$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft File: Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json) Hash identifier: iLVoBY2SCF48RDHWPoNiHChmFMn29gGHvykOHIYO9Wc= Subject key identifier: F1:1C:AE:5A:C4:88:BA:EC:48:78:C0:84:E3:BE:56:07:84:15:AB:D9 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft Manifest number: 0450 Signing time: Thu 24 Apr 2025 23:58:45 +0000 Manifest this update: Thu 24 Apr 2025 23:58:44 +0000 Manifest next update: Thu 01 May 2025 23:58:44 +0000 Files and hashes: 1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: JuFGwMtmv1UvEmofWSSkKfJ4FcvZ2Axdu0Ng8AjHpbI=) 2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: +fO5Boo5Ka6tNlBReSpJLtITheTtisuQT78+GLLRRv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Apr 24 23:58:44 2025 GMT Not After : May 1 23:58:44 2025 GMT Subject: CN=680ad034-0d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:57:da:35:1a:a6:97:ce:49:e7:8d:3f:cb: f5:8f:33:b0:89:b8:ce:00:24:72:6f:44:8b:8f:81: d5:11:d7:5e:be:51:da:1e:11:1f:e9:24:4d:b6:48: b7:e8:f9:46:07:a3:8f:5c:31:f9:6a:37:25:15:e8: 1f:9e:29:b5:8a:09:19:d6:f4:3f:d3:b2:8b:7b:02: 4d:4b:18:9e:b2:3f:e3:7b:57:89:e9:f3:27:4f:ca: 51:8a:ce:d3:83:32:1d:71:12:0a:6a:7f:64:f7:2d: 27:01:eb:ef:d2:39:b3:51:b5:4a:54:36:dd:d2:9c: 72:1b:60:c5:ea:40:26:75:68:6c:54:8a:70:d0:e0: da:ad:ef:53:57:39:ac:74:0f:bc:c8:4c:f9:08:40: 66:9e:66:e4:bb:ea:5c:58:ba:41:9e:3f:49:b6:c7: 2d:73:5f:05:58:93:15:33:97:73:bf:8c:53:19:31: e1:a9:bd:67:b8:c9:aa:0e:da:a9:42:8f:00:94:0f: 5e:3c:96:34:6b:23:55:b9:83:c7:14:a7:b8:85:90: 17:9d:91:99:5c:6e:03:4b:a8:b6:09:f5:84:3b:eb: 33:f6:8f:d1:ca:7a:5c:b9:e2:2f:3a:10:6e:49:b4: ca:d0:a0:9b:eb:2c:ed:5c:60:9a:a6:58:e6:ea:9d: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1C:AE:5A:C4:88:BA:EC:48:78:C0:84:E3:BE:56:07:84:15:AB:D9 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:79:c1:a2:05:e7:9b:6f:7d:a7:6f:5e:76:2c:eb:2d:65: 73:44:cc:90:1a:b6:c5:0a:10:9b:b2:96:42:f6:50:2c:ff:48: 6e:4f:8e:75:32:17:c1:df:1d:bf:65:fe:69:17:bc:ec:80:6a: 54:c2:89:05:ba:7a:87:0c:78:aa:ee:1d:e4:a6:fd:50:8f:d2: 28:45:36:79:29:9e:af:87:02:16:3e:a9:f7:62:e0:29:e2:cc: 6b:18:b2:83:7e:26:6e:f3:9c:a6:aa:2f:45:49:42:ef:6f:43: eb:33:a0:12:5c:52:3b:17:ca:b4:e2:ed:5b:b7:e9:2f:cd:99: e6:c0:f4:b5:cf:13:1c:2a:8d:e6:99:bb:2f:61:71:13:1b:65: 4d:ae:d1:45:b0:50:ac:f0:78:41:e5:cd:71:e4:4a:28:f4:14: cd:55:fb:64:2c:b5:82:41:a3:16:b3:37:92:f6:ab:1c:6a:a7: 70:8d:94:c8:7d:45:6d:dc:7e:c9:45:53:96:81:ca:42:d1:b4: e5:16:08:8c:b5:4b:62:cc:d7:7b:73:89:b4:db:b9:7f:e9:87: 7d:a5:15:0d:ef:e0:03:b6:77:0d:b7:c1:d1:98:2e:bd:1b:db: 17:a1:3c:ff:ec:84:0b:5b:60:b6:7d:ad:6b:2b:81:67:96:dd: c6:ad:07:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUwNDI0MjM1ODQ0WhcNMjUwNTAxMjM1ODQ0WjAYMRYwFAYD VQQDEw02ODBhZDAzNC0wZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/hX2jUappfOSeeNP8v1jzOwibjOACRyb0SLj4HVEddevlHaHhEf6SRNtki3 6PlGB6OPXDH5ajclFegfnim1igkZ1vQ/07KLewJNSxiesj/je1eJ6fMnT8pRis7T gzIdcRIKan9k9y0nAevv0jmzUbVKVDbd0pxyG2DF6kAmdWhsVIpw0ODare9TVzms dA+8yEz5CEBmnmbku+pcWLpBnj9Jtsctc18FWJMVM5dzv4xTGTHhqb1nuMmqDtqp Qo8AlA9ePJY0ayNVuYPHFKe4hZAXnZGZXG4DS6i2CfWEO+sz9o/RynpcueIvOhBu SbTK0KCb6yztXGCapljm6p3bwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEcrlrE iLrsSHjAhOO+VgeEFavZMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCNnnBogXnm299p29edizrLWVzRMyQGrbFChCbspZC9lAs/0huT451 MhfB3x2/Zf5pF7zsgGpUwokFunqHDHiq7h3kpv1Qj9IoRTZ5KZ6vhwIWPqn3YuAp 4sxrGLKDfiZu85ymqi9FSULvb0PrM6ASXFI7F8q04u1bt+kvzZnmwPS1zxMcKo3m mbsvYXETG2VNrtFFsFCs8HhB5c1x5Eoo9BTNVftkLLWCQaMWszeS9qscaqdwjZTI fUVt3H7JRVOWgcpC0bTlFgiMtUtizNd7c4m027l/6Yd9pRUN7+ADtncNt8HRmC69 G9sXoTz/7IQLW2C2fa1rK4Fnlt3GrQd2 -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:34 2025 by rpki-client