$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json) Hash identifier: 5yPxBw5OR19g/yL3DU26ZvAHA28CYQD1qZ3Ke3LJwmk= Subject key identifier: AA:9B:C2:3F:9F:67:94:81:27:96:06:20:07:C8:35:E7:6D:77:AB:56 Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft Manifest number: D7 Signing time: Fri 25 Apr 2025 04:43:29 +0000 Manifest this update: Fri 25 Apr 2025 04:43:28 +0000 Manifest next update: Fri 02 May 2025 04:43:28 +0000 Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: O/kW/B2QKLg09tCYRApURyD0IM6CD+cZgGPZYSPSIh0=) 2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=) 3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162 Validity Not Before: Apr 25 04:43:28 2025 GMT Not After : May 2 04:43:28 2025 GMT Subject: CN=680b12f0-6b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:ee:35:10:35:f8:74:a2:8a:a4:3b:dd:13: c6:33:48:08:e3:f3:5c:d1:68:80:49:68:89:0a:2b: 14:69:2e:d4:c9:64:4f:86:a9:d3:4c:7c:70:d0:05: 29:35:16:4f:49:55:62:6e:33:5d:f3:e1:82:ac:7b: 02:14:f3:68:4f:a3:b6:01:1a:ff:1c:33:9d:2e:b9: 20:cf:12:a2:60:47:5c:f4:56:6e:2a:4d:e2:23:dc: 1f:4e:0d:4f:cb:20:73:7e:99:76:d7:92:f7:94:56: 7b:82:3a:2e:74:68:7b:58:bf:d3:95:50:e1:48:be: a4:e4:32:03:f4:b6:4b:76:90:ba:e0:4f:c8:23:49: de:8d:f8:8a:12:cc:59:1f:7a:f3:b9:80:50:42:04: 59:61:7f:84:a0:8a:aa:28:9b:7f:62:24:cf:66:29: d4:df:fd:df:8a:67:e0:dd:a9:bb:79:76:ed:d4:83: 0a:9e:52:6e:82:59:c1:56:70:fb:24:a6:43:93:f1: 83:a5:ca:23:f7:39:b7:8c:07:73:15:da:71:73:78: c1:ad:f7:88:a5:da:de:e8:8c:94:3b:74:d4:f7:78: 9e:ae:b2:cc:84:e4:ac:88:01:15:ba:36:ec:ca:88: 11:f0:a1:f8:30:24:66:1c:70:ea:40:a5:17:1f:3f: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9B:C2:3F:9F:67:94:81:27:96:06:20:07:C8:35:E7:6D:77:AB:56 X509v3 Authority Key Identifier: keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0e:15:e5:00:82:97:c7:33:5d:65:de:9e:b3:19:78:bf:80: ef:33:85:ab:7b:2f:cd:d2:e8:fd:a1:2c:29:d2:9c:17:8b:ed: 2b:e1:49:6a:d5:fb:5e:2e:ea:25:70:12:a9:11:d3:5e:8c:af: 70:4f:0f:7a:42:dd:ed:2c:fa:c1:18:1f:0d:f4:3e:09:65:5c: a9:ee:60:20:2e:d8:7f:0b:48:82:c7:91:47:28:d6:97:39:81: 22:53:b7:58:b7:6d:cd:14:23:71:5c:70:a7:56:7b:53:c6:b1: 17:e1:3c:da:69:81:43:f1:c8:68:63:85:ab:81:aa:ce:7f:05: 03:71:82:24:99:33:5d:45:e3:4c:0f:f3:54:73:29:37:e1:71: 1c:81:e2:d6:56:16:26:6d:3d:04:3d:77:21:d9:be:1f:83:62: 07:95:30:a9:6f:49:e2:59:38:86:5d:8c:d0:8a:c9:6f:9b:83: c0:39:9b:f8:bf:fc:6d:a1:18:c6:59:54:39:48:7b:38:8e:51: 52:3d:60:d9:18:21:23:97:f1:e3:8a:ae:f9:df:73:a6:6f:ae: 40:d2:c9:df:0e:65:af:8d:17:ec:45:07:1d:0c:a9:fa:33:27: ad:7f:99:7f:b1:f8:dd:f8:fb:eb:0b:d3:6a:a5:87:6b:f4:e9: 7f:e7:64:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG QjJGMEYxNjIwHhcNMjUwNDI1MDQ0MzI4WhcNMjUwNTAyMDQ0MzI4WjAYMRYwFAYD VQQDEw02ODBiMTJmMC02YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BDuNRA1+HSiiqQ73RPGM0gI4/Nc0WiASWiJCisUaS7UyWRPhqnTTHxw0AUp NRZPSVVibjNd8+GCrHsCFPNoT6O2ARr/HDOdLrkgzxKiYEdc9FZuKk3iI9wfTg1P yyBzfpl215L3lFZ7gjoudGh7WL/TlVDhSL6k5DID9LZLdpC64E/II0nejfiKEsxZ H3rzuYBQQgRZYX+EoIqqKJt/YiTPZinU3/3fimfg3am7eXbt1IMKnlJuglnBVnD7 JKZDk/GDpcoj9zm3jAdzFdpxc3jBrfeIpdre6IyUO3TU93ierrLMhOSsiAEVujbs yogR8KH4MCRmHHDqQKUXHz+vpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqbwj+f Z5SBJ5YGIAfINedtd6tWMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1 RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4 dWtRLW96OVdjR183THc4V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKDhXlAIKXxzNdZd6esxl4v4DvM4Wrey/N0uj9oSwp0pwXi+0r4Ulq 1fteLuolcBKpEdNejK9wTw96Qt3tLPrBGB8N9D4JZVyp7mAgLth/C0iCx5FHKNaX OYEiU7dYt23NFCNxXHCnVntTxrEX4TzaaYFD8choY4WrgarOfwUDcYIkmTNdReNM D/NUcyk34XEcgeLWVhYmbT0EPXch2b4fg2IHlTCpb0niWTiGXYzQislvm4PAOZv4 v/xtoRjGWVQ5SHs4jlFSPWDZGCEjl/Hjiq7533Omb65A0snfDmWvjRfsRQcdDKn6 Myetf5l/sfjd+PvrC9NqpYdr9Ol/52TU -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:37 2025 by rpki-client