$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft File: G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json) Hash identifier: wSeIcvuA3fMma099ALZa4O6LjDfRTLBTLnTgOkHPykI= Subject key identifier: 1C:07:59:BD:51:9C:5A:2F:11:AD:0C:4B:76:97:70:7D:65:BA:A2:F8 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:42:28 +0000 Manifest this update: Fri 25 Apr 2025 04:42:28 +0000 Manifest next update: Fri 02 May 2025 04:42:28 +0000 Files and hashes: 1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: 06rtpK5EdZKsHwdya80DNn2caFYsIcOUrni8AVCJNcI=) 2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: y03lKIB42nw4jlkFQ7G75iFQPvcCfwFRDTzAnmoLg+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Apr 25 04:42:28 2025 GMT Not After : May 2 04:42:28 2025 GMT Subject: CN=680b12b4-55f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:4c:bb:ca:f5:64:c2:47:67:bf:f5:3c:b1: cd:71:fa:c1:4b:52:c7:6b:bc:51:4d:c2:30:7e:e3: 31:99:00:98:a5:ad:68:78:5c:dc:6b:07:e8:87:52: f6:cd:ae:32:1e:e6:83:6e:a0:d7:cc:f7:ba:c4:2d: d5:73:41:39:c2:5d:ad:f6:59:d2:f4:8c:c3:aa:ae: c8:9b:94:4d:f4:ce:1b:45:ea:0a:b4:2d:5c:23:46: db:4b:df:e4:3d:e3:d6:df:da:9b:f5:3b:d9:1a:17: 53:29:f9:a6:62:c4:84:5b:e1:35:8c:ae:95:1b:10: a1:30:7d:3a:d9:40:de:be:7a:a6:35:65:94:e9:d6: c8:0c:d8:30:4c:f0:2a:56:9c:c1:b2:d8:18:4b:e4: 0f:2f:45:d4:eb:f7:64:52:09:67:88:e9:d6:fd:5b: 96:ec:05:e5:b2:c4:e6:73:bf:60:a5:f6:0e:b1:51: 2d:44:a8:59:42:07:5b:4a:fc:59:2e:81:2e:c3:83: cf:5c:4f:86:46:c1:51:34:94:c3:33:b6:f9:e8:b0: 0d:39:23:37:94:1b:ad:c0:70:ca:52:52:b6:f2:63: 82:fe:74:84:90:92:df:20:e5:74:a5:26:84:d2:8f: 56:2c:f6:4c:1c:10:54:5f:ef:2e:2e:f1:1b:3a:ac: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:59:BD:51:9C:5A:2F:11:AD:0C:4B:76:97:70:7D:65:BA:A2:F8 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:14:f7:5a:60:fd:9b:a4:35:8b:82:6e:a9:89:7e:5f:af:1f: 8a:78:5a:30:0d:03:7a:6b:cb:82:08:7d:07:48:7a:3f:cc:16: 09:5c:e6:df:0e:c4:b7:7b:ae:f6:cf:43:0b:11:f3:2a:ca:d5: 5f:51:03:aa:02:26:07:2f:04:02:00:e7:cb:e1:12:05:ee:60: df:07:04:27:56:ea:4e:97:89:82:56:94:af:81:06:ff:b7:c9: 3b:3e:fd:9a:6e:29:6e:3a:d7:60:c6:13:b0:b6:d7:24:a8:8a: b6:a3:a4:b4:26:47:34:b7:6f:79:f4:9f:bb:9a:00:78:2e:c4: 9a:d2:49:23:a9:4e:e0:0d:a5:30:ae:9f:95:06:ad:9a:85:d7: 12:fe:4a:df:d2:60:48:c6:30:d1:ba:ae:4b:ab:b5:07:f9:89: 9a:ad:50:3a:03:9b:bc:6d:2a:4b:06:4f:c2:33:0e:90:ca:bb: af:77:8b:e7:ec:71:26:8c:01:1b:af:95:60:33:f5:6b:27:a0: 68:40:fc:da:5d:62:00:12:f3:c6:be:e3:49:7a:2f:cc:21:b5: 83:1c:ca:a1:74:a3:54:67:7c:8f:d2:06:bf:7d:c1:d4:47:1c: c2:ae:5c:1f:0e:72:e0:7e:d8:30:56:2e:3c:52:b0:5f:c2:2d: 30:60:0b:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwNDI1MDQ0MjI4WhcNMjUwNTAyMDQ0MjI4WjAYMRYwFAYD VQQDEw02ODBiMTJiNC01NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPFMu8r1ZMJHZ7/1PLHNcfrBS1LHa7xRTcIwfuMxmQCYpa1oeFzcawfoh1L2 za4yHuaDbqDXzPe6xC3Vc0E5wl2t9lnS9IzDqq7Im5RN9M4bReoKtC1cI0bbS9/k PePW39qb9TvZGhdTKfmmYsSEW+E1jK6VGxChMH062UDevnqmNWWU6dbIDNgwTPAq VpzBstgYS+QPL0XU6/dkUglniOnW/VuW7AXlssTmc79gpfYOsVEtRKhZQgdbSvxZ LoEuw4PPXE+GRsFRNJTDM7b56LANOSM3lButwHDKUlK28mOC/nSEkJLfIOV0pSaE 0o9WLPZMHBBUX+8uLvEbOqw4TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwHWb1R nFovEa0MS3aXcH1luqL4MB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T Nmkyc2hybUtPWXp3eGIxdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpFPdaYP2bpDWLgm6piX5frx+KeFowDQN6a8uCCH0HSHo/zBYJXObf DsS3e672z0MLEfMqytVfUQOqAiYHLwQCAOfL4RIF7mDfBwQnVupOl4mCVpSvgQb/ t8k7Pv2abiluOtdgxhOwttckqIq2o6S0Jkc0t2959J+7mgB4LsSa0kkjqU7gDaUw rp+VBq2ahdcS/krf0mBIxjDRuq5Lq7UH+YmarVA6A5u8bSpLBk/CMw6Qyruvd4vn 7HEmjAEbr5VgM/VrJ6BoQPzaXWIAEvPGvuNJei/MIbWDHMqhdKNUZ3yP0ga/fcHU RxzCrlwfDnLgftgwVi48UrBfwi0wYAsu -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:08 2025 by rpki-client