$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft File: gtgYhh3Upw93CNIF5LiehRTKH2w.mft (raw, json) Hash identifier: W7JHjoCik2ns6K60PG5heclf6iG37oJBS12jPJ0UR+s= Subject key identifier: 6A:B3:C7:42:AE:23:21:F2:1C:F4:FB:C4:EA:E1:47:9C:29:BD:DA:4E Authority key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C Certificate issuer: /CN=A91C9A8D/serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft Manifest number: 03FC Signing time: Fri 25 Apr 2025 00:24:09 +0000 Manifest this update: Fri 25 Apr 2025 00:24:08 +0000 Manifest next update: Fri 02 May 2025 00:24:08 +0000 Files and hashes: 1: gtgYhh3Upw93CNIF5LiehRTKH2w.crl (hash: MenBNYhElJejL6BZfJ2YHYFDv7a4zNk76zh+YqhyMpQ=) 2: D2A57AD8DDF111EF969ABC1CC4F9AE02.roa (hash: oVUb29+C/dpDmyrIQ/S9XmPyQiqyJJ84om1g2jTlU5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C Validity Not Before: Apr 25 00:24:08 2025 GMT Not After : May 2 00:24:08 2025 GMT Subject: CN=680ad628-13aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:d1:64:81:d3:e8:24:3f:fe:6b:83:73:57: cf:83:cf:78:40:de:82:0c:19:94:9f:b4:fb:3d:c1: 0a:c2:df:c3:4a:e9:72:53:49:fd:63:3a:c7:99:9b: 2b:07:d1:dc:5e:d3:9c:fc:82:56:fd:b1:40:79:52: ec:3b:67:95:08:dc:20:fa:d0:41:9f:82:b7:76:ce: 1a:e7:46:13:34:c0:15:e6:66:b9:47:a1:ee:1e:91: 55:12:99:20:1d:be:bc:7d:9d:a1:c7:d5:a4:07:fd: f7:39:eb:50:54:17:ef:a4:19:2e:4e:72:f1:94:ca: 08:40:79:ac:6f:b3:e9:48:00:cd:bd:78:d4:5a:1b: 97:75:3f:c4:63:45:b4:51:5a:a9:c5:5a:3d:6f:7d: b8:1a:96:26:47:d9:b2:8d:c7:32:bc:89:f0:f2:b2: 2f:77:fa:30:92:e1:5b:4a:cb:8d:ef:df:2c:e3:a2: bc:27:1e:87:86:33:fc:f5:0f:71:6c:d9:21:1e:10: a0:33:91:05:a2:00:73:22:eb:77:77:91:d1:af:89: 3f:a6:2c:c7:f5:8f:dc:6c:04:09:8c:8b:3f:0d:0a: 4e:cc:a5:41:08:98:93:4a:2e:2b:95:b9:49:bb:17: 4b:ad:b5:12:7b:6d:fd:28:07:5c:d2:2b:2c:ba:fc: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:C7:42:AE:23:21:F2:1C:F4:FB:C4:EA:E1:47:9C:29:BD:DA:4E X509v3 Authority Key Identifier: keyid:82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:4d:a8:65:f8:d5:68:62:c4:19:e7:dd:cb:c7:20:f1:ee:ec: df:2a:5c:9a:c2:d7:55:56:86:2a:bc:61:4c:1e:da:38:7e:02: c6:db:1e:c9:46:5e:ef:9d:9b:bc:ec:d0:35:2d:31:48:01:8d: 96:f6:02:b8:cf:81:8d:f9:56:15:11:90:a8:59:f0:16:b4:fc: eb:ea:4f:79:b9:39:b0:74:95:16:94:a0:ce:2d:6c:31:a2:ff: e6:d0:8a:06:05:75:57:01:39:1e:39:c7:35:0b:79:8a:a4:62: 7a:d2:cb:48:82:fd:69:df:f1:da:f6:00:2b:a3:fd:d3:3d:7c: ed:d4:84:84:45:37:1a:ce:63:66:1e:b6:b2:f9:17:43:ac:52: 5a:34:2d:9f:6d:17:3b:9a:c8:57:3e:9f:c6:8f:a6:7f:cf:77: 48:82:56:39:7a:66:c3:e3:cf:fc:8f:19:47:70:cd:dc:28:f0: e5:f8:d1:a7:c8:6d:0e:4b:56:f9:f0:1a:57:c2:c5:5c:a9:88: b8:bf:9e:be:f6:0c:01:8c:e4:37:e9:59:be:31:28:36:f2:47: 53:48:91:07:f0:82:f4:c9:d1:e9:df:57:ff:ec:5a:d6:08:c4: 12:6d:8c:5f:fa:b5:2c:f7:a3:c8:b2:29:60:64:f9:e2:63:b2: 52:f7:50:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUE4RDExMC8GA1UEBRMoODJEODE4ODYxREQ0QTcwRjc3MDhEMjA1RTRCODlFODUx NENBMUY2QzAeFw0yNTA0MjUwMDI0MDhaFw0yNTA1MDIwMDI0MDhaMBgxFjAUBgNV BAMTDTY4MGFkNjI4LTEzYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI2tFkgdPoJD/+a4NzV8+Dz3hA3oIMGZSftPs9wQrC38NK6XJTSf1jOseZmysH 0dxe05z8glb9sUB5Uuw7Z5UI3CD60EGfgrd2zhrnRhM0wBXmZrlHoe4ekVUSmSAd vrx9naHH1aQH/fc561BUF++kGS5OcvGUyghAeaxvs+lIAM29eNRaG5d1P8RjRbRR WqnFWj1vfbgaliZH2bKNxzK8ifDysi93+jCS4VtKy43v3yzjorwnHoeGM/z1D3Fs 2SEeEKAzkQWiAHMi63d3kdGviT+mLMf1j9xsBAmMiz8NCk7MpUEImJNKLiuVuUm7 F0uttRJ7bf0oB1zSKyy6/DSdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUarPHQq4j IfIc9PvE6uFHnCm92k4wHwYDVR0jBBgwFoAUgtgYhh3Upw93CNIF5LiehRTKH2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QThELzMyRjFGNEMyODNF OTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5M0NOSUY1TGllaFJUS0gy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3RnWWhoM1VwdzkzQ05JRjVMaWVoUlRLSDJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyL2d0Z1loaDNVcHc5 M0NOSUY1TGllaFJUS0gydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACFNqGX41WhixBnn3cvHIPHu7N8qXJrC11VWhiq8YUwe2jh+AsbbHslG Xu+dm7zs0DUtMUgBjZb2ArjPgY35VhURkKhZ8Ba0/OvqT3m5ObB0lRaUoM4tbDGi /+bQigYFdVcBOR45xzULeYqkYnrSy0iC/Wnf8dr2ACuj/dM9fO3UhIRFNxrOY2Ye trL5F0OsUlo0LZ9tFzuayFc+n8aPpn/Pd0iCVjl6ZsPjz/yPGUdwzdwo8OX40afI bQ5LVvnwGlfCxVypiLi/nr72DAGM5DfpWb4xKDbyR1NIkQfwgvTJ0enfV//sWtYI xBJtjF/6tSz3o8iyKWBk+eJjslL3UA8= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:51 2025 by rpki-client