$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft File: GM0m8vXURLcgxFKoxskgxtCmGAU.mft (raw, json) Hash identifier: Mqaub+t0dH/xeUFhqKFPRP25zftMv8Igt1/meiS1pJ8= Subject key identifier: 91:1F:01:4B:FC:68:AF:5D:52:17:0F:F9:BF:DB:45:CC:92:61:FD:3E Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft Manifest number: 0194 Signing time: Thu 24 Apr 2025 17:37:29 +0000 Manifest this update: Thu 24 Apr 2025 17:37:29 +0000 Manifest next update: Thu 01 May 2025 17:37:29 +0000 Files and hashes: 1: GM0m8vXURLcgxFKoxskgxtCmGAU.crl (hash: NzHi82bDY+3m8XWqb++HfvKgr689K5sWrot4qcgupug=) 2: 65A422A8C3F411EEB1191654C4F9AE02.roa (hash: iZmR1FbskCchxXKnxnbe4xzmmTQB2zEX5unoWSw1o+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Apr 24 17:37:29 2025 GMT Not After : May 1 17:37:29 2025 GMT Subject: CN=680a76d9-0a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:7e:e4:68:bf:4b:e6:42:2f:c0:8c:c6:f3: 40:d0:b2:2c:e0:70:bb:d1:40:eb:d3:ec:6d:e3:9a: 4e:44:c9:8c:11:3f:69:ae:46:2b:d8:7b:1e:52:12: 8f:00:4d:09:3e:d5:f9:15:a7:e6:16:35:e3:e8:02: f5:79:e1:bf:5f:91:09:dd:23:5d:1f:08:f1:7d:b7: 82:6d:ff:7b:0d:77:9e:8a:b1:fc:ac:78:05:7b:5d: 55:6e:e3:37:d7:08:14:a9:05:de:8f:cc:cf:de:dd: 22:33:18:4f:39:4c:11:59:f7:89:93:c8:c8:21:dc: 7c:67:53:90:c6:8d:25:72:cd:1d:94:0d:c3:e0:db: 97:a8:2f:64:7c:c1:03:1e:32:06:fa:cd:5d:8d:e3: c5:79:ba:35:8e:ff:d6:f1:e2:0f:fc:d2:cd:a5:56: 30:45:9f:8a:be:51:53:79:31:60:fd:35:dd:35:ca: d9:85:8b:ba:08:68:26:c1:56:56:17:bc:1c:3e:c8: 27:84:f6:98:20:6f:ab:5e:65:84:55:f8:cc:ed:47: 8e:ed:74:3e:85:58:6d:bb:68:76:08:af:3a:b5:1a: e0:07:61:3a:5e:a9:0f:ee:fb:58:7f:77:a8:c5:2c: b4:b3:31:b3:98:c9:4a:63:4d:41:75:48:c0:d2:3e: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1F:01:4B:FC:68:AF:5D:52:17:0F:F9:BF:DB:45:CC:92:61:FD:3E X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:bc:fe:be:82:b4:57:9f:0a:65:c9:09:b0:09:49:75:a6: b6:a0:e3:13:1a:55:62:51:90:c2:0d:5a:a8:73:95:a6:71:ff: 35:cc:6e:d6:3c:b9:e6:35:e5:bf:e9:5e:e8:f5:81:07:a9:9d: 2a:de:ca:aa:3c:f8:8d:63:a9:8d:39:99:7b:93:08:0d:52:d5: 7f:e1:9a:a8:0b:2c:25:43:de:d8:4e:81:e1:bc:a9:48:d2:1d: 8e:42:8a:21:1f:2a:ab:32:ef:34:d3:38:89:7a:93:5f:31:bc: 35:71:86:af:5e:76:6a:ee:35:36:c2:cf:21:0b:3a:77:9d:1d: 33:be:d5:69:14:14:f7:47:c4:16:4f:79:4b:2d:e3:ae:c5:7b: 13:9e:c4:30:b9:34:6f:93:05:15:f7:c8:68:1c:1f:42:51:cf: e2:e5:c0:6d:35:e4:f7:df:29:e0:d3:a5:83:ba:c3:47:a2:82: 36:f5:93:d5:8a:ab:0c:fb:8f:60:cb:b2:3a:45:93:a3:aa:56: 48:4b:d5:54:a6:9b:b7:89:1b:76:57:12:f9:c6:1c:6a:05:a4: e1:d7:c0:57:e7:17:ea:56:dd:40:ab:42:c0:8b:6d:04:5e:06: e8:38:5e:04:d7:ff:23:08:67:bb:a0:39:5d:f4:80:6c:59:6a: 3a:36:ef:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUwNDI0MTczNzI5WhcNMjUwNTAxMTczNzI5WjAYMRYwFAYD VQQDEw02ODBhNzZkOS0wYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP5+5Gi/S+ZCL8CMxvNA0LIs4HC70UDr0+xt45pORMmMET9prkYr2HseUhKP AE0JPtX5FafmFjXj6AL1eeG/X5EJ3SNdHwjxfbeCbf97DXeeirH8rHgFe11VbuM3 1wgUqQXej8zP3t0iMxhPOUwRWfeJk8jIIdx8Z1OQxo0lcs0dlA3D4NuXqC9kfMED HjIG+s1djePFebo1jv/W8eIP/NLNpVYwRZ+KvlFTeTFg/TXdNcrZhYu6CGgmwVZW F7wcPsgnhPaYIG+rXmWEVfjM7UeO7XQ+hVhtu2h2CK86tRrgB2E6XqkP7vtYf3eo xSy0szGzmMlKY01BdUjA0j7HPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEfAUv8 aK9dUhcP+b/bRcySYf0+MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUYwMi8yNjFGMzREOEMxRjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJM Y2d4RktveHNrZ3h0Q21HQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUTLz+voK0V58KZckJsAlJdaa2oOMTGlViUZDCDVqoc5Wmcf81zG7W PLnmNeW/6V7o9YEHqZ0q3sqqPPiNY6mNOZl7kwgNUtV/4ZqoCywlQ97YToHhvKlI 0h2OQoohHyqrMu800ziJepNfMbw1cYavXnZq7jU2ws8hCzp3nR0zvtVpFBT3R8QW T3lLLeOuxXsTnsQwuTRvkwUV98hoHB9CUc/i5cBtNeT33yng06WDusNHooI29ZPV iqsM+49gy7I6RZOjqlZIS9VUppu3iRt2VxL5xhxqBaTh18BX5xfqVt1Aq0LAi20E XgboOF4E1/8jCGe7oDld9IBsWWo6Nu9J -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:23 2025 by rpki-client