$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: 6mioT3Nn9XOrZviysgaVr3sJIz0gvlnmgPj+8bP6OCA= Subject key identifier: DC:21:2C:79:9F:22:C4:F3:04:36:9B:81:88:A0:A1:BE:7B:3A:B1:01 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B02 Signing time: Fri 04 Apr 2025 19:25:00 +0000 Manifest this update: Fri 04 Apr 2025 19:24:59 +0000 Manifest next update: Fri 11 Apr 2025 19:24:59 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: CU6AnKxaXeDCemhEOhmoP0LVSAq+BV+PfDuEDTI6WMY=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837 Validity Not Before: Apr 4 19:24:59 2025 GMT Not After : Apr 11 19:24:59 2025 GMT Subject: CN=67f0320b-b37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:06:97:41:74:13:0b:b8:cd:12:5f:a7:e8: 28:1d:3a:a8:f5:f8:09:90:43:bc:88:82:02:13:07: 54:8a:34:0c:4b:81:4b:6e:f5:ed:fc:3a:24:fe:77: a1:91:ba:55:4c:37:e4:fc:4e:09:b8:47:0d:37:7f: cf:90:2f:d4:50:e3:ae:e7:21:cb:0a:ce:cd:15:08: 03:76:28:6d:29:23:ce:25:61:b1:8d:96:ae:91:2c: 07:97:7b:da:6a:2f:96:74:40:c9:bd:26:f8:2e:de: 96:75:e2:21:40:10:b2:05:19:f4:60:b1:bf:c3:27: cd:1a:ef:d3:79:69:db:dd:82:d0:49:d2:f5:40:d9: 28:44:3e:86:48:4b:dd:d8:91:e9:b1:85:98:40:69: 27:af:b1:cf:c1:76:85:7d:50:9a:d0:59:05:d1:e5: d9:96:75:d3:75:b2:dc:8e:55:69:2f:ef:2a:59:52: 80:0e:50:cc:57:f0:f5:68:ab:3a:40:75:57:93:08: 3c:dd:92:01:dc:0d:c1:19:54:0c:54:6b:fc:bc:d0: 27:42:46:43:68:9b:31:32:b9:c9:31:ad:61:48:19: 69:19:86:d8:46:bf:8b:be:1f:d3:74:67:61:a0:62: fa:c8:f2:ed:73:bf:b1:93:4e:7e:76:1e:f7:94:d0: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:2C:79:9F:22:C4:F3:04:36:9B:81:88:A0:A1:BE:7B:3A:B1:01 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0a:d8:91:5b:46:2a:32:af:cf:43:a1:77:0e:31:45:19:9f: c1:fd:cf:ac:6a:51:1a:8e:64:ba:66:2a:a1:66:34:f7:ab:1f: a8:a7:a9:b2:9e:f1:22:bd:52:b2:9b:61:19:72:2c:f7:2f:a1: 02:1e:ac:75:13:c5:b4:71:a0:f1:c2:8c:01:21:c6:1d:22:fa: 98:e7:d7:bf:a9:40:5a:82:50:aa:1c:f2:d5:af:a5:1c:18:52: b3:3f:f1:af:dd:ed:a3:7a:cf:80:67:21:ed:9f:c5:9e:d6:c8: 97:6b:5a:56:2f:72:6e:ac:88:be:b0:2a:fe:21:69:3f:c5:70: e3:87:25:ed:2a:84:f6:32:12:38:43:02:5b:a1:f4:35:93:7b: f6:26:91:49:d4:e0:91:57:fc:c7:9e:d7:c0:fb:88:fb:dd:69: f2:d8:8a:22:f0:8b:52:5e:0d:39:00:4b:37:31:70:69:ee:ee: 6c:2a:49:38:5c:af:89:99:c9:79:b1:77:58:48:0b:8f:26:55: db:8b:bc:af:65:41:0f:68:da:44:38:a9:eb:85:ea:7f:63:7e: 67:8c:74:bc:2d:b1:6e:4a:7a:bd:5e:75:37:25:7a:eb:d1:8c: 67:85:9e:4a:45:15:d9:5a:71:c4:15:99:e3:ba:a3:81:fc:e1: b9:93:7a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwNDA0MTkyNDU5WhcNMjUwNDExMTkyNDU5WjAYMRYwFAYD VQQDEw02N2YwMzIwYi1iMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZQGl0F0Ewu4zRJfp+goHTqo9fgJkEO8iIICEwdUijQMS4FLbvXt/Dok/neh kbpVTDfk/E4JuEcNN3/PkC/UUOOu5yHLCs7NFQgDdihtKSPOJWGxjZaukSwHl3va ai+WdEDJvSb4Lt6WdeIhQBCyBRn0YLG/wyfNGu/TeWnb3YLQSdL1QNkoRD6GSEvd 2JHpsYWYQGknr7HPwXaFfVCa0FkF0eXZlnXTdbLcjlVpL+8qWVKADlDMV/D1aKs6 QHVXkwg83ZIB3A3BGVQMVGv8vNAnQkZDaJsxMrnJMa1hSBlpGYbYRr+Lvh/TdGdh oGL6yPLtc7+xk05+dh73lNC8OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwhLHmf IsTzBDabgYigob57OrEBMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzCtiRW0YqMq/PQ6F3DjFFGZ/B/c+salEajmS6ZiqhZjT3qx+op6my nvEivVKym2EZciz3L6ECHqx1E8W0caDxwowBIcYdIvqY59e/qUBaglCqHPLVr6Uc GFKzP/Gv3e2jes+AZyHtn8We1siXa1pWL3JurIi+sCr+IWk/xXDjhyXtKoT2MhI4 QwJbofQ1k3v2JpFJ1OCRV/zHntfA+4j73Wny2Ioi8ItSXg05AEs3MXBp7u5sKkk4 XK+Jmcl5sXdYSAuPJlXbi7yvZUEPaNpEOKnrhep/Y35njHS8LbFuSnq9XnU3JXrr 0YxnhZ5KRRXZWnHEFZnjuqOB/OG5k3qC -----END CERTIFICATE-----Generated at Sat Apr 5 21:58:30 2025 by rpki-client