$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: OwiCFHD/dU5qtEolUIaC4xXmkSbUkfCNRYvDbWM/Dqk= Subject key identifier: 84:B2:D8:38:26:D6:2B:B1:D9:CC:E7:C9:B8:C8:2B:78:F4:C6:DB:52 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 01FF Signing time: Fri 25 Apr 2025 01:49:49 +0000 Manifest this update: Fri 25 Apr 2025 01:49:49 +0000 Manifest next update: Fri 02 May 2025 01:49:49 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: AFt7AKBX/ENCduUPlm9mwilM3kzCbnVgMFr0HrgyxLM=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: TRC536qZcJYkhaiy2DyQacSqavhhgva90rSbfihiHR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Apr 25 01:49:49 2025 GMT Not After : May 2 01:49:49 2025 GMT Subject: CN=680aea3d-d4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:89:8b:79:36:d2:f3:a2:f7:84:fa:e9:c2: c6:66:96:54:69:3f:90:dd:c3:75:0e:27:1a:7f:88: ef:50:2b:61:24:a7:67:0d:ca:64:d8:47:2b:b3:7a: 29:f1:04:01:d3:bb:ae:4e:70:44:09:b6:a1:ac:99: 1d:70:57:5f:5a:72:bd:18:bf:8a:45:97:95:a3:ef: f9:7d:11:06:c6:cb:0b:03:f7:e7:a8:d9:76:2e:4b: aa:71:ec:e8:92:32:17:6a:8b:e1:5f:d2:ab:49:96: 1a:9a:5d:c7:3f:c3:3e:5c:f0:94:71:87:31:16:a0: 7b:a7:bb:c7:c6:a1:15:91:97:ad:26:d7:4c:d7:1f: d8:7f:3d:57:34:69:b5:ae:81:42:65:00:9a:04:51: 90:a1:d2:98:c0:1f:77:49:e7:7b:a7:f0:be:02:ba: eb:d6:92:26:0a:4a:13:01:79:46:c1:74:f3:30:6f: c4:1a:d5:37:ae:a7:76:72:a7:75:c3:f4:e3:0d:a4: 0f:04:20:60:84:cf:14:76:d8:bd:23:df:50:f8:66: 19:cd:c9:91:5a:f4:5d:e1:42:cc:80:69:ea:ee:93: 20:3b:c7:02:9d:ba:32:4f:22:8a:da:85:3c:92:3e: bb:aa:7f:62:48:95:13:2a:30:fb:28:c5:89:67:91: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B2:D8:38:26:D6:2B:B1:D9:CC:E7:C9:B8:C8:2B:78:F4:C6:DB:52 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:f1:03:1c:3b:a1:c8:b1:8b:fe:0e:5b:d9:9e:cf:71:97: 30:dd:c4:8c:1d:a7:af:6f:40:68:f5:85:a3:de:70:50:95:57: c7:12:b8:57:33:2c:88:17:6d:88:fd:2c:f7:c8:1f:ad:0c:04: de:d8:00:9b:bd:6a:f9:05:51:57:44:2f:89:cc:45:97:c1:3f: 50:21:61:ee:86:77:ba:0a:28:a6:a9:24:fc:30:16:63:9d:f7: 3d:c0:25:b6:69:8f:b3:76:4d:33:7b:3e:55:5f:a7:7e:93:8d: d8:b1:dc:47:84:a4:c6:50:28:25:1b:c5:ef:5f:5d:e0:e3:a2: 33:16:ef:11:8e:ca:fc:8e:c3:ed:29:36:f3:77:de:83:5d:eb: e2:56:e2:2d:8b:e2:47:a1:6f:2a:11:58:29:94:7e:94:74:37: 70:b9:47:39:d4:39:5e:eb:47:f5:6c:e2:3e:4a:26:d6:4a:42: 2e:90:52:03:bc:9f:37:0a:a7:ec:12:92:c4:72:e4:b4:3b:c3: aa:8c:a6:b1:37:e1:a1:6a:c2:26:b5:0a:6f:d8:17:8c:04:8f: 2f:2b:60:44:32:f3:cd:ce:df:9b:03:2d:8b:02:cb:ad:df:9a: d3:d3:ec:6b:af:6e:ac:9b:b0:c0:bd:39:8f:3e:a6:d6:ac:e8: 73:eb:8b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUwNDI1MDE0OTQ5WhcNMjUwNTAyMDE0OTQ5WjAYMRYwFAYD VQQDEw02ODBhZWEzZC1kNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx76Ji3k20vOi94T66cLGZpZUaT+Q3cN1Dicaf4jvUCthJKdnDcpk2Ecrs3op 8QQB07uuTnBECbahrJkdcFdfWnK9GL+KRZeVo+/5fREGxssLA/fnqNl2Lkuqcezo kjIXaovhX9KrSZYaml3HP8M+XPCUcYcxFqB7p7vHxqEVkZetJtdM1x/Yfz1XNGm1 roFCZQCaBFGQodKYwB93Sed7p/C+Arrr1pImCkoTAXlGwXTzMG/EGtU3rqd2cqd1 w/TjDaQPBCBghM8Udti9I99Q+GYZzcmRWvRd4ULMgGnq7pMgO8cCnboyTyKK2oU8 kj67qn9iSJUTKjD7KMWJZ5EdBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISy2Dgm 1iux2cznybjIK3j0xttSMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1PEDHDuhyLGL/g5b2Z7PcZcw3cSMHaevb0Bo9YWj3nBQlVfHErhX MyyIF22I/Sz3yB+tDATe2ACbvWr5BVFXRC+JzEWXwT9QIWHuhne6CiimqST8MBZj nfc9wCW2aY+zdk0zez5VX6d+k43YsdxHhKTGUCglG8XvX13g46IzFu8Rjsr8jsPt KTbzd96DXeviVuIti+JHoW8qEVgplH6UdDdwuUc51Dle60f1bOI+SibWSkIukFID vJ83CqfsEpLEcuS0O8OqjKaxN+GhasImtQpv2BeMBI8vK2BEMvPNzt+bAy2LAsut 35rT0+xrr26sm7DAvTmPPqbWrOhz64uU -----END CERTIFICATE-----Generated at Sat Apr 26 05:19:30 2025 by rpki-client