$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft File: GSl33aoJW0B37g12I4Rj8bb0Cu4.mft (raw, json) Hash identifier: Tiy8jgz0ZZ4ozKjEeWsAtaQwwVLeGcHXWvz5lorcrzw= Subject key identifier: 8C:E3:56:2C:60:5E:7B:C1:43:AC:A8:61:FC:99:0B:AA:BC:A5:4A:33 Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft Manifest number: 03A3 Signing time: Sun 27 Apr 2025 00:23:50 +0000 Manifest this update: Sun 27 Apr 2025 00:23:49 +0000 Manifest next update: Sun 04 May 2025 00:23:49 +0000 Files and hashes: 1: GSl33aoJW0B37g12I4Rj8bb0Cu4.crl (hash: 0qUS2Q8XYEOvfXVpvOD96+uaNyCPaT7fK+xcXuy97Hs=) 2: AEFCCA501F5A11F0BA7E6961C4F9AE02.roa (hash: oAqMSF81/AVYaU8nGd+cBMsrnw20XyD/T/zdIoEB4NE=) 3: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (hash: uVo2rPhsS7W1KbzxX340wlAGRoyErXUypsSK5B5R8HQ=) 4: AFDE92321F5A11F0BA7E6961C4F9AE02.roa (hash: S2zfaKcticTwAxwJXdMxgXbdbp4SN51y6QSWO83OIuc=) 5: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (hash: 7DU3GXxB2biRDfFfxqVKJQEvwzXZf1dP2MF5wRULxe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Apr 27 00:23:49 2025 GMT Not After : May 4 00:23:49 2025 GMT Subject: CN=680d7915-18da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:e7:58:01:56:bc:32:64:81:8d:9d:bf:04: 71:0e:4a:b5:6a:fd:25:63:e3:c7:df:c6:23:89:7e: d1:de:81:db:60:52:ed:3e:69:5d:d8:20:2d:90:03: cf:94:9b:dc:56:c3:b5:25:63:e2:d5:08:09:d8:a7: 8a:8b:16:53:99:c8:2b:3f:d0:05:4e:97:e9:a5:dd: 47:dc:81:e1:01:63:8b:a7:3a:1a:1b:a5:06:eb:51: 82:28:d4:4e:de:7f:42:9c:e8:3f:cb:06:9c:d9:81: 12:be:a9:a6:38:de:d2:ba:49:cd:d1:ea:c9:a9:1e: 15:32:9b:7e:0f:4f:a6:cc:e3:59:00:18:67:f6:d0: e7:b3:56:aa:b0:57:e2:18:ce:ce:3e:0c:0a:40:2c: 8e:71:5e:0f:b2:45:47:4c:7d:ab:a4:03:2c:b4:6e: eb:52:8e:de:be:db:17:91:34:04:bd:82:9e:c2:19: ab:c7:0c:84:fb:76:06:67:ab:b8:90:55:da:62:dd: 59:70:6b:3b:b9:10:3f:60:fe:f2:33:e8:19:23:67: 8a:71:ef:5c:be:b0:d0:7f:96:58:19:4f:05:fb:c1: 9e:53:e4:ce:63:11:c8:35:ac:4e:d2:35:9a:d6:90: 63:20:fa:94:be:e6:39:10:f1:35:dc:b8:d1:fc:51: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:56:2C:60:5E:7B:C1:43:AC:A8:61:FC:99:0B:AA:BC:A5:4A:33 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:02:37:68:28:7d:0e:f8:4b:f9:09:de:0d:30:aa:61:f2:74: e6:07:0b:02:c1:c7:16:cc:4d:a3:0c:68:a3:47:d8:e3:03:bf: 47:cc:19:d9:f0:30:22:77:af:21:5f:85:2e:c0:9f:52:b1:c0: d9:a8:62:66:2f:24:92:8e:9d:59:17:2b:c8:f4:b1:a5:ce:03: 6a:4a:a4:f2:f9:72:df:60:b7:62:1a:70:6c:85:34:01:a5:a9: 58:c8:0c:e4:c9:10:b8:c7:e1:df:2a:06:25:d7:c3:2d:6f:2e: de:83:46:4f:a3:c4:b6:0f:22:c5:64:b0:94:fc:fa:3e:c6:e5: 4c:4d:29:fb:0f:81:ae:be:de:43:1b:58:f3:52:b1:c6:1e:ac: e3:e4:fd:23:4c:d1:de:63:12:57:17:6d:77:33:cc:a4:cc:11: 86:2f:78:bd:3c:56:b9:9b:a8:ae:9d:64:78:2d:09:2d:33:01: ce:da:4b:c7:b5:98:43:f6:9e:99:8f:a7:1e:a8:97:73:d4:61: cf:ef:06:24:1f:ab:00:fc:63:99:3e:45:c1:af:66:9d:bc:16: 04:b1:59:d8:7e:34:84:91:9b:da:b7:32:15:86:8c:c9:1b:0b: 94:ef:50:3d:f0:17:a6:c1:d2:d1:e1:ca:02:a1:ad:a2:8a:74: 04:2e:be:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUwNDI3MDAyMzQ5WhcNMjUwNTA0MDAyMzQ5WjAYMRYwFAYD VQQDEw02ODBkNzkxNS0xOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jPnWAFWvDJkgY2dvwRxDkq1av0lY+PH38YjiX7R3oHbYFLtPmld2CAtkAPP lJvcVsO1JWPi1QgJ2KeKixZTmcgrP9AFTpfppd1H3IHhAWOLpzoaG6UG61GCKNRO 3n9CnOg/ywac2YESvqmmON7SuknN0erJqR4VMpt+D0+mzONZABhn9tDns1aqsFfi GM7OPgwKQCyOcV4PskVHTH2rpAMstG7rUo7evtsXkTQEvYKewhmrxwyE+3YGZ6u4 kFXaYt1ZcGs7uRA/YP7yM+gZI2eKce9cvrDQf5ZYGU8F+8GeU+TOYxHINaxO0jWa 1pBjIPqUvuY5EPE13LjR/FELmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzjVixg XnvBQ6yoYfyZC6q8pUozMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcw QjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRAjdoKH0O+Ev5Cd4NMKph8nTmBwsCwccWzE2jDGijR9jjA79HzBnZ 8DAid68hX4UuwJ9SscDZqGJmLySSjp1ZFyvI9LGlzgNqSqTy+XLfYLdiGnBshTQB palYyAzkyRC4x+HfKgYl18Mtby7eg0ZPo8S2DyLFZLCU/Po+xuVMTSn7D4Guvt5D G1jzUrHGHqzj5P0jTNHeYxJXF213M8ykzBGGL3i9PFa5m6iunWR4LQktMwHO2kvH tZhD9p6Zj6ceqJdz1GHP7wYkH6sA/GOZPkXBr2advBYEsVnYfjSEkZvatzIVhozJ GwuU71A98BemwdLR4coCoa2iinQELr7K -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net