$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft File: -gfo6rqEcKil_kuhPnXZ5f6jOyc.mft (raw, json) Hash identifier: P33J+aXIkGe3mZxKfH7pmYD+P3RdlBUafSa0tBWdW3Y= Subject key identifier: 2F:80:D0:93:9B:74:B5:AD:CB:DF:83:45:5A:60:54:0E:60:5E:50:26 Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft Manifest number: 09A3 Signing time: Thu 24 Apr 2025 19:56:40 +0000 Manifest this update: Thu 24 Apr 2025 19:56:39 +0000 Manifest next update: Thu 01 May 2025 19:56:39 +0000 Files and hashes: 1: -gfo6rqEcKil_kuhPnXZ5f6jOyc.crl (hash: BT+FMGTBHFVpQjlq7ak+scb4QFaE97ZvhkvpSAci00w=) 2: 0893031C846611EA9B99E043C4F9AE02.roa (hash: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Validity Not Before: Apr 24 19:56:39 2025 GMT Not After : May 1 19:56:39 2025 GMT Subject: CN=680a9777-0a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:db:cc:d5:e1:07:63:26:6f:67:99:0a:42: 60:a9:2b:48:10:47:50:36:61:ad:81:58:80:d0:c3: cd:3f:77:c9:91:29:cf:b9:01:c4:81:50:23:fa:6e: a9:ad:4a:77:a6:c5:4e:98:8b:e4:b4:04:19:77:eb: 53:1d:be:94:d8:ff:f2:c7:d4:e9:2f:00:d9:b3:75: 07:6b:26:df:f9:98:de:e9:73:c8:bd:92:14:79:38: 8d:2d:9c:35:eb:ef:3a:b9:3f:da:5a:31:47:8a:d2: 2c:b9:53:c6:f8:15:48:e8:ee:b4:f8:1d:8e:99:3a: e0:33:f5:31:9b:ff:76:06:e8:6b:9e:33:06:e0:a4: b9:69:a3:2f:9e:c0:fb:6a:40:c1:31:9f:80:49:0b: 4b:2c:78:bd:cf:73:fa:75:ef:ad:c4:fe:fc:be:e0: ba:f1:74:57:65:fe:ef:7d:01:12:69:0f:f8:10:14: 45:db:b9:a8:cf:de:e5:46:c3:a3:43:da:f9:d0:fd: c2:b7:52:ca:35:b9:3a:fd:54:fc:de:dd:59:6e:d7: 9d:2d:04:f9:83:99:46:5e:26:46:fb:95:53:a9:aa: 52:2b:c6:a4:8c:5c:38:84:82:de:1f:a2:dc:ad:c1: 75:01:d4:00:6a:8c:85:f2:5d:fd:07:c0:31:37:fb: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:D0:93:9B:74:B5:AD:CB:DF:83:45:5A:60:54:0E:60:5E:50:26 X509v3 Authority Key Identifier: keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:9b:28:e0:da:b6:7e:30:c2:41:af:c0:71:d9:98:f7:a7: 9a:41:ad:ed:39:a1:a2:f8:d6:a9:c1:c0:a3:46:ea:fc:29:be: 64:df:9d:31:98:4b:a8:7f:ba:be:4f:8f:5e:09:5c:33:71:66: 78:0c:3c:65:a0:e8:b0:4b:a0:7d:e4:51:05:4b:83:94:d9:0f: 9f:41:9c:f0:2a:64:66:f9:6e:e7:e4:f6:fa:76:c2:27:d9:18: de:7e:0d:ea:d7:8f:74:10:e6:1e:da:25:97:85:a6:c4:49:f9: 05:ef:d5:cd:82:d7:1e:5e:74:b7:14:6e:83:42:1b:90:74:68: a4:f0:8e:3c:50:46:88:2f:99:96:53:76:fd:ce:2b:c8:21:ca: d4:3e:67:ec:e2:ac:39:ef:73:ce:36:c9:65:a0:8a:25:21:c9: d7:30:15:66:95:4f:1f:16:b1:ce:3b:8c:4d:17:01:75:a3:f6: a4:f8:ec:64:80:91:da:aa:94:d5:58:b1:cf:b1:0a:f1:44:80: 25:04:4a:11:dc:08:d5:3e:8c:20:29:5c:24:30:ba:ab:17:c2: 68:4d:84:f5:13:ec:35:8f:4c:96:dd:93:c4:c2:58:11:66:23: 30:e6:8f:6e:5e:f4:bc:83:21:a4:69:a5:10:db:2f:42:89:97: cf:81:7c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQTIxMTAvBgNVBAUTKEZBMDdFOEVBQkE4NDcwQThBNUZFNEJBMTNFNzVEOUU1 RkVBMzNCMjcwHhcNMjUwNDI0MTk1NjM5WhcNMjUwNTAxMTk1NjM5WjAYMRYwFAYD VQQDEw02ODBhOTc3Ny0wYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA3bzNXhB2Mmb2eZCkJgqStIEEdQNmGtgViA0MPNP3fJkSnPuQHEgVAj+m6p rUp3psVOmIvktAQZd+tTHb6U2P/yx9TpLwDZs3UHaybf+Zje6XPIvZIUeTiNLZw1 6+86uT/aWjFHitIsuVPG+BVI6O60+B2OmTrgM/Uxm/92BuhrnjMG4KS5aaMvnsD7 akDBMZ+ASQtLLHi9z3P6de+txP78vuC68XRXZf7vfQESaQ/4EBRF27moz97lRsOj Q9r50P3Ct1LKNbk6/VT83t1ZbtedLQT5g5lGXiZG+5VTqapSK8akjFw4hILeH6Lc rcF1AdQAaoyF8l39B8AxN/unswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+A0JOb dLWty9+DRVpgVA5gXlAmMB8GA1UdIwQYMBaAFPoH6Oq6hHCopf5LoT512eX+ozsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZBMi8xQzg4QjAzQTg0 NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNLaWxfa3VoUG5YWjVmNmpP eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nZm82cnFFY0tpbF9rdWhQblhaNWY2ak95Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZBMi8xQzg4QjAzQTg0NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNL aWxfa3VoUG5YWjVmNmpPeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcDZso4Nq2fjDCQa/AcdmY96eaQa3tOaGi+NapwcCjRur8Kb5k350x mEuof7q+T49eCVwzcWZ4DDxloOiwS6B95FEFS4OU2Q+fQZzwKmRm+W7n5Pb6dsIn 2Rjefg3q1490EOYe2iWXhabESfkF79XNgtceXnS3FG6DQhuQdGik8I48UEaIL5mW U3b9zivIIcrUPmfs4qw573PONslloIolIcnXMBVmlU8fFrHOO4xNFwF1o/ak+Oxk gJHaqpTVWLHPsQrxRIAlBEoR3AjVPowgKVwkMLqrF8JoTYT1E+w1j0yW3ZPEwlgR ZiMw5o9uXvS8gyGkaaUQ2y9CiZfPgXzY -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:20 2025 by rpki-client