$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: p9EJPaFr6/JVk9JWc9AnDjCqOLDL1mGkjcQ2liSpXls= Subject key identifier: 0A:A6:4D:4F:67:FF:8D:FA:3A:9E:36:44:15:8D:53:45:F0:65:9A:2D Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 6D Signing time: Thu 03 Apr 2025 06:13:23 +0000 Manifest this update: Thu 03 Apr 2025 06:13:23 +0000 Manifest next update: Thu 10 Apr 2025 06:13:23 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: AREYg1Byl3jT8yqI2J1A4q/UHcKXHxHrIYm3YqFA7Y4=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: k8bmIEi5AkEe4xzWalacEnF3qdgyVE7VkZI11nYD+RY=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: rPvzorCtxEUQHBw6HlxY0A29sySWnjRa4667RhmeUc8=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: FsiT3oYazNjnPtPEe7G6GkJ5HTMUOkycbdZ+8LjujNs=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: L5hcVKih/+nBko6kW7js31KvZiJs+q86I/1/tFKfyVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C Validity Not Before: Apr 3 06:13:23 2025 GMT Not After : Apr 10 06:13:23 2025 GMT Subject: CN=67ee2703-ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:28:b9:1f:48:f3:9c:66:ae:76:2f:be:82: 36:5b:70:02:fc:0b:c7:01:3f:66:62:9a:ef:b1:c4: 6f:41:02:98:2f:86:20:46:bf:bf:7f:bd:f3:5a:9d: ee:8e:7d:3c:0a:13:45:d3:48:57:d1:1a:8f:25:a7: 40:1d:76:40:f8:e1:a9:8f:f1:b1:f1:e5:79:58:7d: 47:78:57:48:80:b4:8c:e3:c8:cd:ab:95:45:f8:f5: 39:a9:7c:d1:cb:33:46:ee:93:a9:2a:e0:79:02:44: 97:67:f5:87:ca:ee:cb:58:44:15:87:92:50:1d:c3: 7f:1c:73:88:06:7f:5d:d1:bb:36:8b:fd:69:d9:03: 9f:65:08:0e:e3:fe:99:31:c9:b5:5f:cd:95:c0:a3: 4b:91:87:b6:60:d4:db:96:b7:bd:11:9a:b6:95:b2: 31:4d:33:01:3b:74:fd:39:ee:28:23:c0:ff:ec:b5: c6:e4:7b:32:dc:13:59:00:42:85:fa:55:e4:5d:16: ae:5a:15:b8:1b:fe:f8:52:18:35:08:1c:f4:5d:7e: 12:43:6a:a4:22:23:d8:f2:07:fc:9a:48:f6:a2:9f: 8d:8e:a4:cb:1f:1f:07:cb:99:97:90:39:6b:33:1d: 99:fb:89:c6:95:94:e6:85:01:20:ae:f4:04:29:15: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:4D:4F:67:FF:8D:FA:3A:9E:36:44:15:8D:53:45:F0:65:9A:2D X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:bf:fb:46:bb:e6:1f:f5:22:7a:33:fc:27:5b:e2:4e:59:c3: 14:7d:6a:a3:61:dc:dc:0b:a8:d4:47:d7:7d:5f:48:f1:f0:47: 73:ac:5d:ce:52:12:d6:5f:f2:43:15:3e:5a:41:80:28:8a:2f: d2:2c:e2:e6:85:31:9d:a7:44:f1:49:76:ed:dd:4a:99:2a:09: d1:02:33:3a:88:af:2c:8a:8d:1b:4f:bb:70:06:7f:e9:b0:8c: 68:00:de:19:10:67:78:27:a9:7f:1f:9b:3f:22:e1:c2:45:68: 6f:b5:52:44:4e:ff:12:6f:de:82:a3:d4:a2:fb:4e:60:6a:d4: 75:36:14:59:ce:84:d5:96:8b:98:33:24:67:27:b1:57:11:ae: e8:60:e5:a4:3c:f2:d9:e7:2b:4a:de:ad:b6:a3:27:4a:6a:c7: b9:37:c8:3a:1f:2e:ec:40:64:31:ce:4d:a7:4b:65:08:22:a0: e2:b6:3c:6e:92:aa:07:e9:e7:6b:cf:34:33:a5:8f:3e:6a:bc: 77:97:37:f1:8e:6d:4b:c5:d6:69:cb:6a:2f:5d:b4:bd:71:17: f1:66:90:ba:5f:e6:09:d7:47:6d:65:a2:ce:94:e8:76:63:09: f0:61:32:cc:7d:b9:85:12:ad:9a:9f:7c:ce:08:03:c1:4a:2e: 42:b1:68:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyQzExMC8GA1UEBRMoODE3REQzODAyRjI2RTU3RUNFODI2NUNFODYyNkZDQkI5 QzY0RTlENDAeFw0yNTA0MDMwNjEzMjNaFw0yNTA0MTAwNjEzMjNaMBgxFjAUBgNV BAMTDTY3ZWUyNzAzLWVhOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPEii5H0jznGaudi++gjZbcAL8C8cBP2Zimu+xxG9BApgvhiBGv79/vfNane6O fTwKE0XTSFfRGo8lp0AddkD44amP8bHx5XlYfUd4V0iAtIzjyM2rlUX49TmpfNHL M0buk6kq4HkCRJdn9YfK7stYRBWHklAdw38cc4gGf13RuzaL/WnZA59lCA7j/pkx ybVfzZXAo0uRh7Zg1NuWt70RmraVsjFNMwE7dP057igjwP/stcbkezLcE1kAQoX6 VeRdFq5aFbgb/vhSGDUIHPRdfhJDaqQiI9jyB/yaSPain42OpMsfHwfLmZeQOWsz HZn7icaVlOaFASCu9AQpFaftAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCqZNT2f/ jfo6njZEFY1TRfBlmi0wHwYDVR0jBBgwFoAUgX3TgC8m5X7OgmXOhib8u5xk6dQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTJDL0UyQzA3N0RFNzc2 NjExRUZCNTVFRDI3OUM0RjlBRTAyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1gzVGdDOG01WDdPZ21YT2hpYjh1NXhrNmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTJDL0UyQzA3N0RFNzc2NjExRUZCNTVFRDI3OUM0RjlBRTAyL2dYM1RnQzhtNVg3 T2dtWE9oaWI4dTV4azZkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFC/+0a75h/1Inoz/Cdb4k5ZwxR9aqNh3NwLqNRH131fSPHwR3OsXc5S EtZf8kMVPlpBgCiKL9Is4uaFMZ2nRPFJdu3dSpkqCdECMzqIryyKjRtPu3AGf+mw jGgA3hkQZ3gnqX8fmz8i4cJFaG+1UkRO/xJv3oKj1KL7TmBq1HU2FFnOhNWWi5gz JGcnsVcRruhg5aQ88tnnK0rerbajJ0pqx7k3yDofLuxAZDHOTadLZQgioOK2PG6S qgfp52vPNDOljz5qvHeXN/GObUvF1mnLai9dtL1xF/FmkLpf5gnXR21los6U6HZj CfBhMsx9uYUSrZqffM4IA8FKLkKxaNE= -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:19 2025 by rpki-client