$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft File: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json) Hash identifier: x+wW0rh3+Zbp5Rz3cptpX+W0IIYXFObGqIcX+zPNoME= Subject key identifier: AA:5C:29:81:6F:6C:DA:DC:FF:F7:39:83:BC:62:88:FD:B6:C9:96:7E Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft Manifest number: 05FD Signing time: Thu 24 Apr 2025 22:41:58 +0000 Manifest this update: Thu 24 Apr 2025 22:41:57 +0000 Manifest next update: Thu 01 May 2025 22:41:57 +0000 Files and hashes: 1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: yETtKmHDbRpNNiQCm2hcKP6dTuj2i5pjPXluRicLHdw=) 2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: XXm7dEPWN7PeNwcSEocHHcyLGZ98umw2siGVr4odclk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56 Validity Not Before: Apr 24 22:41:57 2025 GMT Not After : May 1 22:41:57 2025 GMT Subject: CN=680abe35-b431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:d3:b8:3f:83:6c:18:fc:29:0f:c6:21:6f: 1c:a9:4a:be:1c:72:cb:1e:5b:35:8b:47:ef:59:38: 29:f5:6c:f2:3c:ef:97:54:d9:12:c1:30:11:3a:10: bf:d9:30:dc:aa:1d:55:e4:d4:6c:41:5c:cb:10:db: 7f:d9:d6:f4:a0:c0:a7:0b:85:b3:0c:17:e8:6f:ef: dd:0a:cb:5b:bc:dd:71:1f:dd:da:c5:d5:16:e9:e8: f9:c6:57:aa:5c:ab:34:20:2e:1c:03:d4:fd:ed:b2: ec:56:b9:19:45:3f:73:b7:cf:b1:e0:0d:15:c3:ee: bf:00:6c:b1:bb:73:86:8a:14:80:84:74:0d:42:55: 96:4e:a9:5c:69:ba:cc:a4:20:2b:8d:0c:02:25:c1: 68:38:88:eb:ea:60:e1:6f:c4:8e:8e:6e:17:3a:59: dd:9e:6e:74:20:73:ff:fe:59:3f:a4:aa:98:ad:3b: 0e:96:1a:33:20:e5:b6:6d:05:c7:7f:0c:42:ee:61: cf:01:b0:8e:53:20:cc:bd:e5:52:9e:81:f9:ea:e4: 87:7d:8a:d2:bb:5d:e0:a2:73:22:10:12:d6:76:8e: 41:b6:28:22:ca:ac:9e:02:a6:3d:63:ff:06:36:a4: cf:e4:3b:9b:5a:c2:a3:5b:38:17:59:64:4c:41:21: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:29:81:6F:6C:DA:DC:FF:F7:39:83:BC:62:88:FD:B6:C9:96:7E X509v3 Authority Key Identifier: keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:52:50:68:5b:d0:e3:41:fe:3b:2a:b2:4a:40:11:d5:da:46: 1e:13:86:ea:9f:0d:77:af:07:b6:13:9a:82:93:3b:d7:ba:50: bd:93:11:e8:66:8b:30:da:45:6a:75:74:4f:78:62:7f:b3:90: 7f:82:15:38:d9:78:5e:d7:ec:34:c6:5e:d5:e9:7e:8d:c0:87: 0d:8e:d8:11:cc:9d:ff:a0:cc:a3:c1:30:64:36:23:3e:b0:5d: b2:80:ee:44:0c:9c:a4:2d:d2:77:1b:cf:9b:d2:1e:2f:bf:43: 2c:4d:19:95:19:c2:9c:94:90:3c:f5:89:c8:a0:16:81:8c:ea: b5:28:16:76:a6:ca:80:40:41:1e:83:d2:93:71:12:12:58:e3: 56:39:35:3b:98:a7:12:0c:bc:9b:06:08:b5:02:7d:2d:e1:a4: 59:37:e6:c1:77:0f:c8:db:2e:1f:d0:c7:29:0c:6c:e3:89:59: d2:ea:e4:35:36:33:0c:99:8a:e0:c0:43:6e:4e:76:d5:4c:48: 55:7f:99:de:3e:52:1f:b3:ab:7f:4a:88:19:0e:b0:f8:6c:88: 6c:d1:9b:03:9e:90:48:39:84:88:da:3a:b6:6a:bc:38:00:7c: 18:c3:50:62:d5:ef:e7:7c:94:da:09:ec:d0:5c:b8:8c:e4:ca: e2:6c:d0:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCQUQxMTAvBgNVBAUTKDgxRkZGMjE1MDA1REExQUZBQzVFMjRBQkJDQzAzQ0E3 MEY2NjRCNTYwHhcNMjUwNDI0MjI0MTU3WhcNMjUwNTAxMjI0MTU3WjAYMRYwFAYD VQQDEw02ODBhYmUzNS1iNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJvTuD+DbBj8KQ/GIW8cqUq+HHLLHls1i0fvWTgp9WzyPO+XVNkSwTAROhC/ 2TDcqh1V5NRsQVzLENt/2db0oMCnC4WzDBfob+/dCstbvN1xH93axdUW6ej5xleq XKs0IC4cA9T97bLsVrkZRT9zt8+x4A0Vw+6/AGyxu3OGihSAhHQNQlWWTqlcabrM pCArjQwCJcFoOIjr6mDhb8SOjm4XOlndnm50IHP//lk/pKqYrTsOlhozIOW2bQXH fwxC7mHPAbCOUyDMveVSnoH56uSHfYrSu13gonMiEBLWdo5BtigiyqyeAqY9Y/8G NqTP5DubWsKjWzgXWWRMQSET9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpcKYFv bNrc//c5g7xiiP22yZZ+MB8GA1UdIwQYMBaAFIH/8hUAXaGvrF4kq7zAPKcPZktW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUJBRC81MEQ5MUU2NkEz NDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9hLXNYaVNydk1BOHB3OW1T MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmX3lGUUJkb2Etc1hpU3J2TUE4cHc5bVMxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUJBRC81MEQ5MUU2NkEzNDMxMUVCOTk3QjMzMTlDNEY5QUUwMi9nZl95RlFCZG9h LXNYaVNydk1BOHB3OW1TMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqUlBoW9DjQf47KrJKQBHV2kYeE4bqnw13rwe2E5qCkzvXulC9kxHo Zosw2kVqdXRPeGJ/s5B/ghU42Xhe1+w0xl7V6X6NwIcNjtgRzJ3/oMyjwTBkNiM+ sF2ygO5EDJykLdJ3G8+b0h4vv0MsTRmVGcKclJA89YnIoBaBjOq1KBZ2psqAQEEe g9KTcRISWONWOTU7mKcSDLybBgi1An0t4aRZN+bBdw/I2y4f0McpDGzjiVnS6uQ1 NjMMmYrgwENuTnbVTEhVf5nePlIfs6t/SogZDrD4bIhs0ZsDnpBIOYSI2jq2arw4 AHwYw1Bi1e/nfJTaCezQXLiM5MribNC7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:28 2025 by rpki-client