$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: 2/1P3dHV1dXXDeDXyoQIxi38elH0iF+rzr2YZTfYlTY= Subject key identifier: 3D:CD:6F:9B:17:C9:81:7D:A7:BD:DF:22:10:32:B3:26:01:34:DE:C3 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: 8E Signing time: Fri 25 Apr 2025 05:27:48 +0000 Manifest this update: Fri 25 Apr 2025 05:27:47 +0000 Manifest next update: Fri 02 May 2025 05:27:47 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: fvNeX6ez5sns1W/FWoDq5/cV3y13GzDabmSVFC/Fh+4=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 9XdOr8ci0XxQ25MZorUAalomR3Uhklj1yk5ZzWVz3NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: Apr 25 05:27:47 2025 GMT Not After : May 2 05:27:47 2025 GMT Subject: CN=680b1d53-1d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:1e:7a:27:21:0a:fa:d6:75:5e:2c:fb:fb: 9d:65:32:c6:43:2d:41:5e:7d:2f:bf:ec:af:03:ed: fd:d3:88:92:f0:20:9c:af:72:9e:65:69:92:37:95: 51:ce:0d:d2:0e:17:72:4f:ed:ed:99:d5:d1:63:ca: b5:7c:9f:46:2e:fe:24:9d:e9:4a:90:cc:87:8e:9d: ec:e8:57:a4:d7:11:41:21:36:f0:a1:7f:4f:14:f9: 9e:f7:58:d8:d1:ab:18:0a:02:13:80:4f:76:7b:3c: c0:80:09:b1:32:a4:04:68:9a:02:dc:e2:5b:09:42: 57:fb:e6:c6:a9:9e:7a:af:3e:c4:e8:9b:d3:e9:14: 5a:60:69:68:1c:6e:2a:34:40:dd:30:70:1e:ff:b1: 9e:36:c0:7c:fb:2a:b3:db:86:71:55:c8:31:30:20: 13:9c:7b:fc:eb:4b:40:13:96:2d:47:2c:74:08:e9: 66:f1:91:8d:c8:cb:19:0a:92:12:ac:1e:d3:51:6a: ed:66:d6:e1:46:30:c0:c0:31:96:37:07:a2:4f:ba: 0b:69:0d:b8:be:09:2b:1a:94:af:1d:67:64:b4:6d: 7b:c3:87:e8:a4:71:0f:2f:b1:a8:af:96:bc:bc:ec: b5:73:1f:99:97:13:8a:01:34:b2:ad:df:6e:9f:28: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:6F:9B:17:C9:81:7D:A7:BD:DF:22:10:32:B3:26:01:34:DE:C3 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e1:b5:32:45:d1:34:a4:93:fe:d0:c2:f9:c3:3f:d6:a6:00: 5b:a3:20:50:46:49:35:58:c7:dc:b3:b3:b2:96:d4:cc:16:7e: 4d:af:12:b0:0a:a7:ec:90:c8:b7:9e:18:b9:71:43:44:8a:ae: ab:74:24:b2:bd:71:47:75:88:ea:1c:a0:f4:f8:bc:1d:66:e6: a1:bd:99:40:65:0d:62:d8:49:a9:79:a4:29:25:cb:c2:43:65: 04:79:43:be:2d:3f:f3:e3:60:73:5b:0e:df:9f:e6:90:65:4d: 63:ba:40:3a:f4:17:0a:79:bd:ef:1c:a0:17:11:c4:f9:98:a5: dd:6b:a7:b5:00:38:e9:0a:b6:00:9c:0c:39:69:ea:38:f7:19: 01:e1:8c:f2:83:c3:6e:9b:08:cd:3d:b5:0c:f7:c1:c3:1b:11: 95:0c:e7:48:b0:8e:d9:9f:5f:8b:34:3e:3c:e4:16:c7:83:1f: 9e:2a:07:59:32:2e:b4:11:b6:b9:d1:ca:38:c9:31:f8:61:2b: a4:f0:5e:66:dd:81:5a:76:2a:85:37:0d:fd:8a:76:63:fd:26: 38:4a:08:1e:86:84:6a:f1:e2:96:5c:00:bf:72:c8:75:d0:c2: 93:74:69:4f:0a:a5:e9:54:ef:6a:e0:ca:2b:b9:e4:e5:4a:b6: be:d9:64:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUwNDI1MDUyNzQ3WhcNMjUwNTAyMDUyNzQ3WjAYMRYwFAYD VQQDEw02ODBiMWQ1My0xZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl8eeichCvrWdV4s+/udZTLGQy1BXn0vv+yvA+3904iS8CCcr3KeZWmSN5VR zg3SDhdyT+3tmdXRY8q1fJ9GLv4knelKkMyHjp3s6Fek1xFBITbwoX9PFPme91jY 0asYCgITgE92ezzAgAmxMqQEaJoC3OJbCUJX++bGqZ56rz7E6JvT6RRaYGloHG4q NEDdMHAe/7GeNsB8+yqz24ZxVcgxMCATnHv860tAE5YtRyx0COlm8ZGNyMsZCpIS rB7TUWrtZtbhRjDAwDGWNweiT7oLaQ24vgkrGpSvHWdktG17w4fopHEPL7Gor5a8 vOy1cx+ZlxOKATSyrd9unyjUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3Nb5sX yYF9p73fIhAysyYBNN7DMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4bUyRdE0pJP+0ML5wz/WpgBboyBQRkk1WMfcs7OyltTMFn5NrxKw CqfskMi3nhi5cUNEiq6rdCSyvXFHdYjqHKD0+LwdZuahvZlAZQ1i2EmpeaQpJcvC Q2UEeUO+LT/z42BzWw7fn+aQZU1jukA69BcKeb3vHKAXEcT5mKXda6e1ADjpCrYA nAw5aeo49xkB4Yzyg8NumwjNPbUM98HDGxGVDOdIsI7Zn1+LND485BbHgx+eKgdZ Mi60Eba50co4yTH4YSuk8F5m3YFadiqFNw39inZj/SY4SggehoRq8eKWXAC/csh1 0MKTdGlPCqXpVO9q4MorueTlSra+2WSF -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:27 2025 by rpki-client