$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft File: gHwED6kB5dhpWmU03mbD1qC_vMU.mft (raw, json) Hash identifier: zx5BVBFKTN1kMvsErwydGLPA/KUwUEZ1GmO7tD3CWAs= Subject key identifier: E3:42:3D:42:BE:FD:87:7A:DA:8D:E6:83:59:5B:DB:A7:BC:CE:23:50 Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft Manifest number: B3 Signing time: Fri 25 Apr 2025 05:01:05 +0000 Manifest this update: Fri 25 Apr 2025 05:01:05 +0000 Manifest next update: Fri 02 May 2025 05:01:05 +0000 Files and hashes: 1: gHwED6kB5dhpWmU03mbD1qC_vMU.crl (hash: ByE83c3/DCCwcahzlk9+IJGPR+Y8kTZpc1bXNODiZD4=) 2: A697738410FA11EF9A068536C4F9AE02.roa (hash: Zv0ZFs3ilUsRHmjHi746Q/P+ClsZujQ8kkuNmYui824=) 3: 7D9F83FE10FA11EFADBBC431C4F9AE02.roa (hash: oCCDEtGddaMKQfOelMIcnjIu17ZvyL6EU64SchGV+9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Apr 25 05:01:05 2025 GMT Not After : May 2 05:01:05 2025 GMT Subject: CN=680b1711-df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:25:ec:ef:22:45:a5:8a:fd:39:7a:67:23: 67:6c:aa:f1:6f:71:9c:6f:a0:29:80:22:60:d0:5e: b9:7d:45:e0:1d:71:8d:f0:3d:9c:e4:c9:69:c2:71: 4b:b4:db:d6:5b:92:50:e9:c5:84:4b:e1:b4:d1:e8: 35:d6:00:cc:a9:c2:7d:c4:32:85:c7:d6:15:b6:4d: 76:81:2c:74:91:1a:8d:e0:3e:b2:50:8c:21:47:92: 61:c0:71:e3:ca:cb:f7:f4:9d:75:b2:3f:8f:f0:96: a5:aa:c6:be:55:f5:2f:8c:6a:68:b6:35:f4:e4:29: 89:04:bd:f6:a4:d6:61:67:6f:91:dc:c5:3a:dd:1f: b7:c5:de:0d:a0:4e:71:01:62:0b:ba:b5:d2:7b:9d: f7:9c:b9:aa:f8:30:ea:1d:46:49:35:73:e5:5d:f1: 31:ee:d2:b4:84:b1:05:9c:26:c7:08:97:74:1f:36: a8:24:ed:22:aa:d3:cd:33:f1:66:2e:99:47:5c:c3: 74:2e:03:5e:4b:03:37:a3:8d:6a:7d:e8:fa:78:ff: 00:7e:d1:08:e8:41:9a:ab:ed:e3:9d:78:d1:c9:39: b0:ef:7b:c7:4e:78:3f:f7:3a:c8:66:21:08:76:f3: 8a:02:ba:d8:e8:03:db:b9:83:b7:d0:a7:71:3f:c1: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:42:3D:42:BE:FD:87:7A:DA:8D:E6:83:59:5B:DB:A7:BC:CE:23:50 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:57:72:c3:b0:41:fd:9c:4d:77:1c:39:91:1a:0a:54:ec:78: 61:60:8d:38:01:be:cd:a7:68:07:8f:95:35:f7:f0:a9:17:d3: 28:c5:d5:1e:e9:96:51:60:c2:b8:08:a1:01:e9:47:e2:77:ff: 42:51:b3:0c:2f:27:b3:2f:6b:fa:9f:6a:8f:19:f8:2b:b2:f6: dc:ad:fd:e0:b3:47:f1:ca:78:cd:66:37:c6:2d:32:ca:31:bc: ce:db:ed:b0:89:1c:32:d1:23:1e:71:fa:c2:49:56:5c:3f:9e: 92:7d:35:82:0d:d9:e3:8b:78:19:4e:0a:9d:d9:f4:67:a5:15: 66:92:36:11:13:97:70:d2:bf:80:8b:3f:ee:69:13:a6:27:ac: a9:0f:ce:40:a5:27:ec:30:76:77:bc:96:01:77:23:6e:28:c3: 10:07:86:fb:0a:68:41:04:a0:80:26:c2:ed:6a:c3:3d:0b:87: 11:2d:30:78:ab:e0:dd:3d:fd:76:b2:fc:80:89:50:09:41:59: 9e:31:9f:e0:06:5b:bf:b5:a0:dd:d3:08:9c:ff:9b:b2:a8:8b: 47:89:90:e1:b8:e8:da:f1:db:12:66:23:4a:5c:83:3a:5e:c5: 3d:c8:72:75:18:17:f4:48:d9:dc:23:d4:5e:22:62:1e:48:82: 9e:7a:c9:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRjExMTAvBgNVBAUTKDgwN0MwNDBGQTkwMUU1RDg2OTVBNjUzNERFNjZDM0Q2 QTBCRkJDQzUwHhcNMjUwNDI1MDUwMTA1WhcNMjUwNTAyMDUwMTA1WjAYMRYwFAYD VQQDEw02ODBiMTcxMS1kZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vEl7O8iRaWK/Tl6ZyNnbKrxb3Gcb6ApgCJg0F65fUXgHXGN8D2c5MlpwnFL tNvWW5JQ6cWES+G00eg11gDMqcJ9xDKFx9YVtk12gSx0kRqN4D6yUIwhR5JhwHHj ysv39J11sj+P8Jalqsa+VfUvjGpotjX05CmJBL32pNZhZ2+R3MU63R+3xd4NoE5x AWILurXSe533nLmq+DDqHUZJNXPlXfEx7tK0hLEFnCbHCJd0HzaoJO0iqtPNM/Fm LplHXMN0LgNeSwM3o41qfej6eP8AftEI6EGaq+3jnXjRyTmw73vHTng/9zrIZiEI dvOKArrY6APbuYO30KdxP8EMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONCPUK+ /Yd62o3mg1lb26e8ziNQMB8GA1UdIwQYMBaAFIB8BA+pAeXYaVplNN5mw9agv7zF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGMS85NUI3MTFDNDEw RjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVkaHBXbVUwM21iRDFxQ192 TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGMS85NUI3MTFDNDEwRjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVk aHBXbVUwM21iRDFxQ192TVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrV3LDsEH9nE13HDmRGgpU7HhhYI04Ab7Np2gHj5U19/CpF9MoxdUe 6ZZRYMK4CKEB6Ufid/9CUbMMLyezL2v6n2qPGfgrsvbcrf3gs0fxynjNZjfGLTLK MbzO2+2wiRwy0SMecfrCSVZcP56SfTWCDdnji3gZTgqd2fRnpRVmkjYRE5dw0r+A iz/uaROmJ6ypD85ApSfsMHZ3vJYBdyNuKMMQB4b7CmhBBKCAJsLtasM9C4cRLTB4 q+DdPf12svyAiVAJQVmeMZ/gBlu/taDd0wic/5uyqItHiZDhuOja8dsSZiNKXIM6 XsU9yHJ1GBf0SNncI9ReImIeSIKeesmT -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:22 2025 by rpki-client