$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft File: gOknW25uvGrXWF12r7akALUULD8.mft (raw, json) Hash identifier: IkohCh/eEoo8GxRxVALTjIZdtJm6IQ8lc8ZH/r36tjo= Subject key identifier: 25:3E:53:A6:70:1C:68:E3:24:38:D5:B3:1A:81:CE:12:85:42:D7:8D Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F Certificate issuer: /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft Manifest number: 91 Signing time: Fri 25 Apr 2025 05:27:18 +0000 Manifest this update: Fri 25 Apr 2025 05:27:17 +0000 Manifest next update: Fri 02 May 2025 05:27:17 +0000 Files and hashes: 1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: F1alWc1jozLzJXBwvPSFWASGG2PoRamRg4AsjKArYsk=) 2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: zLr4joEY+P4VPtuV8/aIjLwuAD3fE/qCh+JRJT72wJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F Validity Not Before: Apr 25 05:27:17 2025 GMT Not After : May 2 05:27:17 2025 GMT Subject: CN=680b1d36-5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:93:1b:61:f1:5c:89:7e:64:7d:1b:75:f1: ec:21:f6:df:40:34:29:a5:6e:fb:52:5b:4f:19:13: 17:63:b9:67:0f:db:c2:f5:fe:33:11:2e:e2:d6:4a: 2f:d5:7c:a0:3d:ac:3d:56:38:9e:89:98:3c:c9:00: 54:ab:8c:7c:2d:ed:65:a0:a0:c2:dc:50:b1:7b:ee: 23:37:21:01:2b:d9:e8:88:fa:b1:80:79:c5:68:51: 01:bd:62:36:7f:a8:24:97:e9:06:0f:ca:4e:7b:ef: c3:b7:9e:b4:1a:5a:64:fb:c4:d0:34:e2:09:36:cb: 54:6a:e4:f8:da:01:87:02:37:1f:43:c0:bf:15:d6: 27:55:a0:6b:f8:8e:bf:db:05:ad:db:ca:32:90:75: 00:32:09:4a:d5:dd:3b:8b:c8:8c:26:ab:17:4f:f3: 78:d5:2e:cf:8d:d0:88:b6:dd:fd:92:3a:f5:8d:2e: 28:99:3d:0f:06:bb:e2:8b:81:5c:23:ba:00:cc:96: 6a:a5:ae:5c:2c:76:76:50:17:fe:54:ad:b0:49:92: 71:51:c9:29:88:d2:dd:cc:1d:c5:b9:2f:d7:1d:c5: 54:52:f1:6d:e8:a4:43:f6:93:f0:92:5b:0d:ef:b0: 60:2f:d7:5a:87:93:8d:58:0f:25:41:53:8c:d5:f8: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:53:A6:70:1C:68:E3:24:38:D5:B3:1A:81:CE:12:85:42:D7:8D X509v3 Authority Key Identifier: keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ec:67:c6:15:85:67:6f:a1:16:b1:56:9a:64:02:bf:5e:80: 25:bc:b8:bb:7c:5c:33:64:a7:6c:93:fe:c4:90:a5:c2:fa:91: 20:9a:21:c5:e9:bf:ce:94:d5:54:4f:6c:bb:6c:a8:7d:cf:63: 26:91:d1:2d:8e:c8:3f:8e:20:0f:47:61:56:f0:dc:a0:22:55: 6e:f2:1a:b9:70:21:b8:5b:e0:0a:e3:05:c4:f5:90:d1:7e:cc: 37:81:13:3b:76:3c:36:23:1a:bc:40:d7:a2:b9:a8:f1:8f:14: f3:4d:8e:fd:cc:90:d4:6b:d8:f9:72:71:79:b1:99:da:85:16: 9d:87:bf:20:c6:0e:59:2a:67:95:69:40:33:51:4c:b6:ee:78: 7a:0f:ea:37:03:6a:c7:3b:61:e7:16:0a:54:7e:d6:11:9b:37: d7:ab:aa:68:14:e8:75:99:9d:a7:2d:f5:96:f8:d8:0e:fa:87: cb:97:1f:55:30:1e:a6:8f:a2:eb:81:a0:bb:1b:ba:7a:27:53: fe:ad:cc:f9:cf:52:fc:ef:47:fc:85:88:d9:33:bd:53:9b:d3: 33:f8:bd:0f:7a:cd:f1:73:ae:66:45:91:67:b2:a5:92:ab:48: 2d:5a:24:5b:ae:35:b1:99:96:5f:53:e6:64:8e:50:53:e3:8d: af:e5:c3:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKDgwRTkyNzVCNkU2RUJDNkFENzU4NUQ3NkFGQjZBNDAw QjUxNDJDM0YwHhcNMjUwNDI1MDUyNzE3WhcNMjUwNTAyMDUyNzE3WjAYMRYwFAYD VQQDEw02ODBiMWQzNi01ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx46TG2HxXIl+ZH0bdfHsIfbfQDQppW77UltPGRMXY7lnD9vC9f4zES7i1kov 1XygPaw9VjieiZg8yQBUq4x8Le1loKDC3FCxe+4jNyEBK9noiPqxgHnFaFEBvWI2 f6gkl+kGD8pOe+/Dt560Glpk+8TQNOIJNstUauT42gGHAjcfQ8C/FdYnVaBr+I6/ 2wWt28oykHUAMglK1d07i8iMJqsXT/N41S7PjdCItt39kjr1jS4omT0PBrvii4Fc I7oAzJZqpa5cLHZ2UBf+VK2wSZJxUckpiNLdzB3FuS/XHcVUUvFt6KRD9pPwklsN 77BgL9dah5ONWA8lQVOM1fjz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU+U6Zw HGjjJDjVsxqBzhKFQteNMB8GA1UdIwQYMBaAFIDpJ1tubrxq11hddq+2pAC1FCw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9DQ0U5OUQ3RTQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZHclhXRjEycjdha0FMVVVM RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dPa25XMjV1dkdyWFdGMTJyN2FrQUxVVUxEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9DQ0U5OUQ3RTQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZH clhXRjEycjdha0FMVVVMRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/7GfGFYVnb6EWsVaaZAK/XoAlvLi7fFwzZKdsk/7EkKXC+pEgmiHF 6b/OlNVUT2y7bKh9z2MmkdEtjsg/jiAPR2FW8NygIlVu8hq5cCG4W+AK4wXE9ZDR fsw3gRM7djw2Ixq8QNeiuajxjxTzTY79zJDUa9j5cnF5sZnahRadh78gxg5ZKmeV aUAzUUy27nh6D+o3A2rHO2HnFgpUftYRmzfXq6poFOh1mZ2nLfWW+NgO+ofLlx9V MB6mj6LrgaC7G7p6J1P+rcz5z1L870f8hYjZM71Tm9Mz+L0Pes3xc65mRZFnsqWS q0gtWiRbrjWxmZZfU+ZkjlBT442v5cPt -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:43 2025 by rpki-client