$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: e7gwlSyH1iQjrYu1JY+JJv0QF+HktSou/Q2NbAWRASc= Subject key identifier: BF:93:03:69:75:61:A1:CA:1A:B1:1C:39:00:25:E3:00:89:60:C8:45 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 0767 Signing time: Thu 24 Apr 2025 21:19:50 +0000 Manifest this update: Thu 24 Apr 2025 21:19:49 +0000 Manifest next update: Thu 01 May 2025 21:19:49 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: OBinCQQUqZ0IuW7lM1byzkrLXv5ropSW07ikbBsizMI=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: E7aUJSWkWctXuYXSTwS30+xAR7ERalIEla2LT/i5k8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: Apr 24 21:19:49 2025 GMT Not After : May 1 21:19:49 2025 GMT Subject: CN=680aaaf6-270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:c4:be:f9:41:9e:db:79:17:51:df:39:21: 0c:a5:b4:7d:f2:66:37:cf:10:e8:99:08:51:df:13: 93:91:57:09:7a:e2:f2:e0:fb:b6:5c:e0:15:0e:00: cc:04:a4:17:4a:e0:ec:f9:84:71:b7:09:7a:28:8c: 2e:f8:8e:22:69:d1:2e:2b:f3:14:c5:f7:57:b4:83: 6d:0e:9c:b0:7b:49:58:c9:29:ec:b3:8d:86:11:46: ce:45:fc:f9:1e:b3:01:e4:ee:f5:0a:f2:d1:52:7d: ca:69:e5:8e:4a:a6:0c:4e:51:f9:17:de:1a:b7:72: 9e:4e:3e:a1:75:60:8f:9c:e8:47:f1:6d:60:ec:15: 94:08:02:1d:57:a6:9b:ae:ca:bf:8b:e6:63:71:cd: b9:fe:95:8d:39:7d:d5:ff:ff:02:5b:98:0f:7e:80: b0:96:51:2d:ad:d2:3f:57:f9:0c:5f:72:ec:40:61: 25:bf:db:be:fd:9d:47:99:6c:32:fd:02:7a:32:05: 80:53:d8:50:ad:c6:ba:f5:cc:c0:1c:76:51:dd:d9: f4:9f:7e:75:55:0d:3e:14:cc:f0:03:6d:5e:90:8b: dd:73:a2:3c:c1:4d:cc:ba:6f:ac:6f:6b:59:91:8b: 12:47:85:6d:fc:17:78:6b:77:37:43:5a:2a:8a:27: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:03:69:75:61:A1:CA:1A:B1:1C:39:00:25:E3:00:89:60:C8:45 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:1f:55:15:65:aa:14:cd:db:4b:ec:ac:53:f6:8b:34:34: 29:df:a6:69:58:f7:23:9b:e9:3e:b3:8a:54:8e:b6:9e:8d:81: 7c:fb:66:d4:7c:f1:a7:bb:06:46:3a:2a:7c:6e:b9:74:9e:51: 11:dd:d8:4f:2e:55:b9:24:84:49:64:79:90:c3:b5:ff:5b:88: 09:d6:89:3e:54:57:dd:fe:a8:9c:35:5e:a1:fc:3f:ff:aa:ef: a2:5f:fe:50:4f:c7:70:bc:4e:99:31:96:50:47:54:44:90:05: 2b:77:61:42:7a:c2:56:6f:92:8f:f9:ba:a8:09:ba:2f:85:fc: 0d:06:26:db:62:38:2f:f9:83:10:60:d0:77:23:8c:c9:59:1d: 1d:96:5f:df:a8:4d:da:4f:08:6c:1e:79:7c:f7:0e:40:cc:b9: d9:78:d1:d9:23:46:de:c1:7c:d2:bf:f9:cd:a7:d1:48:b6:93: 0e:b0:59:f3:64:c0:78:d8:39:b4:91:44:49:d0:b7:dd:c8:c2: 0c:dd:c0:a3:16:11:cc:d0:d3:d3:d3:f2:93:4c:9c:6e:fa:5a: 68:41:65:dd:c5:33:4b:81:bd:84:fa:a1:27:b3:4a:68:db:b5: a4:f1:c7:0d:b2:b8:69:6a:57:80:aa:9c:c7:6f:dd:5b:71:c5: 2e:ef:2c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjUwNDI0MjExOTQ5WhcNMjUwNTAxMjExOTQ5WjAYMRYwFAYD VQQDEw02ODBhYWFmNi0yNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OzEvvlBntt5F1HfOSEMpbR98mY3zxDomQhR3xOTkVcJeuLy4Pu2XOAVDgDM BKQXSuDs+YRxtwl6KIwu+I4iadEuK/MUxfdXtINtDpywe0lYySnss42GEUbORfz5 HrMB5O71CvLRUn3KaeWOSqYMTlH5F94at3KeTj6hdWCPnOhH8W1g7BWUCAIdV6ab rsq/i+Zjcc25/pWNOX3V//8CW5gPfoCwllEtrdI/V/kMX3LsQGElv9u+/Z1HmWwy /QJ6MgWAU9hQrca69czAHHZR3dn0n351VQ0+FMzwA21ekIvdc6I8wU3Mum+sb2tZ kYsSR4Vt/Bd4a3c3Q1oqiidplQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+TA2l1 YaHKGrEcOQAl4wCJYMhFMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtOB9VFWWqFM3bS+ysU/aLNDQp36ZpWPcjm+k+s4pUjraejYF8+2bU fPGnuwZGOip8brl0nlER3dhPLlW5JIRJZHmQw7X/W4gJ1ok+VFfd/qicNV6h/D// qu+iX/5QT8dwvE6ZMZZQR1REkAUrd2FCesJWb5KP+bqoCbovhfwNBibbYjgv+YMQ YNB3I4zJWR0dll/fqE3aTwhsHnl89w5AzLnZeNHZI0bewXzSv/nNp9FItpMOsFnz ZMB42Dm0kURJ0LfdyMIM3cCjFhHM0NPT0/KTTJxu+lpoQWXdxTNLgb2E+qEns0po 27Wk8ccNsrhpaleAqpzHb91bccUu7yww -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:11 2025 by rpki-client