$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft File: _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json) Hash identifier: Jfm6LUQDJWAPk0Y/Uj56VX/weMhErk4lkk1+DyGLF/A= Subject key identifier: B0:3E:55:78:C8:E0:6F:B1:57:FD:3A:A3:2D:9B:BC:F8:0F:8A:C4:F3 Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft Manifest number: 02E7 Signing time: Fri 25 Apr 2025 01:06:29 +0000 Manifest this update: Fri 25 Apr 2025 01:06:28 +0000 Manifest next update: Fri 02 May 2025 01:06:28 +0000 Files and hashes: 1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: dXpeD0xUomdZoQB+Rxt//VUzzAOJSy4iDrbPMZW6AI0=) 2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332 Validity Not Before: Apr 25 01:06:28 2025 GMT Not After : May 2 01:06:28 2025 GMT Subject: CN=680ae015-c30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:67:2a:5a:68:70:a5:e8:31:6d:b1:89:ff: 0b:6c:29:47:e8:d2:9f:b8:bc:af:3e:f9:41:0d:87: 6d:58:e7:38:b3:24:31:89:ce:c3:bf:28:a7:02:ca: c9:c1:9b:d7:41:a4:28:61:53:9c:b8:36:f6:c9:fd: 3e:7f:03:b4:ea:6f:b8:fd:18:58:fc:95:31:6c:fd: 1b:70:a5:12:2b:b4:b6:01:1f:9c:e2:f5:fe:c1:e3: f7:34:f2:9c:12:3e:7c:fb:a5:15:6b:c6:fe:34:7e: 70:25:05:7b:1b:9a:ec:46:62:0b:65:1f:e0:a3:c8: b6:a5:0d:9e:7c:59:7f:d0:62:f6:09:ca:f0:75:af: 57:60:20:57:c5:2e:64:71:e3:f0:9e:6e:74:7f:7a: f6:72:38:40:05:85:53:69:ef:6b:f9:a9:2b:69:2c: 75:65:3b:64:eb:02:4e:06:d3:ab:c2:8c:52:65:19: 1a:ef:8e:ef:f0:c3:89:47:d4:51:72:33:bb:cf:ab: 8a:5a:12:94:23:23:45:16:56:dc:d5:98:15:18:d9: 99:55:6d:e4:a1:70:03:e1:d2:da:77:8e:66:e8:4c: 86:e7:43:68:02:ba:a1:7d:1c:1e:4a:dc:9d:03:76: 6c:19:ec:41:d0:3a:75:10:2c:d1:92:26:3c:a4:04: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:55:78:C8:E0:6F:B1:57:FD:3A:A3:2D:9B:BC:F8:0F:8A:C4:F3 X509v3 Authority Key Identifier: keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:66:39:2f:0c:db:aa:38:a9:20:1d:b1:02:97:18:92:72: 1b:84:a5:d5:72:36:89:df:03:ed:04:45:56:3b:22:c0:af:e5: 22:03:46:bb:0e:cc:6a:0b:bd:5b:68:60:e1:18:91:19:42:6e: 22:8e:c3:27:e9:c6:b6:8c:dd:4a:91:2f:99:ac:69:9c:14:8f: 86:ee:00:79:d6:29:8d:ce:c7:1a:26:12:51:12:39:45:2d:d9: 15:21:4a:fe:07:60:e0:5a:23:2b:70:dc:ef:05:5f:ea:5f:fa: 1c:10:c2:1f:40:0d:ab:d7:21:9e:fb:3e:5f:90:3a:6a:b7:c0: d5:6a:ad:f0:fa:4f:a5:3b:7b:a2:e4:7c:9b:8d:0c:54:50:59: 44:ea:89:9c:41:db:70:20:1c:22:08:0d:0a:a4:48:ca:08:1a: a1:d2:ff:b9:31:ba:20:a4:2f:04:9a:94:3d:a8:88:65:e4:b4: ff:9d:f1:10:7b:3c:35:80:46:60:4c:ba:7a:ba:cc:46:ff:98: 7e:a1:04:36:a4:60:35:ec:db:63:71:69:fb:48:fb:e2:2e:ed: 64:61:76:18:6f:b2:b1:ca:fe:91:92:c6:aa:15:92:ce:c0:c0: ce:7f:7e:47:ee:43:59:cc:98:17:3a:8c:30:4d:76:37:8a:a1: 2d:e9:c5:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE NDk1QUIzMzIwHhcNMjUwNDI1MDEwNjI4WhcNMjUwNTAyMDEwNjI4WjAYMRYwFAYD VQQDEw02ODBhZTAxNS1jMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzENnKlpocKXoMW2xif8LbClH6NKfuLyvPvlBDYdtWOc4syQxic7DvyinAsrJ wZvXQaQoYVOcuDb2yf0+fwO06m+4/RhY/JUxbP0bcKUSK7S2AR+c4vX+weP3NPKc Ej58+6UVa8b+NH5wJQV7G5rsRmILZR/go8i2pQ2efFl/0GL2Ccrwda9XYCBXxS5k cePwnm50f3r2cjhABYVTae9r+akraSx1ZTtk6wJOBtOrwoxSZRka747v8MOJR9RR cjO7z6uKWhKUIyNFFlbc1ZgVGNmZVW3koXAD4dLad45m6EyG50NoArqhfRweStyd A3ZsGexB0Dp1ECzRkiY8pATOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA+VXjI 4G+xV/06oy2bvPgPisTzMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG NEQ1d3BnWEpsTVhVbGFzekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqGY5LwzbqjipIB2xApcYknIbhKXVcjaJ3wPtBEVWOyLAr+UiA0a7 DsxqC71baGDhGJEZQm4ijsMn6ca2jN1KkS+ZrGmcFI+G7gB51imNzscaJhJREjlF LdkVIUr+B2DgWiMrcNzvBV/qX/ocEMIfQA2r1yGe+z5fkDpqt8DVaq3w+k+lO3ui 5HybjQxUUFlE6omcQdtwIBwiCA0KpEjKCBqh0v+5MbogpC8EmpQ9qIhl5LT/nfEQ ezw1gEZgTLp6usxG/5h+oQQ2pGA17NtjcWn7SPviLu1kYXYYb7Kxyv6RksaqFZLO wMDOf35H7kNZzJgXOowwTXY3iqEt6cW4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:17 2025 by rpki-client