$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: Y6OeLlnWMZbdN85bmksRVxSI0HKz9Vi1ySz8VyYG5DE= Subject key identifier: 8F:F9:67:9D:F2:0D:6F:36:E6:5B:C0:37:EC:6E:1B:44:93:26:85:2F Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 0422 Signing time: Fri 25 Apr 2025 00:12:26 +0000 Manifest this update: Fri 25 Apr 2025 00:12:25 +0000 Manifest next update: Fri 02 May 2025 00:12:25 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: ZKyVkiPxAgYklfH+IfksSHw5aHP/vEBVv1ImkIDCukQ=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Apr 25 00:12:25 2025 GMT Not After : May 2 00:12:25 2025 GMT Subject: CN=680ad36a-737a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:be:12:da:04:8b:94:69:0a:6a:c9:b3:67: 61:06:56:15:6a:1e:a2:62:6b:48:28:78:46:57:1e: c7:67:70:ed:d9:22:bd:29:c8:8b:93:a4:5e:a1:9b: 9e:9c:0b:d5:78:44:c8:0c:52:ab:da:17:ee:e3:7f: 4a:30:34:9b:1d:6b:36:2d:73:db:6b:f6:02:88:2e: 2c:f6:f9:22:9d:8e:bc:75:a8:b7:a5:a7:57:89:e3: 2d:10:c3:89:a3:4b:08:94:cc:74:33:c9:88:86:f4: 17:15:ee:d3:9c:83:b0:65:a4:1c:1f:43:83:0a:66: f6:8b:f1:db:84:26:5f:f1:4b:bc:02:22:e2:53:a1: db:5d:c4:01:e5:14:23:eb:27:c0:ff:d6:8e:05:5f: 75:7d:9c:04:ee:89:c4:3d:67:d0:8d:15:5e:7c:0d: ba:e1:59:00:78:e1:d3:86:f0:2d:28:f9:22:7a:df: 27:94:b6:2b:85:38:9c:ef:2f:ce:b7:e5:91:a4:4c: 94:4c:8b:bc:d7:08:5a:b9:8f:06:e4:72:3c:21:c3: df:2d:54:b5:e3:90:05:39:4f:36:ed:e8:be:1a:53: b1:7a:89:ae:2d:a0:de:4f:a7:a2:0a:82:57:d2:33: 86:d0:cc:3b:e8:29:3c:a9:d7:08:9d:9e:63:65:42: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F9:67:9D:F2:0D:6F:36:E6:5B:C0:37:EC:6E:1B:44:93:26:85:2F X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:91:53:54:bb:98:d8:8b:74:87:d4:2f:54:7c:87:df:3f: 4c:33:1d:19:60:fb:23:7f:60:a9:ad:50:b9:1d:9f:58:1a:cf: 63:23:9f:7a:2b:ce:3f:80:92:97:0a:93:0e:47:6d:ad:02:ea: 9a:14:67:1d:ce:8c:c7:5e:4a:63:42:f0:4d:9d:ae:09:8c:04: ab:d1:ab:c4:5f:0d:62:2d:49:11:f4:4e:e2:30:c1:9f:af:08: c5:1a:29:d6:81:24:77:9f:92:9f:34:2a:80:01:bb:60:92:db: 5c:43:0d:0d:f6:9d:79:24:4b:89:3e:f3:74:cc:50:f6:94:1c: cd:20:6b:8b:4a:51:b1:ae:7a:0c:55:62:4b:2e:d3:11:ef:99: bf:b7:47:c5:07:67:0c:c0:c8:cc:cd:b3:2e:b2:77:ef:92:7f: b4:d5:34:07:5e:b3:85:40:cb:ec:73:9a:f4:a3:4d:39:9f:e2: 4f:5e:57:03:c3:e2:c7:8f:70:aa:0a:ba:ad:31:c7:9d:0c:8e: 92:c7:ae:ce:58:33:6a:37:f6:77:55:80:36:0f:2d:7a:1f:55: e4:d0:8d:d2:13:f3:4a:48:34:f5:88:6c:0f:85:6e:46:dd:e1: 7f:92:bd:0c:ce:2c:c9:f9:91:85:b9:84:e2:e1:28:a3:9d:51: 33:29:02:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwNDI1MDAxMjI1WhcNMjUwNTAyMDAxMjI1WjAYMRYwFAYD VQQDEw02ODBhZDM2YS03MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07C+EtoEi5RpCmrJs2dhBlYVah6iYmtIKHhGVx7HZ3Dt2SK9KciLk6ReoZue nAvVeETIDFKr2hfu439KMDSbHWs2LXPba/YCiC4s9vkinY68dai3padXieMtEMOJ o0sIlMx0M8mIhvQXFe7TnIOwZaQcH0ODCmb2i/HbhCZf8Uu8AiLiU6HbXcQB5RQj 6yfA/9aOBV91fZwE7onEPWfQjRVefA264VkAeOHThvAtKPkiet8nlLYrhTic7y/O t+WRpEyUTIu81whauY8G5HI8IcPfLVS145AFOU827ei+GlOxeomuLaDeT6eiCoJX 0jOG0Mw76Ck8qdcInZ5jZULZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/5Z53y DW825lvAN+xuG0STJoUvMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWJFTVLuY2It0h9QvVHyH3z9MMx0ZYPsjf2CprVC5HZ9YGs9jI596 K84/gJKXCpMOR22tAuqaFGcdzozHXkpjQvBNna4JjASr0avEXw1iLUkR9E7iMMGf rwjFGinWgSR3n5KfNCqAAbtgkttcQw0N9p15JEuJPvN0zFD2lBzNIGuLSlGxrnoM VWJLLtMR75m/t0fFB2cMwMjMzbMusnfvkn+01TQHXrOFQMvsc5r0o005n+JPXlcD w+LHj3CqCrqtMcedDI6Sx67OWDNqN/Z3VYA2Dy16H1Xk0I3SE/NKSDT1iGwPhW5G 3eF/kr0MzizJ+ZGFuYTi4SijnVEzKQKa -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:47 2025 by rpki-client