$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft File: GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json) Hash identifier: gNdqTNz+j4IaV6+mWVkvHCBU/vf0eM0Np4ErGAP7qZA= Subject key identifier: 8B:47:33:B4:2E:3B:C2:85:2D:8D:F7:C7:F8:9E:3E:50:15:71:47:50 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft Manifest number: 09 Signing time: Fri 25 Apr 2025 07:09:36 +0000 Manifest this update: Fri 25 Apr 2025 07:09:35 +0000 Manifest next update: Fri 02 May 2025 07:09:35 +0000 Files and hashes: 1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: 89jvjy5OYCZZwFR8W1lTk+uCu5jClD/ZEmStyjzE8/g=) 2: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: du5mi9aWiTP7blziaq17b+Opsc4yJdNyw9cLOYYTtDQ=) 3: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: C+tnO/IvI2tXp1A5mKcYwdatQ4n9lRglk78sIbGLnJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: Apr 25 07:09:35 2025 GMT Not After : May 2 07:09:35 2025 GMT Subject: CN=680b3530-34db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:5f:12:f2:82:cb:5a:4c:a5:93:cf:f8:d4: 67:3c:73:5c:78:8e:21:dc:c3:05:95:3e:4f:56:a2: a9:47:b2:b7:d8:09:85:20:75:f2:48:15:1e:f2:6e: 6e:f4:d2:56:75:aa:e3:2e:f1:16:ae:96:0c:3e:30: f4:95:9a:b7:7f:ee:8d:34:be:3d:ce:48:f1:03:7c: f7:5a:a0:12:d6:82:b1:bf:97:a0:18:06:dc:22:45: bc:e5:a0:73:7a:1d:97:e6:05:39:9e:bb:9e:5b:c0: 83:75:00:00:0f:fa:36:f3:75:46:5e:be:8f:f9:16: 3a:62:7f:1e:7e:f3:2a:5d:d9:de:e5:6d:f4:9c:89: 76:cc:eb:34:34:aa:cb:2f:97:8e:c4:05:4a:03:35: e3:84:13:f6:f3:6d:98:e0:fa:65:06:df:cd:7d:81: 52:bb:4a:e1:38:6b:06:88:7c:27:b0:50:f6:67:11: e4:4d:fa:af:58:39:58:b0:c5:aa:d7:a7:a1:08:62: dc:48:b0:76:57:1d:9d:63:d1:48:1b:f9:50:b6:27: 74:7e:85:25:65:43:2f:09:aa:cb:94:7a:eb:5e:7e: 10:a5:2c:fa:25:5a:a6:bc:20:54:2a:ef:78:3e:f5: 1b:86:49:1e:7f:42:e2:3f:21:29:61:70:12:b2:0a: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:33:B4:2E:3B:C2:85:2D:8D:F7:C7:F8:9E:3E:50:15:71:47:50 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c2:cd:d1:5a:1c:74:69:5c:54:1d:02:7a:ab:82:77:30:e5: 6b:e8:21:56:2f:ac:60:e5:63:dd:02:ab:5d:71:e0:15:52:b0: 6f:60:e4:87:94:d7:da:d0:6d:f1:d2:e1:31:fb:05:da:70:56: 1e:40:ff:f8:1b:9a:41:72:aa:47:67:b1:e7:96:cd:47:a5:fd: 74:b4:5a:77:6a:bd:c7:e3:c6:b5:11:c4:75:8d:32:1d:8b:e2: 3d:75:b9:df:9c:d1:0f:98:93:4f:fc:8b:65:c6:2e:98:99:1c: 30:aa:35:a3:95:cc:7f:8d:fa:f2:a2:01:a1:6a:b4:f1:21:47: 17:ad:ac:85:f7:a6:d0:27:40:1c:33:81:bd:a9:61:3b:f0:f3: bf:42:d0:1e:72:13:c0:7d:20:bd:ec:69:22:ec:63:72:84:13: c6:34:4d:f1:42:24:de:b3:d2:4c:18:d1:a0:aa:5f:fd:ab:22: d8:2d:ac:b4:dc:bb:bb:07:1c:38:64:30:3c:69:2f:1b:01:a4: 3a:b5:7a:77:7c:c3:f5:0b:34:3c:bc:64:1d:34:8d:fa:42:64: 9f:83:d2:a1:96:9f:e7:fd:7f:6a:3a:7a:85:6f:df:ed:35:0f: 4b:6e:a3:a7:ec:a5:5d:e0:2d:e6:b7:8d:e4:94:f9:5a:56:88: fe:bb:e8:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzRjExMC8GA1UEBRMoMTg5NjdEQ0RCNzI0QTg0QTcxNzExRTY3OEFBQjFEMkU3 MjIxNUQ2QzAeFw0yNTA0MjUwNzA5MzVaFw0yNTA1MDIwNzA5MzVaMBgxFjAUBgNV BAMTDTY4MGIzNTMwLTM0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDurV8S8oLLWkylk8/41Gc8c1x4jiHcwwWVPk9WoqlHsrfYCYUgdfJIFR7ybm70 0lZ1quMu8Raulgw+MPSVmrd/7o00vj3OSPEDfPdaoBLWgrG/l6AYBtwiRbzloHN6 HZfmBTmeu55bwIN1AAAP+jbzdUZevo/5Fjpifx5+8ypd2d7lbfSciXbM6zQ0qssv l47EBUoDNeOEE/bzbZjg+mUG3819gVK7SuE4awaIfCewUPZnEeRN+q9YOViwxarX p6EIYtxIsHZXHZ1j0Ugb+VC2J3R+hSVlQy8JqsuUeutefhClLPolWqa8IFQq73g+ 9RuGSR5/QuI/ISlhcBKyCnPFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi0cztC47 woUtjffH+J4+UBVxR1AwHwYDVR0jBBgwFoAUGJZ9zbckqEpxcR5niqsdLnIhXWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDNGL0Q2ODRGQzJFMUE4 QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0paOXpiY2txRXB4Y1I1bmlxc2RMbkloWFd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDNGL0Q2ODRGQzJFMUE4QjExRjA5Q0MyNDUzNUM0RjlBRTAyL0dKWjl6YmNrcUVw eGNSNW5pcXNkTG5JaFhXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvCzdFaHHRpXFQdAnqrgncw5WvoIVYvrGDlY90Cq11x4BVSsG9g5IeU 19rQbfHS4TH7BdpwVh5A//gbmkFyqkdnseeWzUel/XS0WndqvcfjxrURxHWNMh2L 4j11ud+c0Q+Yk0/8i2XGLpiZHDCqNaOVzH+N+vKiAaFqtPEhRxetrIX3ptAnQBwz gb2pYTvw879C0B5yE8B9IL3saSLsY3KEE8Y0TfFCJN6z0kwY0aCqX/2rItgtrLTc u7sHHDhkMDxpLxsBpDq1end8w/ULNDy8ZB00jfpCZJ+D0qGWn+f9f2o6eoVv3+01 D0tuo6fspV3gLea3jeSU+VpWiP676Fk= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:01 2025 by rpki-client