$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: h9+EzMFLZmDkRHNqEkxr1zJPKwYCJT5rwUIkTXStqP4= Subject key identifier: 5E:7C:91:F8:47:2C:38:6D:21:C1:F7:B3:31:AF:BA:B0:68:C7:59:EC Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 07C9 Signing time: Thu 24 Apr 2025 20:26:28 +0000 Manifest this update: Thu 24 Apr 2025 20:26:28 +0000 Manifest next update: Thu 01 May 2025 20:26:28 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: TvYb85zbR42vcXy1zFyy644JYpIaMuVvg776lBp1Q3g=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: jfAjvDFneg9TxfVOqlYPDujvfvVSOSgnFYEvXUOG5OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: Apr 24 20:26:28 2025 GMT Not After : May 1 20:26:28 2025 GMT Subject: CN=680a9e74-35c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:8d:36:b7:cd:92:b7:12:f8:25:ed:89:b2: 04:7f:a5:15:4f:61:b3:91:86:82:5d:0e:f2:e8:bb: f1:6a:e4:aa:ab:34:5f:ba:d8:f9:5e:1d:f0:4f:88: be:e7:99:31:a3:ba:39:a1:7d:17:78:28:01:d3:28: 8b:7c:df:96:8e:ee:5c:56:55:f5:b4:e6:19:05:3a: bc:b3:40:3a:b1:7d:62:6f:b0:26:65:7c:5a:4a:51: 52:1b:3e:fb:74:5f:41:e4:87:fd:ab:e0:c5:06:1c: 7d:f0:af:fc:13:bf:56:2e:5e:4d:70:f4:60:8d:80: af:00:1f:3b:27:6b:c5:b2:0c:d1:29:e9:8f:22:51: 4a:e9:85:01:bf:d5:9d:ff:a6:10:ae:96:45:e0:b3: e6:2e:1e:7e:db:83:81:c8:f6:90:d8:b5:8c:73:0e: b0:54:dc:4f:62:1a:46:b6:18:da:e5:e2:58:d5:39: d6:f4:0c:c4:c9:74:34:e8:56:a2:5a:da:3f:53:ba: 20:30:36:19:d2:29:27:df:da:98:f2:30:81:05:81: eb:cb:6a:15:31:2c:5c:2b:cf:80:4b:b3:3c:79:5d: db:78:24:88:9e:02:59:87:91:46:c0:ef:28:23:36: cb:81:d5:89:5d:a3:b3:b0:b8:a2:f8:69:dc:29:80: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7C:91:F8:47:2C:38:6D:21:C1:F7:B3:31:AF:BA:B0:68:C7:59:EC X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ff:f0:32:b0:6d:27:e8:2e:bc:bb:65:be:dd:d3:f1:38:d8: 88:3c:bc:00:d4:ed:49:07:8c:fc:8f:57:77:bc:b5:54:3f:a3: 48:58:f5:db:54:67:95:8d:69:32:43:b6:5c:d4:32:47:27:37: d5:83:87:6f:02:6b:c4:5f:e9:70:b8:5d:7f:87:c4:4f:b5:b8: e3:f7:67:e6:0a:d8:67:48:42:61:4b:b4:98:5d:9b:11:47:a8: d7:1a:65:e4:50:71:49:52:8d:b1:c1:bf:f0:d8:de:4f:dc:e9: 44:a9:9b:2e:64:73:fa:1d:18:b1:8d:32:4c:c2:43:9a:ed:0d: da:ab:be:86:e0:80:2e:67:fe:b3:8d:3b:45:61:83:a8:5e:84: bf:fe:19:36:bb:83:12:83:1f:d6:fd:2f:39:9d:72:89:fb:55: bb:01:fd:33:3e:98:27:93:39:9a:fc:d0:32:05:c7:fd:d7:f4: 1e:5d:e1:6d:b7:9c:23:45:dd:13:cd:8f:0e:51:ee:06:fd:5a: 80:de:50:5f:f0:5b:55:0f:ab:39:60:19:00:32:cd:36:26:4e: 60:db:4b:65:c2:1e:8c:b8:4b:38:b3:f6:58:04:29:4c:d0:b7: 3b:27:9a:12:a5:79:d5:df:27:e5:df:dc:76:77:77:c5:28:de: 11:a4:14:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjUwNDI0MjAyNjI4WhcNMjUwNTAxMjAyNjI4WjAYMRYwFAYD VQQDEw02ODBhOWU3NC0zNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u2NNrfNkrcS+CXtibIEf6UVT2GzkYaCXQ7y6LvxauSqqzRfutj5Xh3wT4i+ 55kxo7o5oX0XeCgB0yiLfN+Wju5cVlX1tOYZBTq8s0A6sX1ib7AmZXxaSlFSGz77 dF9B5If9q+DFBhx98K/8E79WLl5NcPRgjYCvAB87J2vFsgzRKemPIlFK6YUBv9Wd /6YQrpZF4LPmLh5+24OByPaQ2LWMcw6wVNxPYhpGthja5eJY1TnW9AzEyXQ06Fai Wto/U7ogMDYZ0ikn39qY8jCBBYHry2oVMSxcK8+AS7M8eV3beCSIngJZh5FGwO8o IzbLgdWJXaOzsLii+GncKYBbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF58kfhH LDhtIcH3szGvurBox1nsMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT//AysG0n6C68u2W+3dPxONiIPLwA1O1JB4z8j1d3vLVUP6NIWPXb VGeVjWkyQ7Zc1DJHJzfVg4dvAmvEX+lwuF1/h8RPtbjj92fmCthnSEJhS7SYXZsR R6jXGmXkUHFJUo2xwb/w2N5P3OlEqZsuZHP6HRixjTJMwkOa7Q3aq76G4IAuZ/6z jTtFYYOoXoS//hk2u4MSgx/W/S85nXKJ+1W7Af0zPpgnkzma/NAyBcf91/QeXeFt t5wjRd0TzY8OUe4G/VqA3lBf8FtVD6s5YBkAMs02Jk5g20tlwh6MuEs4s/ZYBClM 0Lc7J5oSpXnV3yfl39x2d3fFKN4RpBT9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:23 2025 by rpki-client