$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft File: Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json) Hash identifier: 1UciR2+vchdKK9EDGW8r8TqH+SUWqhb1aOV1igYyPAg= Subject key identifier: 50:C1:EB:89:5B:AA:34:98:DE:0C:1B:4A:0A:E0:44:8D:C7:1C:01:1B Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 191F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft Manifest number: 190C Signing time: Thu 24 Apr 2025 16:27:05 +0000 Manifest this update: Thu 24 Apr 2025 16:27:04 +0000 Manifest next update: Thu 01 May 2025 16:27:04 +0000 Files and hashes: 1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: OvJe19SyyO+vH54hqOHA38+yXcR3ClaNKRASTMuJ8Zc=) 2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=) 3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6431 (0x191f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Validity Not Before: Apr 24 16:27:04 2025 GMT Not After : May 1 16:27:04 2025 GMT Subject: CN=680a6659-d36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:ac:02:b8:1c:71:36:00:15:75:31:7a:aa: 1a:8b:a6:a2:70:ac:d4:94:2d:6f:44:7a:3e:5e:6c: 61:7f:21:62:c9:e2:81:a5:be:49:63:89:2e:1b:b8: af:15:06:d4:ae:56:52:65:9b:e7:c9:77:cb:b7:9c: 36:46:26:a0:b5:63:d6:f0:84:fd:40:ff:15:c6:21: 53:26:81:ee:dd:77:64:ae:2f:8c:9b:a1:b4:9c:95: f4:cc:68:4f:27:cc:cb:a6:6b:b9:bc:30:ec:19:71: 6f:b3:f7:38:9a:eb:95:fd:65:b5:86:9e:0c:92:ac: ec:b5:70:90:07:34:ab:91:a4:4c:09:3b:98:d1:ac: 0e:9c:46:a8:3e:b2:39:8d:5a:c3:37:85:2d:1e:b6: fe:c0:3b:00:0d:11:86:d2:c1:00:23:cd:0f:b2:87: a3:0d:76:60:d8:2c:08:a9:2e:87:78:e2:d4:06:b3: 89:8e:15:56:94:30:17:65:bc:b0:99:5d:82:27:3a: 39:9f:f5:fe:5e:f4:14:90:54:d8:5e:5a:d6:03:dd: 7a:51:27:73:26:cc:4c:40:7d:f2:f1:1c:ca:99:c4: a1:48:61:6c:c0:22:f6:77:19:6a:ca:79:46:fc:ad: 2c:37:39:7a:89:dd:a5:d6:b1:18:41:88:c5:a2:d2: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C1:EB:89:5B:AA:34:98:DE:0C:1B:4A:0A:E0:44:8D:C7:1C:01:1B X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d1:eb:23:ff:00:b6:5c:d3:30:54:54:3b:02:7c:a8:01:0a: 66:0e:cf:37:b5:92:50:9d:d1:7c:59:79:aa:ec:cf:0a:f1:6d: 72:b5:83:c9:a6:8f:22:7e:92:e6:7e:06:e3:5a:8c:12:e4:2d: 2c:d0:15:cd:48:d9:f8:a4:e4:2a:5e:67:5a:74:f3:99:16:8f: 45:be:3e:b5:89:81:f1:22:c5:6a:3f:9c:cb:77:94:5b:58:a7: 1a:97:b7:f4:7b:43:31:5b:56:2f:b2:12:ea:5d:dc:d3:ee:07: 13:1c:ae:38:02:f7:39:79:a2:f6:4c:07:10:41:03:32:6a:63: 2f:60:91:98:26:18:33:e5:9c:29:b3:fa:79:9f:82:19:a9:b9: 8f:b1:1e:91:a9:48:55:7c:07:fb:2f:ee:31:30:88:60:dd:ea: 19:07:e3:ef:67:6f:0c:3e:6c:a3:39:1b:b9:c2:81:d1:7a:1a: 5d:eb:5e:a7:f9:f0:b0:15:ef:6d:f0:34:84:5c:2c:46:d2:21: ab:82:69:2e:e1:33:4c:ea:a4:ef:d6:4a:1b:3b:a7:59:16:a1: 2e:6f:ee:26:06:55:b7:73:c9:2f:c0:d7:d0:5c:d6:13:1b:94: 8a:56:61:21:29:da:c6:4a:e1:64:a2:b7:62:10:f2:1b:f8:59: 61:8d:68:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUwNDI0MTYyNzA0WhcNMjUwNTAxMTYyNzA0WjAYMRYwFAYD VQQDEw02ODBhNjY1OS1kMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5SsArgccTYAFXUxeqoai6aicKzUlC1vRHo+XmxhfyFiyeKBpb5JY4kuG7iv FQbUrlZSZZvnyXfLt5w2RiagtWPW8IT9QP8VxiFTJoHu3Xdkri+Mm6G0nJX0zGhP J8zLpmu5vDDsGXFvs/c4muuV/WW1hp4MkqzstXCQBzSrkaRMCTuY0awOnEaoPrI5 jVrDN4UtHrb+wDsADRGG0sEAI80PsoejDXZg2CwIqS6HeOLUBrOJjhVWlDAXZbyw mV2CJzo5n/X+XvQUkFTYXlrWA916USdzJsxMQH3y8RzKmcShSGFswCL2dxlqynlG /K0sNzl6id2l1rEYQYjFotL8mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDB64lb qjSY3gwbSgrgRI3HHAEbMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM OTFJMjdaYUdyazhBRlZfMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO0esj/wC2XNMwVFQ7AnyoAQpmDs83tZJQndF8WXmq7M8K8W1ytYPJ po8ifpLmfgbjWowS5C0s0BXNSNn4pOQqXmdadPOZFo9Fvj61iYHxIsVqP5zLd5Rb WKcal7f0e0MxW1YvshLqXdzT7gcTHK44Avc5eaL2TAcQQQMyamMvYJGYJhgz5Zwp s/p5n4IZqbmPsR6RqUhVfAf7L+4xMIhg3eoZB+PvZ28MPmyjORu5woHRehpd616n +fCwFe9t8DSEXCxG0iGrgmku4TNM6qTv1kobO6dZFqEub+4mBlW3c8kvwNfQXNYT G5SKVmEhKdrGSuFkordiEPIb+FlhjWh7 -----END CERTIFICATE-----Generated at Sat Apr 26 05:17:19 2025 by rpki-client