$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: I1Uthvv60emMBFEP8IE4lD7Q3f2szUOPHfWhcCTLhSA= Subject key identifier: 61:9D:52:AA:0E:67:F2:4A:66:6B:F1:6D:BB:DF:DD:C2:AE:D0:97:82 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 098A Signing time: Thu 24 Apr 2025 20:00:51 +0000 Manifest this update: Thu 24 Apr 2025 20:00:50 +0000 Manifest next update: Thu 01 May 2025 20:00:50 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: 2/vbDGNDFC55R8vE/j6OCUrVmakm6dOzWkAzd0+uAkc=) 2: E09840C4D5B511EFB22A647DC4F9AE02.roa (hash: UUua9CtlmlNUMxfEXymhiloAwqTpKtC9fDGIWh1Bzk8=) 3: CFD6E5708AFA11EAAACB392AC4F9AE02.roa (hash: +YzJrYGnbGLCjVsOBK3rhph4HgKiBqVFBpU2hsaMvKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Apr 24 20:00:50 2025 GMT Not After : May 1 20:00:50 2025 GMT Subject: CN=680a9872-cbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:89:f8:f1:e1:09:3c:67:7c:60:a9:cb:f8: bb:a8:02:a7:95:f0:59:25:6f:d9:46:66:e8:2f:ec: 1b:fe:c6:0d:7e:91:ea:09:b5:7d:98:0d:a1:39:94: 6e:3e:87:95:92:a6:4b:d5:a6:05:08:e1:f7:22:c1: 05:52:f1:e1:59:47:02:8d:3d:0c:c0:ee:00:44:ba: 4e:9c:7e:55:25:10:b1:84:df:3a:a9:b5:b9:4a:85: 96:51:79:bc:87:14:29:06:86:f6:98:d2:c1:85:cf: df:00:74:10:d8:e6:9d:4e:23:45:ee:c7:8e:35:b9: 41:3e:6c:3d:ba:9a:34:5d:bd:f3:a1:7e:5d:87:7a: 67:2d:e6:7c:75:ef:29:86:fa:f1:b7:90:1d:4a:7d: 33:5a:0a:12:bb:13:50:6b:12:f5:37:8b:19:50:0e: 95:73:57:77:37:ac:9f:49:91:1d:31:43:29:0d:95: 92:31:aa:fb:43:e2:40:9b:d2:28:95:7c:34:53:2a: aa:8c:9a:61:a1:a4:5a:a7:c9:d3:5f:e0:90:58:41: a3:81:78:b3:7c:f2:af:f4:0a:68:d7:cd:7e:c7:5d: 58:0a:81:09:21:f3:5b:8c:e4:8a:8c:11:47:c1:fd: a4:19:95:26:a3:72:84:e0:d5:48:6f:5d:c3:fa:51: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:52:AA:0E:67:F2:4A:66:6B:F1:6D:BB:DF:DD:C2:AE:D0:97:82 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:64:27:9f:81:8e:69:7a:33:fb:65:e2:12:c6:33:a1:0e:7f: 44:40:d4:cb:7a:ac:97:2a:4c:62:a3:1b:16:19:11:66:bb:bd: ba:3d:ac:e2:a2:e7:5c:30:cd:73:9e:46:ff:76:4b:a5:b7:72: ca:5e:ab:71:88:5c:7a:1c:59:3f:84:4a:ea:44:6a:35:69:e0: 50:6b:66:31:d3:e6:46:4d:76:cf:41:22:e2:97:af:5b:ac:85: 52:bf:4b:25:49:41:e3:8f:44:87:0a:7f:a6:d7:91:7a:24:84: 70:d8:6c:52:ea:fd:3f:72:05:63:fe:b5:c3:db:78:a3:1f:56: d5:8e:cd:c6:7f:24:d9:8a:82:53:88:39:58:10:6a:d5:32:df: 1a:06:fd:2c:57:9d:48:73:02:90:26:ce:d2:9c:13:fd:9f:da: cb:52:69:fd:5d:91:c3:12:98:5e:9c:45:ae:19:c2:61:c4:25: 1e:cc:2b:6f:49:13:31:06:5e:f0:ed:c6:02:08:6c:8d:5f:09: 4f:83:37:4e:ae:39:f4:fc:2b:e2:ab:1a:0c:71:78:7e:48:5f: f3:bf:5e:54:56:58:a1:12:1a:00:a5:a3:38:f8:88:cf:d7:df: 56:67:f7:f6:3d:78:1a:ab:1f:07:5e:8c:64:32:03:01:ec:1c: 3b:23:26:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjUwNDI0MjAwMDUwWhcNMjUwNTAxMjAwMDUwWjAYMRYwFAYD VQQDEw02ODBhOTg3Mi1jYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+OJ+PHhCTxnfGCpy/i7qAKnlfBZJW/ZRmboL+wb/sYNfpHqCbV9mA2hOZRu PoeVkqZL1aYFCOH3IsEFUvHhWUcCjT0MwO4ARLpOnH5VJRCxhN86qbW5SoWWUXm8 hxQpBob2mNLBhc/fAHQQ2OadTiNF7seONblBPmw9upo0Xb3zoX5dh3pnLeZ8de8p hvrxt5AdSn0zWgoSuxNQaxL1N4sZUA6Vc1d3N6yfSZEdMUMpDZWSMar7Q+JAm9Io lXw0UyqqjJphoaRap8nTX+CQWEGjgXizfPKv9Apo181+x11YCoEJIfNbjOSKjBFH wf2kGZUmo3KE4NVIb13D+lE6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGdUqoO Z/JKZmvxbbvf3cKu0JeCMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZCefgY5pejP7ZeISxjOhDn9EQNTLeqyXKkxioxsWGRFmu726Pazi oudcMM1znkb/dkult3LKXqtxiFx6HFk/hErqRGo1aeBQa2Yx0+ZGTXbPQSLil69b rIVSv0slSUHjj0SHCn+m15F6JIRw2GxS6v0/cgVj/rXD23ijH1bVjs3GfyTZioJT iDlYEGrVMt8aBv0sV51IcwKQJs7SnBP9n9rLUmn9XZHDEphenEWuGcJhxCUezCtv SRMxBl7w7cYCCGyNXwlPgzdOrjn0/CviqxoMcXh+SF/zv15UVlihEhoApaM4+IjP 199WZ/f2PXgaqx8HXoxkMgMB7Bw7IyZg -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:40 2025 by rpki-client