$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft File: GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json) Hash identifier: 0qHHSAl4dcUGTHZVv5c1kgZ/d3EvyMqQLIi0JqQ2CfI= Subject key identifier: DC:1B:B4:ED:06:36:0E:2B:C5:54:BE:DF:B3:9C:41:C7:C9:F9:8D:7E Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft Manifest number: 0687 Signing time: Thu 24 Apr 2025 20:38:53 +0000 Manifest this update: Thu 24 Apr 2025 20:38:52 +0000 Manifest next update: Thu 01 May 2025 20:38:52 +0000 Files and hashes: 1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: o0NVrBurQ0av5bHKlJ4ynYxtCwJKUObYfsd7zO6WHLc=) 2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: QWVO48Lwadq4KUtj+VF2u0phUptaO0Lunt38Hpl0ScQ=) 3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: lAVQxnaIpb4+FR/69nne2013Hk4eswtCR3VSmU3tbJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Apr 24 20:38:52 2025 GMT Not After : May 1 20:38:52 2025 GMT Subject: CN=680aa15d-dd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:46:25:b0:a2:3f:6a:be:d8:c0:2a:0f:14: f6:4e:30:6b:89:63:41:e5:98:a5:2a:2e:93:ac:3a: b1:15:89:b8:07:6e:d9:5c:9c:16:17:f2:8d:cb:b1: 8f:36:72:80:50:f3:fc:36:5d:17:ef:c7:70:e5:2a: 95:b1:2e:62:d8:4e:40:66:71:28:f1:85:07:cf:73: cb:21:6c:50:72:c4:2a:34:53:d4:0a:d2:8b:ae:33: 4b:26:0d:c4:6c:17:bd:9e:5a:bf:67:6b:0c:42:b6: b5:d3:43:e6:9c:e7:a2:ae:e0:51:1f:6a:2b:b3:6d: ec:f7:01:b3:77:b4:d0:38:a4:bf:b6:80:15:97:a8: d7:e5:5e:f8:48:f0:ac:bc:d6:3d:67:ef:1e:4a:f6: 43:b1:90:62:30:35:c1:82:13:8a:28:95:7f:4f:23: 90:aa:c6:68:9c:eb:e1:fb:a8:b7:14:8a:c1:61:6b: c3:ef:45:0f:20:de:64:fd:7c:c2:42:53:a2:2b:bf: ec:f5:32:1e:80:4f:8a:0c:8e:75:be:aa:9c:28:a9: 57:2e:85:2f:dd:0f:d3:7f:e8:47:2f:a8:26:c3:f5: 2a:10:45:10:5c:72:8a:b4:ec:3f:2a:77:d0:23:96: a5:41:38:4d:20:69:16:ba:8f:a9:aa:d0:51:94:ff: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1B:B4:ED:06:36:0E:2B:C5:54:BE:DF:B3:9C:41:C7:C9:F9:8D:7E X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2d:14:d4:0b:8a:c5:a8:38:ba:37:31:c4:f9:c4:e0:52:ea: 0b:15:dd:b4:eb:88:17:48:11:18:ca:cb:de:a7:c1:3c:fd:a0: 8d:22:61:e2:d2:83:3e:a2:19:fd:81:64:7d:aa:4a:45:8d:d9: d9:d3:29:c2:12:cc:18:c4:a0:85:f7:98:5c:8c:0f:98:29:d8: e2:33:29:0f:de:48:76:0d:1d:4d:9d:99:49:84:aa:81:2d:1c: ca:04:61:e5:fe:0c:6b:0a:9e:29:28:b8:db:f6:04:79:2d:78: 20:e2:2c:9c:3e:b8:1a:6d:18:cb:d5:41:80:cd:62:9e:fe:29: ef:5c:57:5f:e2:6f:76:cf:00:01:7a:42:1b:06:6b:7c:0a:9c: 31:61:c9:f3:0d:7c:fe:6a:8b:5f:36:0b:f3:5c:f6:8b:5a:d2: 69:cf:1c:0e:24:86:ae:66:94:b8:8b:02:f7:b9:b9:24:af:57: b7:1e:00:cc:a9:67:64:d5:4b:6e:3a:e0:ad:49:9a:d0:e3:5b: 0f:c7:55:cd:e7:b5:c0:a8:6a:30:e2:e9:30:17:65:f7:8a:ba: 75:a7:f9:93:59:79:a5:0f:31:c2:8a:5b:af:bf:41:ef:33:cb: 8e:70:ce:14:45:ab:6a:12:ad:cf:95:e7:07:dc:09:d2:c4:64: 75:1e:09:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjUwNDI0MjAzODUyWhcNMjUwNTAxMjAzODUyWjAYMRYwFAYD VQQDEw02ODBhYTE1ZC1kZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ThGJbCiP2q+2MAqDxT2TjBriWNB5ZilKi6TrDqxFYm4B27ZXJwWF/KNy7GP NnKAUPP8Nl0X78dw5SqVsS5i2E5AZnEo8YUHz3PLIWxQcsQqNFPUCtKLrjNLJg3E bBe9nlq/Z2sMQra100PmnOeiruBRH2ors23s9wGzd7TQOKS/toAVl6jX5V74SPCs vNY9Z+8eSvZDsZBiMDXBghOKKJV/TyOQqsZonOvh+6i3FIrBYWvD70UPIN5k/XzC QlOiK7/s9TIegE+KDI51vqqcKKlXLoUv3Q/Tf+hHL6gmw/UqEEUQXHKKtOw/KnfQ I5alQThNIGkWuo+pqtBRlP/ypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwbtO0G Ng4rxVS+37OcQcfJ+Y1+MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX THBmeU9FVnpZVUhUNENhQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRLRTUC4rFqDi6NzHE+cTgUuoLFd2064gXSBEYysvep8E8/aCNImHi 0oM+ohn9gWR9qkpFjdnZ0ynCEswYxKCF95hcjA+YKdjiMykP3kh2DR1NnZlJhKqB LRzKBGHl/gxrCp4pKLjb9gR5LXgg4iycPrgabRjL1UGAzWKe/invXFdf4m92zwAB ekIbBmt8CpwxYcnzDXz+aotfNgvzXPaLWtJpzxwOJIauZpS4iwL3ubkkr1e3HgDM qWdk1UtuOuCtSZrQ41sPx1XN57XAqGow4ukwF2X3irp1p/mTWXmlDzHCiluvv0Hv M8uOcM4URatqEq3PlecH3AnSxGR1HgkC -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:30 2025 by rpki-client