$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: k3VWU41I2ZMvwO82xRaAXfY2rD3/LdUqayxwfsLn8Ew= Subject key identifier: 68:95:99:35:6F:EF:7A:31:B7:CD:35:DB:46:CA:FD:81:BE:01:A2:A5 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 3490 Signing time: Thu 24 Apr 2025 14:35:33 +0000 Manifest this update: Thu 24 Apr 2025 14:35:33 +0000 Manifest next update: Thu 01 May 2025 14:35:33 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: cOf10+vsUdGBtok+iu4zTbMq3+PB134bb+YsSKfPwfU=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: Ml46u2z0U+I2ZQaPPsePPmtgvCBhdMDLTPQJk8d3bl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Apr 24 14:35:33 2025 GMT Not After : May 1 14:35:33 2025 GMT Subject: CN=680a4c35-1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:ff:11:b4:4d:c9:4e:22:36:99:ec:3f:cc: ff:4a:f2:a9:10:60:07:9c:c2:f2:6a:b3:c2:c9:ac: 3b:32:dd:41:66:54:53:65:ab:b1:37:03:d1:0e:5f: 5e:19:06:fa:71:32:2e:03:ec:bd:33:b2:50:7d:a9: 60:bc:88:23:e3:d3:f3:a5:77:0f:a9:64:09:45:cf: 26:15:00:61:23:de:1f:84:2e:fc:5e:e3:96:1e:1b: 43:7b:e7:67:76:f6:91:b1:b8:7c:e1:2c:7c:44:73: 14:50:1c:5f:57:ec:6d:92:07:61:ab:a2:91:fe:fe: 2a:e0:33:2e:55:67:f7:0b:29:bd:8b:58:8e:71:0d: d4:cc:a7:7f:84:8e:44:d3:ba:82:f5:07:24:54:91: 25:01:46:6b:a0:25:f0:70:9a:dc:6e:db:8e:02:28: 33:47:78:93:3d:45:91:4a:55:a2:f1:a5:da:64:7b: 1f:19:3e:da:91:34:d4:21:ca:26:8b:e7:f3:fc:8b: 85:94:90:4c:12:6e:79:ee:ad:02:78:06:97:d7:99: c8:4a:af:a7:db:81:e8:63:c9:f6:03:80:97:17:df: 14:34:d0:a6:dc:64:50:8b:3d:0a:5c:9c:c6:ff:8e: ee:5d:4d:1e:63:2f:c5:85:39:ac:3c:b9:1a:f7:b1: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:99:35:6F:EF:7A:31:B7:CD:35:DB:46:CA:FD:81:BE:01:A2:A5 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:70:03:97:66:d7:5b:98:38:3b:91:1e:59:4a:05:3b:eb:9e: b4:96:4d:31:d8:bb:2e:79:7f:5a:26:b3:51:9c:be:ec:35:d1: 01:93:f6:81:c6:d8:10:32:cc:d3:e5:f9:6b:9f:09:01:b7:d9: ee:1e:2b:d7:ac:d3:32:58:81:32:8e:63:ca:1c:cb:bb:58:76: 4b:fb:a4:e0:49:c8:45:7b:5f:77:ec:54:f0:f3:6f:a5:46:9b: 92:7e:04:5e:06:a4:d4:cf:0f:5d:5b:44:da:b5:39:ad:fb:aa: 58:6b:7a:fe:a1:81:9e:46:35:76:5b:3d:93:17:1f:6b:15:57: cb:6f:ba:ca:ae:c5:df:90:ec:21:ad:2a:8c:91:50:d7:3d:21: 08:1a:fc:a4:e8:8d:74:ce:6e:23:36:54:83:aa:60:80:c7:ff: a4:ba:c6:57:c4:ff:0c:78:48:c5:b7:01:da:69:6c:c0:b5:4e: 85:de:b7:ce:e6:96:f9:93:81:fa:60:c5:bd:b7:4c:55:58:b5: 5d:e8:a5:59:11:af:65:ee:b2:3a:84:f7:9d:99:33:5f:f1:35: c2:21:d7:51:c1:51:24:d0:3b:ee:26:c7:a2:c3:e4:c4:45:36: 5a:35:f5:e7:4d:d3:a1:e9:b1:f8:a0:89:5e:f1:d7:60:4d:44: b2:d0:c6:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjUwNDI0MTQzNTMzWhcNMjUwNTAxMTQzNTMzWjAYMRYwFAYD VQQDEw02ODBhNGMzNS0xNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hz/EbRNyU4iNpnsP8z/SvKpEGAHnMLyarPCyaw7Mt1BZlRTZauxNwPRDl9e GQb6cTIuA+y9M7JQfalgvIgj49PzpXcPqWQJRc8mFQBhI94fhC78XuOWHhtDe+dn dvaRsbh84Sx8RHMUUBxfV+xtkgdhq6KR/v4q4DMuVWf3Cym9i1iOcQ3UzKd/hI5E 07qC9QckVJElAUZroCXwcJrcbtuOAigzR3iTPUWRSlWi8aXaZHsfGT7akTTUIcom i+fz/IuFlJBMEm557q0CeAaX15nISq+n24HoY8n2A4CXF98UNNCm3GRQiz0KXJzG /47uXU0eYy/FhTmsPLka97GxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiVmTVv 73oxt80120bK/YG+AaKlMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBacAOXZtdbmDg7kR5ZSgU76560lk0x2LsueX9aJrNRnL7sNdEBk/aB xtgQMszT5flrnwkBt9nuHivXrNMyWIEyjmPKHMu7WHZL+6TgSchFe1937FTw82+l RpuSfgReBqTUzw9dW0TatTmt+6pYa3r+oYGeRjV2Wz2TFx9rFVfLb7rKrsXfkOwh rSqMkVDXPSEIGvyk6I10zm4jNlSDqmCAx/+kusZXxP8MeEjFtwHaaWzAtU6F3rfO 5pb5k4H6YMW9t0xVWLVd6KVZEa9l7rI6hPedmTNf8TXCIddRwVEk0DvuJseiw+TE RTZaNfXnTdOh6bH4oIle8ddgTUSy0May -----END CERTIFICATE-----Generated at Sat Apr 26 03:45:27 2025 by rpki-client