$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: dpmqKBU2WelOFZcW4rdpSehBaqvyEJ3GtnG9GNU4iEE= Subject key identifier: D4:3D:83:4C:98:DC:FB:61:17:B9:BB:6C:A7:F0:04:95:B7:3D:30:94 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 114C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 1125 Signing time: Thu 24 Apr 2025 17:16:52 +0000 Manifest this update: Thu 24 Apr 2025 17:16:52 +0000 Manifest next update: Thu 01 May 2025 17:16:52 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: urs9JUoWctJOs5FQWYVMVYnvmERZaRp8J6DxJ5aEY5o=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4428 (0x114c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Apr 24 17:16:52 2025 GMT Not After : May 1 17:16:52 2025 GMT Subject: CN=680a7204-f03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:4f:0a:27:eb:d8:e3:2b:12:3c:74:df:93: 42:be:ee:f4:0f:84:29:e3:c6:82:fd:9b:03:65:e2: fd:d9:c5:ff:d1:b2:62:0c:85:c5:48:dc:cf:e5:f1: 9f:5e:62:66:8e:d5:57:cf:96:ca:18:6a:f0:69:4f: 7c:5c:6e:1c:1e:b0:a6:73:af:59:2f:81:a3:35:45: e5:36:8d:9b:19:55:3a:d5:69:6b:95:cf:f1:6c:b9: 6f:d3:33:b6:7a:8b:a5:82:c1:73:1a:c8:c8:4b:4a: 20:b1:b1:aa:1d:8a:af:43:8b:40:4e:90:e4:34:0e: 37:9d:95:b3:8a:0c:07:a7:a2:9f:25:60:09:e8:41: a7:c8:f2:3a:7d:ba:e8:d3:7f:be:29:38:41:3b:23: e3:df:9a:0f:5b:2f:47:ba:2f:24:02:da:94:47:53: ff:77:d2:ae:8e:c8:fc:ae:50:4e:45:c1:8c:dd:2b: a9:3f:e3:3b:be:8b:e9:97:37:a4:9d:e6:6e:f8:5f: 73:9d:d1:df:be:39:f9:cf:98:1a:61:1c:82:8b:43: bf:df:99:f3:0b:1d:22:e5:5c:95:ff:ac:a9:3d:c0: 9a:c4:e9:11:a7:81:b8:2b:22:2f:2b:e5:04:db:f7: 0f:0a:06:80:57:a8:49:eb:6a:88:f6:14:0f:aa:8f: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3D:83:4C:98:DC:FB:61:17:B9:BB:6C:A7:F0:04:95:B7:3D:30:94 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7a:c2:05:10:61:0a:43:14:b7:8b:b9:be:fd:03:61:96:f0: f5:70:7b:98:11:d7:15:26:eb:17:29:90:ec:c4:f0:8c:93:a5: 57:90:da:9e:ce:ec:1f:2a:ba:1d:a9:9e:e0:eb:35:f8:64:a1: 55:cf:4c:81:2e:3a:a2:f0:a0:07:8b:11:cf:ef:7a:9d:9f:f1: 1a:aa:b4:c6:03:55:49:2c:93:12:8c:cf:8f:21:8b:f9:f7:6d: 44:23:b5:cb:20:b9:22:d4:41:97:ec:18:b1:24:e3:ca:34:53: 96:d2:33:db:c2:c7:7c:25:7b:f8:f2:45:2f:6d:d8:4f:12:ed: 6e:8c:46:1d:c2:6e:61:72:d6:a8:33:ea:71:9c:07:b0:f8:f3: 27:3b:0c:6d:a4:6e:37:dd:70:50:07:ab:3a:8d:22:f9:85:86: c2:77:07:07:79:bf:ef:88:5b:5e:e5:c2:4e:7d:cb:ae:5b:82: 61:c6:6d:10:73:ee:b2:a7:ff:43:b0:3b:0a:43:10:38:64:90: f4:0d:52:7c:84:e3:92:ff:c2:18:48:78:61:2e:7d:7c:3e:11: eb:1b:4e:4d:63:dd:49:7e:26:9b:19:c8:08:d9:24:33:72:5d: 53:47:0c:4d:88:f6:3e:06:b7:a0:7c:64:9d:13:50:e5:fc:68: 5f:66:b2:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUwNDI0MTcxNjUyWhcNMjUwNTAxMTcxNjUyWjAYMRYwFAYD VQQDEw02ODBhNzIwNC1mMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVpPCifr2OMrEjx035NCvu70D4Qp48aC/ZsDZeL92cX/0bJiDIXFSNzP5fGf XmJmjtVXz5bKGGrwaU98XG4cHrCmc69ZL4GjNUXlNo2bGVU61Wlrlc/xbLlv0zO2 eoulgsFzGsjIS0ogsbGqHYqvQ4tATpDkNA43nZWzigwHp6KfJWAJ6EGnyPI6fbro 03++KThBOyPj35oPWy9Hui8kAtqUR1P/d9Kujsj8rlBORcGM3SupP+M7vovplzek neZu+F9zndHfvjn5z5gaYRyCi0O/35nzCx0i5VyV/6ypPcCaxOkRp4G4KyIvK+UE 2/cPCgaAV6hJ62qI9hQPqo+NSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ9g0yY 3PthF7m7bKfwBJW3PTCUMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpesIFEGEKQxS3i7m+/QNhlvD1cHuYEdcVJusXKZDsxPCMk6VXkNqe zuwfKrodqZ7g6zX4ZKFVz0yBLjqi8KAHixHP73qdn/EaqrTGA1VJLJMSjM+PIYv5 921EI7XLILki1EGX7BixJOPKNFOW0jPbwsd8JXv48kUvbdhPEu1ujEYdwm5hctao M+pxnAew+PMnOwxtpG433XBQB6s6jSL5hYbCdwcHeb/viFte5cJOfcuuW4Jhxm0Q c+6yp/9DsDsKQxA4ZJD0DVJ8hOOS/8IYSHhhLn18PhHrG05NY91JfiabGcgI2SQz cl1TRwxNiPY+BregfGSdE1Dl/GhfZrJI -----END CERTIFICATE-----Generated at Sat Apr 26 05:40:23 2025 by rpki-client