$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft File: gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json) Hash identifier: yaG6nig4RsDg1a95Q2GGqs+TExJ4oTPztIG52Qo0c7Q= Subject key identifier: 0C:FA:76:DC:A3:B8:A5:67:CC:C1:17:6D:EF:06:8C:A3:83:B4:A5:97 Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft Manifest number: 012D Signing time: Fri 25 Apr 2025 03:46:34 +0000 Manifest this update: Fri 25 Apr 2025 03:46:33 +0000 Manifest next update: Fri 02 May 2025 03:46:33 +0000 Files and hashes: 1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: K+XwVKHb2zHxp6H91JiDqoPhpzrIqPP4mJ6uGu3+2jM=) 2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: iIgu2YCDJNBMVFAfxHOYOBXqDgtqnG2sQcvAv4/N21A=) 3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: MEW0G3vOg9trhSdFIvvfCuuUeDbhhXHLhPTz+oibzFY=) 4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945 Validity Not Before: Apr 25 03:46:33 2025 GMT Not After : May 2 03:46:33 2025 GMT Subject: CN=680b0599-4699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:2f:4c:7f:7e:88:fe:0f:bf:07:be:80:de: 49:bb:1f:d5:94:35:54:bd:8d:97:6e:47:c2:70:77: 22:06:6f:20:bc:6a:17:d8:c6:b2:b9:cc:ca:74:96: f3:ba:d7:a3:12:3e:0e:58:c7:ba:3f:1e:e2:9b:68: 4f:f0:8c:d9:38:f7:34:db:f9:2e:1b:03:22:a7:69: 79:97:0b:de:d8:ca:02:c6:b1:f9:6d:f2:00:70:65: 2d:85:d8:8e:d2:29:16:33:21:d6:21:7b:62:96:2c: f5:da:11:33:72:14:31:93:bd:65:9b:a8:25:e2:fb: e9:21:81:cd:a2:80:1d:8d:7b:06:d4:8c:bc:96:83: 86:34:09:29:b0:70:3b:08:21:82:49:0a:c3:ba:2d: 9c:03:2c:f7:4d:83:0f:30:55:16:00:a9:e1:71:f6: 7c:4d:cd:06:fb:4d:ae:c1:7d:71:2a:84:d0:65:ce: eb:6d:f2:bf:f1:ec:af:62:00:90:8b:50:18:c5:bf: c1:d1:d3:76:c4:7f:33:ca:18:f4:da:ad:0a:61:d2: 8f:eb:80:dd:d1:1f:b2:ed:f7:ff:e3:a5:c5:41:65: d8:d6:9f:4c:92:d7:52:2c:e3:fc:12:01:7a:4b:e3: dc:23:b9:5b:36:92:f5:f8:64:b1:c6:16:83:be:05: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FA:76:DC:A3:B8:A5:67:CC:C1:17:6D:EF:06:8C:A3:83:B4:A5:97 X509v3 Authority Key Identifier: keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:1b:db:07:90:7c:ff:e9:0a:bc:b4:ee:03:59:6a:08:fb: 61:ab:d2:1e:6e:b5:0f:63:f6:3e:61:2d:fe:34:c3:2d:00:fd: 6d:84:35:a3:2d:41:07:7e:4a:1e:df:bd:39:ac:63:01:3d:50: 7b:40:e3:24:bd:7e:83:91:e1:76:05:b0:da:a8:08:40:e0:e5: a5:61:9d:2d:04:08:ae:30:d4:96:4b:27:1b:a5:90:60:97:01: ff:64:f3:89:3c:db:fa:a7:e8:d3:65:19:73:d0:ad:2d:4a:ac: 2e:5b:c8:da:cd:73:81:87:81:59:f5:04:5b:c7:8e:2e:98:d5: 5b:fc:7d:89:d1:4a:c2:3e:26:22:90:d2:6e:57:d4:79:f8:af: e7:76:e7:af:f8:c2:21:76:5b:e0:c0:45:46:b4:db:06:ce:d4: 69:22:01:6e:5b:28:00:7c:31:ab:3d:53:60:7d:a0:a1:6f:a4: 8f:9d:4b:cf:ad:94:0b:04:d5:7e:21:87:f1:dc:29:9f:bf:f5: 43:b8:21:7b:cb:7d:4e:68:01:7c:82:96:6a:1e:5c:74:7b:d2: a5:fd:d9:d3:57:82:ee:16:4e:6b:59:ab:1f:de:8a:b4:b7:c8: 4d:a0:79:41:e2:4b:97:51:5a:74:e1:2d:1c:da:02:f3:a9:7d: ea:18:ab:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMzMxMTAvBgNVBAUTKDgwQkU5MzBFMzA2NDlCMTJBQ0VFOERDNDBCNTc1QUI3 RERFNjQ5NDUwHhcNMjUwNDI1MDM0NjMzWhcNMjUwNTAyMDM0NjMzWjAYMRYwFAYD VQQDEw02ODBiMDU5OS00Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0f8vTH9+iP4Pvwe+gN5Jux/VlDVUvY2XbkfCcHciBm8gvGoX2MayuczKdJbz utejEj4OWMe6Px7im2hP8IzZOPc02/kuGwMip2l5lwve2MoCxrH5bfIAcGUthdiO 0ikWMyHWIXtiliz12hEzchQxk71lm6gl4vvpIYHNooAdjXsG1Iy8loOGNAkpsHA7 CCGCSQrDui2cAyz3TYMPMFUWAKnhcfZ8Tc0G+02uwX1xKoTQZc7rbfK/8eyvYgCQ i1AYxb/B0dN2xH8zyhj02q0KYdKP64Dd0R+y7ff/46XFQWXY1p9MktdSLOP8EgF6 S+PcI7lbNpL1+GSxxhaDvgUDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAz6dtyj uKVnzMEXbe8GjKODtKWXMB8GA1UdIwQYMBaAFIC+kw4wZJsSrO6NxAtXWrfd5klF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMzMy81NDI2NUYzNDY2 ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214S3M3bzNFQzFkYXQ5M21T VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dMNlREakJrbXhLczdvM0VDMWRhdDkzbVNVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMzMy81NDI2NUYzNDY2ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214 S3M3bzNFQzFkYXQ5M21TVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAalRvbB5B8/+kKvLTuA1lqCPthq9IebrUPY/Y+YS3+NMMtAP1thDWj LUEHfkoe3705rGMBPVB7QOMkvX6DkeF2BbDaqAhA4OWlYZ0tBAiuMNSWSycbpZBg lwH/ZPOJPNv6p+jTZRlz0K0tSqwuW8jazXOBh4FZ9QRbx44umNVb/H2J0UrCPiYi kNJuV9R5+K/nduev+MIhdlvgwEVGtNsGztRpIgFuWygAfDGrPVNgfaChb6SPnUvP rZQLBNV+IYfx3Cmfv/VDuCF7y31OaAF8gpZqHlx0e9Kl/dnTV4LuFk5rWasf3oq0 t8hNoHlB4kuXUVp04S0c2gLzqX3qGKuO -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:44 2025 by rpki-client