:0a:ed:34:15:4d:c5:66:5a:40:03:95:0c: 23:93:01:2f:d9:db:d3:a4:6f:74:24:fb:d0:29:9d:f5:b6:b7: 97:65:97:d8:3e:7e:56:79:53:15:92:32:61:aa:9b:32:9b:51: c2:0a:eb:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx MjU2MTQxM0MwHhcNMjUwNDI1MDAwNTU5WhcNMjUwNTAyMDAwNTU5WjAYMRYwFAYD VQQDEw02ODBhZDFlNy04ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO8CpT6vCnc3OTLv6HOZpuVeRkMReSQHIrpWRTDq8w60jAvyzT11R00tXvbt Z0Cm6y6P6GZUda+mhnMmW5kpkaSMnapsDaXacv+djVIMlKnk7GtH/800a770npcd 1FtBhTiKGrHWDY4nS9iXD/8nXs9WKMoKobr11MzyYH40selvnv8OU1nZ34UA4nSx kSM8KNYTBC3cBs39B5U4c90PP9HrAolHrLjpXGNUy2x77lnInk/EbEEnyecVK1tg XIADP1gHFOcGegV2b69lIUtZUdWTsh/x3PXRRYrfnBddUZtjQRo8xV/Ly5oFbOmW dCLpZTF4+9CmK2qwVA9HAGpGjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz+S8rs 3jLFIFN8Cxnv0cmoGFKMMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5 N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQIGMZ6KOlGrYLvYyoKQb2FfuXHXteYBdGjaAEvd1qQ+pN+iwsuY4k Zt6pwCD8OQePwrE55eYW5hKk6gn1a30F/DF/AiuLI/6kgbnQUgxtiylb7Oqcsk/r arKLyUZiKpWxhubDi1p06eo5FZM9Ads3IH10pE8Y+U9pVdQHkguSXtbNV9u61tb2 9aOUbjN8qsxWLdI/gHlAkCuBCuHYRwv08nmsQDDeq/2Q4ljsKR1Py88xRQjE+1Iy 501IFvuY1UNpMC5KcbFvWzUhfo0K7TQVTcVmWkADlQwjkwEv2dvTpG90JPvQKZ31 treXZZfYPn5WeVMVkjJhqpsym1HCCuuT -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:40 2025 by rpki-client