$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft File: e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json) Hash identifier: +d5nNdBM33mSes1gj7DMqBuEhf/6blsW4gupjkfRWDA= Subject key identifier: 31:99:E0:E2:0F:D5:CC:9F:C1:1E:77:D6:22:38:10:0F:37:3C:C0:B7 Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft Manifest number: 0629 Signing time: Thu 24 Apr 2025 22:31:58 +0000 Manifest this update: Thu 24 Apr 2025 22:31:57 +0000 Manifest next update: Thu 01 May 2025 22:31:57 +0000 Files and hashes: 1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: MVfH5odWpdUlkvrKMxgJoJcVB9clA5g4CU9ogNDst7I=) 2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=) 3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Validity Not Before: Apr 24 22:31:57 2025 GMT Not After : May 1 22:31:57 2025 GMT Subject: CN=680abbde-064e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:f4:46:f0:02:03:dc:99:34:86:09:8c:b3: 28:fb:2e:79:94:42:f8:a3:60:7c:31:24:ee:a0:d2: d3:7d:bd:f4:40:5d:0f:20:57:2c:17:81:e2:13:44: f5:01:d9:be:0a:56:d2:13:97:fa:93:e1:6c:e4:79: d1:74:59:9b:b5:73:b6:92:ad:8b:80:2e:f9:d1:94: 2a:a4:6a:08:d4:6f:57:1b:8d:f7:e2:20:46:af:da: 43:3b:88:35:4e:09:e0:a4:7a:ef:8c:84:e3:64:c4: 2b:3e:47:91:70:9f:50:ab:02:8d:8e:c8:60:33:01: 3d:b3:a9:85:e1:9d:0c:bc:91:67:cc:6c:8f:07:82: 90:84:90:24:75:56:ec:96:58:a2:a2:d3:ca:34:1d: 84:38:ad:26:fb:47:6b:0f:31:22:a9:32:3f:d3:c9: 03:18:dc:55:12:6f:a8:89:26:ae:8b:6f:d1:69:61: 3e:93:11:26:d8:80:23:03:8b:68:f3:7d:80:75:7b: fd:5e:f5:00:72:17:e7:cf:fa:d7:d6:1d:b1:95:6a: b9:3a:49:51:24:cd:66:fb:1d:d6:7f:47:e6:f7:fd: 27:6b:d9:7e:6d:32:30:2e:18:ba:72:2a:0b:fa:b0: 78:d7:bd:ed:51:40:dd:1c:5c:da:df:96:01:17:f1: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:E0:E2:0F:D5:CC:9F:C1:1E:77:D6:22:38:10:0F:37:3C:C0:B7 X509v3 Authority Key Identifier: keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:92:09:b3:af:35:86:31:7a:f1:1e:a3:97:2a:5b:74:c0: f2:81:d8:d3:b9:56:7c:0d:85:43:f6:06:c3:ca:49:fb:31:72: 74:c2:d4:3b:1c:c4:2c:dc:64:3b:23:c1:e0:01:e2:5b:c4:a1: 0f:50:39:47:52:88:34:d7:cf:7d:c1:cc:43:af:8c:8f:d6:97: f4:62:8b:bc:34:50:86:29:f4:6c:0a:78:70:21:33:a6:d7:b2: 3c:4e:28:49:1b:cc:e0:5c:c9:50:51:48:5f:37:9b:28:3c:b9: e7:87:f3:84:17:c1:f8:d1:70:44:0d:28:7a:6f:00:a8:19:f7: 16:33:0c:56:15:ed:46:41:05:89:5c:a7:0a:21:1d:40:c2:85: bb:e5:4c:f3:f4:4a:2a:20:a0:5c:dc:22:96:da:ac:07:a8:ae: 2e:e7:ce:f6:6d:8f:46:ac:20:e8:0a:0d:e0:da:b5:00:d9:5d: f1:71:09:c3:c6:d2:9c:81:21:3f:7d:88:0b:6d:65:a2:bc:1f: af:15:5a:37:75:de:df:43:c4:87:d7:3a:86:5a:1f:dc:20:45: 74:f2:25:43:a0:90:de:9b:22:03:0a:fb:89:8f:b6:b1:64:c6: 87:09:71:a8:da:61:68:91:7e:5a:a7:28:ce:44:db:ca:ac:8d: e1:54:1c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRjIxMTAvBgNVBAUTKDdCRjE4MENFQUM0NzZEQkQxODM5MjkxMEZBMjJEQUEx RUY1QkE2RDUwHhcNMjUwNDI0MjIzMTU3WhcNMjUwNTAxMjIzMTU3WjAYMRYwFAYD VQQDEw02ODBhYmJkZS0wNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPP0RvACA9yZNIYJjLMo+y55lEL4o2B8MSTuoNLTfb30QF0PIFcsF4HiE0T1 Adm+ClbSE5f6k+Fs5HnRdFmbtXO2kq2LgC750ZQqpGoI1G9XG4334iBGr9pDO4g1 TgngpHrvjITjZMQrPkeRcJ9QqwKNjshgMwE9s6mF4Z0MvJFnzGyPB4KQhJAkdVbs lliiotPKNB2EOK0m+0drDzEiqTI/08kDGNxVEm+oiSaui2/RaWE+kxEm2IAjA4to 832AdXv9XvUAchfnz/rX1h2xlWq5OklRJM1m+x3Wf0fm9/0na9l+bTIwLhi6cioL +rB4173tUUDdHFza35YBF/EOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGZ4OIP 1cyfwR531iI4EA83PMC3MB8GA1UdIwQYMBaAFHvxgM6sR229GDkpEPoi2qHvW6bV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVGMi9EQTQ3RTU2MDk0 NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJiMFlPU2tRLWlMYW9lOWJw dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfR0F6cXhIYmIwWU9Ta1EtaUxhb2U5YnB0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVGMi9EQTQ3RTU2MDk0NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJi MFlPU2tRLWlMYW9lOWJwdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlK5IJs681hjF68R6jlypbdMDygdjTuVZ8DYVD9gbDykn7MXJ0wtQ7 HMQs3GQ7I8HgAeJbxKEPUDlHUog01899wcxDr4yP1pf0You8NFCGKfRsCnhwITOm 17I8TihJG8zgXMlQUUhfN5soPLnnh/OEF8H40XBEDSh6bwCoGfcWMwxWFe1GQQWJ XKcKIR1AwoW75Uzz9EoqIKBc3CKW2qwHqK4u5872bY9GrCDoCg3g2rUA2V3xcQnD xtKcgSE/fYgLbWWivB+vFVo3dd7fQ8SH1zqGWh/cIEV08iVDoJDemyIDCvuJj7ax ZMaHCXGo2mFokX5apyjORNvKrI3hVByz -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:26 2025 by rpki-client