$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft File: GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json) Hash identifier: SzA4ZkZkHQiSudk+rMTj7CYfqWuCYoF4CxV4RQWE2XM= Subject key identifier: 35:5A:ED:BE:CA:1A:BF:EE:66:78:A0:4A:25:9C:98:00:F4:17:6F:D3 Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft Manifest number: 0394 Signing time: Fri 25 Apr 2025 00:42:53 +0000 Manifest this update: Fri 25 Apr 2025 00:42:53 +0000 Manifest next update: Fri 02 May 2025 00:42:53 +0000 Files and hashes: 1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: 2/LKhbbO+a+JaimdSLF/TruxWZKu37Qv3W/BT7IQjLY=) 2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: dVvAOLaR7VeZVwIO8MXBU1Oox1e9LXcIU8oAAShatyQ=) 3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: PgMBENTeyWyz3nCYdAUNFSDbq4rzld/sgQolQLS27eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D Validity Not Before: Apr 25 00:42:53 2025 GMT Not After : May 2 00:42:53 2025 GMT Subject: CN=680ada8d-6381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:03:c0:28:97:15:9d:c2:b5:57:c3:4e:91: 4f:a4:d8:e1:b3:ba:99:97:4d:d4:d1:4f:73:3f:5f: 08:00:0c:fd:70:8f:4d:94:d7:c2:f7:ad:50:94:a1: b6:28:c6:7d:b9:3f:a7:23:07:fa:e5:be:31:99:09: 0a:ab:1d:e7:68:0f:39:5c:ac:3a:12:4f:83:8b:32: fa:fa:c5:f0:d6:38:ea:d1:34:85:d7:93:fc:ad:0a: 61:d7:47:5f:80:b9:1f:7a:28:8d:42:0c:99:09:99: 6e:b3:29:12:d4:1f:00:bc:91:49:bc:8e:86:6c:62: 52:c7:12:92:3c:fe:d5:07:4f:f1:47:5b:34:04:c2: 4f:dc:e9:39:ad:ab:c6:7d:8f:76:98:9c:4a:f3:02: 24:b7:07:f3:eb:0c:9e:fb:0b:44:39:e3:3e:c2:85: a2:0c:c8:77:84:66:3c:06:4b:26:56:36:b0:f5:5a: e2:3b:d4:a1:e2:8c:20:d7:ec:70:6e:8f:37:b1:28: b7:ca:0c:ef:23:6b:38:84:9c:cd:62:05:c7:fa:5e: 76:cf:4d:2b:27:2b:e6:c8:a8:b6:83:26:9e:a1:a6: 75:b9:2f:c1:57:81:c4:68:c7:bf:db:47:f0:92:e6: e3:4e:9f:25:03:ed:0c:02:88:05:3e:ef:05:d3:da: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:ED:BE:CA:1A:BF:EE:66:78:A0:4A:25:9C:98:00:F4:17:6F:D3 X509v3 Authority Key Identifier: keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:47:64:39:28:f8:ea:3a:30:c9:fe:df:91:6a:20:ca:ad:40: ea:f3:ad:dc:05:8e:af:ce:53:61:85:26:b4:d2:0a:9f:3e:70: 1a:c1:97:9d:72:4a:dc:81:83:6d:56:da:4c:fd:40:ef:84:1e: 5f:8a:a6:c9:98:ba:b3:d0:24:ac:9e:84:24:7b:32:8a:ba:b5: 65:cd:ac:4d:12:26:a4:8c:78:b7:ac:84:e6:18:af:1c:ec:b7: 3d:88:ac:a3:ec:90:78:ec:48:c3:44:fc:dd:b7:59:a8:9d:de: 87:6a:3d:d3:5e:55:c7:1b:8a:6a:69:a6:3f:58:70:71:9a:e1: ee:60:da:87:a1:1a:66:aa:18:75:29:ef:37:b8:a0:35:8e:96: 15:6a:82:5a:21:db:01:54:2e:0c:ba:9c:42:ce:7d:3a:95:94: ad:09:23:34:a6:e5:ef:53:a1:c7:68:da:08:c9:01:91:7f:ef: 44:d2:9e:e9:b1:58:63:b2:5c:e7:95:6f:6e:f5:2b:56:ad:4c: 46:8b:e2:c5:9c:ec:18:c3:37:d0:14:32:40:a3:23:42:0f:de: fb:ac:ef:31:4b:5a:f3:b2:f0:55:c2:a6:88:93:2a:ad:02:87: aa:61:24:83:d9:5e:45:ac:87:c8:2b:a4:55:11:0f:d4:30:b7: 28:95:2d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG RTJCMDk5M0QwHhcNMjUwNDI1MDA0MjUzWhcNMjUwNTAyMDA0MjUzWjAYMRYwFAYD VQQDEw02ODBhZGE4ZC02MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy8DwCiXFZ3CtVfDTpFPpNjhs7qZl03U0U9zP18IAAz9cI9NlNfC961QlKG2 KMZ9uT+nIwf65b4xmQkKqx3naA85XKw6Ek+DizL6+sXw1jjq0TSF15P8rQph10df gLkfeiiNQgyZCZlusykS1B8AvJFJvI6GbGJSxxKSPP7VB0/xR1s0BMJP3Ok5ravG fY92mJxK8wIktwfz6wye+wtEOeM+woWiDMh3hGY8BksmVjaw9VriO9Sh4owg1+xw bo83sSi3ygzvI2s4hJzNYgXH+l52z00rJyvmyKi2gyaeoaZ1uS/BV4HEaMe/20fw kubjTp8lA+0MAogFPu8F09pXAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVa7b7K Gr/uZnigSiWcmAD0F2/TMB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3 OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM X0c2UkkyeXdodFQtS3dtVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUR2Q5KPjqOjDJ/t+RaiDKrUDq863cBY6vzlNhhSa00gqfPnAawZed ckrcgYNtVtpM/UDvhB5fiqbJmLqz0CSsnoQkezKKurVlzaxNEiakjHi3rITmGK8c 7Lc9iKyj7JB47EjDRPzdt1mond6Haj3TXlXHG4pqaaY/WHBxmuHuYNqHoRpmqhh1 Ke83uKA1jpYVaoJaIdsBVC4MupxCzn06lZStCSM0puXvU6HHaNoIyQGRf+9E0p7p sVhjslznlW9u9StWrUxGi+LFnOwYwzfQFDJAoyNCD977rO8xS1rzsvBVwqaIkyqt AoeqYSSD2V5FrIfIK6RVEQ/UMLcolS2h -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:23 2025 by rpki-client