$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft File: gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft (raw, json) Hash identifier: j+CSM8Y+9yqo1vvp5i5xOSMQW8JmhqvtyDoWRpgUbg4= Subject key identifier: 70:47:13:17:F9:CC:0C:F1:F7:94:29:C6:93:37:F9:BC:84:A0:2F:18 Authority key identifier: 81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF Certificate issuer: /CN=A91C9F4F/serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft Manifest number: 0152 Signing time: Fri 25 Apr 2025 03:14:43 +0000 Manifest this update: Fri 25 Apr 2025 03:14:43 +0000 Manifest next update: Fri 02 May 2025 03:14:43 +0000 Files and hashes: 1: gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl (hash: P43fj5kNYe+jPdObs8I0oGAHS6aPKg2doTpgoQHWKwM=) 2: 81E588C21B1F11EE8F6BA876C4F9AE02.roa (hash: YbSnSO8idK0DmEg6LCnsVKLIIYfjTfvJo7EtnNr+cS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F4F, serialNumber=81DC1DEE070833A7E7539720875A17607EE126CF Validity Not Before: Apr 25 03:14:43 2025 GMT Not After : May 2 03:14:43 2025 GMT Subject: CN=680afe23-3f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:07:75:b1:52:a4:0a:1e:6f:0e:e6:20:af: ee:c3:8f:7a:ec:bd:9d:0a:f3:83:3a:a6:b4:10:ac: a9:dd:e9:05:ae:fd:cb:28:a7:75:71:ad:3c:78:0e: cc:c6:d7:58:da:60:4d:f5:b8:f7:f0:85:a0:99:3c: 38:49:55:71:47:71:e8:6e:e3:1e:15:36:a2:a4:72: fe:ba:a6:80:4f:1a:dd:ae:88:a9:1b:c5:41:be:7f: 92:4c:5e:08:bc:46:18:33:f8:1c:90:d1:ca:1d:ea: 44:d2:e5:0f:65:48:8c:07:f1:74:eb:e6:d3:1a:c5: 0b:7d:ea:71:53:2c:b4:ff:ac:62:6f:46:7e:c3:66: 96:54:0e:22:5e:37:85:fc:ad:5b:ba:24:4a:d4:ae: 83:fa:3b:bd:a6:52:61:f5:d1:bb:6c:e9:fa:7d:17: 22:13:19:4c:d6:30:4e:b8:4d:95:bb:68:9f:5e:d9: 9b:b6:39:97:63:a1:f9:ae:70:59:98:e8:3f:4c:04: 22:83:a6:e6:01:31:f3:c7:e8:74:cc:24:42:6b:c5: e2:9b:9b:b4:7f:4f:55:be:8a:29:16:cd:bd:ca:cc: ca:c0:80:20:8f:b8:25:e6:25:d0:07:e5:e1:4a:4b: 63:1d:72:0b:cc:21:ff:18:e2:7c:a3:f5:70:d6:12: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:13:17:F9:CC:0C:F1:F7:94:29:C6:93:37:F9:BC:84:A0:2F:18 X509v3 Authority Key Identifier: keyid:81:DC:1D:EE:07:08:33:A7:E7:53:97:20:87:5A:17:60:7E:E1:26:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gdwd7gcIM6fnU5cgh1oXYH7hJs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F4F/6F0D05101B1D11EE87D28976C4F9AE02/gdwd7gcIM6fnU5cgh1oXYH7hJs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f6:b5:9f:a8:11:03:08:3b:40:2c:a9:aa:36:40:76:ea:5d: b3:f7:ab:4b:9f:d4:d1:9a:ba:2d:11:ec:ef:a7:89:01:d8:44: f6:37:b0:97:73:18:77:39:ba:cb:a3:7d:1e:eb:04:2c:e4:10: c7:8b:24:ce:25:30:88:0b:0b:9e:6c:32:21:d6:6f:b2:14:cf: 34:86:b8:46:39:3b:ba:38:fb:ae:5d:07:08:5c:21:8f:95:a8: ad:28:d1:e2:f4:d3:27:5c:72:51:18:f5:a2:aa:4e:54:4d:4e: 6f:9d:90:02:05:0b:99:51:c1:a1:52:e2:46:36:9d:7e:4f:70: ba:3e:50:35:18:01:59:5e:aa:53:40:97:41:48:ae:0b:1d:fd: 59:6f:fc:fd:78:d7:3a:2e:13:4a:fb:66:04:dd:ca:f4:5e:15: 01:57:0c:59:50:38:e8:d4:95:fb:cf:2f:90:97:0b:b1:5b:1d: 73:be:2c:c1:46:54:28:ee:95:36:f8:c4:d1:7c:53:ea:09:9f: 78:b2:05:96:2f:47:10:51:d8:c8:f6:cb:d0:d7:4d:f1:4f:15: d0:da:15:88:8e:e4:7e:85:42:8d:19:3a:c8:b0:d2:97:65:68: a2:51:1d:3d:30:83:ab:46:85:55:c9:5e:0c:6b:84:fb:3c:92: 04:8b:ba:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlGNEYxMTAvBgNVBAUTKDgxREMxREVFMDcwODMzQTdFNzUzOTcyMDg3NUExNzYw N0VFMTI2Q0YwHhcNMjUwNDI1MDMxNDQzWhcNMjUwNTAyMDMxNDQzWjAYMRYwFAYD VQQDEw02ODBhZmUyMy0zZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseMHdbFSpAoebw7mIK/uw4967L2dCvODOqa0EKyp3ekFrv3LKKd1ca08eA7M xtdY2mBN9bj38IWgmTw4SVVxR3HobuMeFTaipHL+uqaATxrdroipG8VBvn+STF4I vEYYM/gckNHKHepE0uUPZUiMB/F06+bTGsULfepxUyy0/6xib0Z+w2aWVA4iXjeF /K1buiRK1K6D+ju9plJh9dG7bOn6fRciExlM1jBOuE2Vu2ifXtmbtjmXY6H5rnBZ mOg/TAQig6bmATHzx+h0zCRCa8Xim5u0f09VvoopFs29yszKwIAgj7gl5iXQB+Xh SktjHXILzCH/GOJ8o/Vw1hK1pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBHExf5 zAzx95QpxpM3+byEoC8YMB8GA1UdIwQYMBaAFIHcHe4HCDOn51OXIIdaF2B+4SbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUY0Ri82RjBEMDUxMDFC MUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02Zm5VNWNnaDFvWFlIN2hK czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dkd2Q3Z2NJTTZmblU1Y2doMW9YWUg3aEpzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUY0Ri82RjBEMDUxMDFCMUQxMUVFODdEMjg5NzZDNEY5QUUwMi9nZHdkN2djSU02 Zm5VNWNnaDFvWFlIN2hKczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl9rWfqBEDCDtALKmqNkB26l2z96tLn9TRmrotEezvp4kB2ET2N7CX cxh3ObrLo30e6wQs5BDHiyTOJTCICwuebDIh1m+yFM80hrhGOTu6OPuuXQcIXCGP laitKNHi9NMnXHJRGPWiqk5UTU5vnZACBQuZUcGhUuJGNp1+T3C6PlA1GAFZXqpT QJdBSK4LHf1Zb/z9eNc6LhNK+2YE3cr0XhUBVwxZUDjo1JX7zy+QlwuxWx1zvizB RlQo7pU2+MTRfFPqCZ94sgWWL0cQUdjI9svQ103xTxXQ2hWIjuR+hUKNGTrIsNKX ZWiiUR09MIOrRoVVyV4Ma4T7PJIEi7pk -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:36 2025 by rpki-client