$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft File: gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json) Hash identifier: EOFX4Wu7NG4ApaRywXfuci8dzuunQ4yf+RnSX2x7/Vg= Subject key identifier: E5:74:2F:95:E9:F8:83:CE:C2:9F:E0:E9:58:49:A6:35:B6:DE:D4:E1 Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 Certificate issuer: /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft Manifest number: 01CF Signing time: Fri 25 Apr 2025 02:02:14 +0000 Manifest this update: Fri 25 Apr 2025 02:02:14 +0000 Manifest next update: Fri 02 May 2025 02:02:14 +0000 Files and hashes: 1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: S6lpgzcD3EsZInDxS+koMP0IpNPuNHok0OuY/Amy50c=) 2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=) 3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324 Validity Not Before: Apr 25 02:02:14 2025 GMT Not After : May 2 02:02:14 2025 GMT Subject: CN=680aed26-be59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:bd:b3:c7:bb:30:d7:6a:7b:9e:bd:a8:77: fa:4f:34:a1:cb:7e:11:99:d1:66:54:1f:e8:b2:9a: 02:43:41:92:4f:7a:ea:60:07:00:85:af:2b:f6:3e: b4:32:69:94:a3:85:4e:9e:26:6e:7a:21:ad:d2:20: aa:18:86:cf:18:b5:cd:10:6e:34:aa:88:21:65:6d: db:e5:d3:68:64:90:31:9e:5f:d7:bf:ef:87:a7:d8: 7e:90:5d:7f:3b:a9:23:c8:b4:9d:da:38:5d:8b:86: ec:09:af:28:2c:92:f8:de:00:e8:e1:31:86:47:ec: 14:a1:e9:10:b4:8d:6a:66:b6:8d:42:29:c4:95:9f: 4c:d3:58:26:a2:6c:61:4a:92:e3:43:6c:d7:c0:8d: eb:b1:5f:9e:bd:56:cf:33:0e:62:a9:9d:26:ae:6d: 72:4c:ed:00:6c:b3:0a:d3:6c:5b:8f:29:54:b3:2d: 15:6d:70:49:b5:36:d9:dd:24:9f:fc:ec:f3:a9:5f: b1:d4:33:0c:70:39:5b:58:ef:59:16:e9:28:31:a2: 30:2d:72:49:2c:22:86:dd:4c:f0:7d:50:a5:67:9e: 60:e9:ee:7b:b0:e4:6e:2f:a9:b0:1a:58:21:73:81: b1:77:27:87:a2:58:d0:a8:34:39:54:66:cf:08:01: 19:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:2F:95:E9:F8:83:CE:C2:9F:E0:E9:58:49:A6:35:B6:DE:D4:E1 X509v3 Authority Key Identifier: keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:d6:d5:a1:bd:09:25:27:34:4d:2c:32:3b:58:50:69:fc: 93:69:55:11:25:68:ca:a0:b4:89:6b:e2:cf:00:c0:ed:13:d3: 21:11:d9:de:3f:11:0b:c7:27:4d:c1:95:b1:7e:b1:d8:b1:16: df:98:fe:57:8f:f6:35:12:cb:b4:87:ba:2b:b0:1d:79:1b:e5: af:2a:61:b7:ba:71:be:be:13:5b:c2:4f:e0:25:de:a1:f2:78: cb:f7:7f:09:a0:e6:b4:5e:6a:29:2d:2f:7f:ad:10:99:95:c9: 57:04:e4:8c:82:9f:56:22:ef:65:f1:f7:e6:79:d1:80:15:5e: 34:14:f2:61:cc:e6:d5:c0:89:bf:fe:21:6b:8d:8a:55:1d:f6: fe:f7:44:f6:7e:09:41:78:4e:94:4d:83:13:67:ce:73:ee:4d: 81:06:b2:f1:0a:e0:66:42:24:98:33:66:99:4c:25:73:0e:c4: ff:d0:df:92:f8:bb:ef:32:4e:41:22:ab:6c:a6:e7:e2:ba:60: 67:1c:a6:ea:c1:d8:7b:83:7b:d8:0d:4b:7f:88:0f:c6:34:45: 12:37:8b:f4:98:2f:8c:72:60:40:a6:d6:53:94:08:e6:cb:fe: f4:da:7a:0e:ed:d3:02:2d:e8:52:eb:3a:84:ef:44:8a:bc:42: ef:09:9e:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU5Q0MxMTAvBgNVBAUTKDgyOTQ0RTZBQTU3MUMwRUIzNUUyNzkxQkMxNTk2Rjc3 Mjc3QTczMjQwHhcNMjUwNDI1MDIwMjE0WhcNMjUwNTAyMDIwMjE0WjAYMRYwFAYD VQQDEw02ODBhZWQyNi1iZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNW9s8e7MNdqe569qHf6TzShy34RmdFmVB/ospoCQ0GST3rqYAcAha8r9j60 MmmUo4VOniZueiGt0iCqGIbPGLXNEG40qoghZW3b5dNoZJAxnl/Xv++Hp9h+kF1/ O6kjyLSd2jhdi4bsCa8oLJL43gDo4TGGR+wUoekQtI1qZraNQinElZ9M01gmomxh SpLjQ2zXwI3rsV+evVbPMw5iqZ0mrm1yTO0AbLMK02xbjylUsy0VbXBJtTbZ3SSf /OzzqV+x1DMMcDlbWO9ZFukoMaIwLXJJLCKG3UzwfVClZ55g6e57sORuL6mwGlgh c4GxdyeHoljQqDQ5VGbPCAEZZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV0L5Xp +IPOwp/g6VhJpjW23tThMB8GA1UdIwQYMBaAFIKUTmqlccDrNeJ5G8FZb3cnenMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTlDQy82MEI0NDdCQTVG NEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdPczE0bmtid1ZsdmR5ZDZj eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwUk9hcVZ4d09zMTRua2J3Vmx2ZHlkNmN5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTlDQy82MEI0NDdCQTVGNEExMUVEQUQ2ODY1N0VDNEY5QUUwMi9ncFJPYXFWeHdP czE0bmtid1ZsdmR5ZDZjeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXSNbVob0JJSc0TSwyO1hQafyTaVURJWjKoLSJa+LPAMDtE9MhEdne PxELxydNwZWxfrHYsRbfmP5Xj/Y1Esu0h7orsB15G+WvKmG3unG+vhNbwk/gJd6h 8njL938JoOa0XmopLS9/rRCZlclXBOSMgp9WIu9l8ffmedGAFV40FPJhzObVwIm/ /iFrjYpVHfb+90T2fglBeE6UTYMTZ85z7k2BBrLxCuBmQiSYM2aZTCVzDsT/0N+S +LvvMk5BIqtspufiumBnHKbqwdh7g3vYDUt/iA/GNEUSN4v0mC+McmBAptZTlAjm y/702noO7dMCLehS6zqE70SKvELvCZ4l -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:08 2025 by rpki-client