$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: tPvYy8WgyX2ryjE8cCchIYLCPt+MhPuQmPhVEfoQxDY= Subject key identifier: 6A:59:A8:D8:8D:3F:C6:59:99:A6:1A:64:03:F5:A5:0B:82:98:8F:67 Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 0156 Signing time: Sat 31 May 2025 03:50:30 +0000 Manifest this update: Sat 31 May 2025 03:50:29 +0000 Manifest next update: Sat 07 Jun 2025 03:50:29 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: znV5HNPJuBo1qyAbFJf59rfmErwMLD24XQvViFUQ5LQ=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: May 31 03:50:29 2025 GMT Not After : Jun 7 03:50:29 2025 GMT Subject: CN=683a7c85-8c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:ec:60:01:c9:4c:8d:04:04:3c:37:07:a3: 7f:ad:2f:6b:4d:29:48:26:bc:52:94:ee:b1:b9:be: d1:6e:e7:d3:3a:08:c4:2f:83:a1:ac:3d:32:c4:60: 16:35:7e:41:18:83:0a:dd:df:99:83:3f:31:56:3c: 43:b6:7b:4d:73:94:ae:9b:ba:73:76:3a:2d:10:55: fd:3e:88:54:60:26:5e:55:3a:7d:62:90:81:13:69: c3:17:a4:91:72:7f:d8:5b:5c:c0:2b:30:4f:2e:88: a0:f8:57:0d:b4:77:3c:51:cb:06:c5:74:b2:97:ab: 50:27:49:39:08:fc:c9:1d:f0:79:57:73:8f:1a:3f: 2e:f5:7c:c1:4d:22:42:58:b9:a7:5c:f9:d2:b7:af: 01:f7:73:7e:25:44:e1:f9:68:40:58:40:44:b1:25: 47:56:3c:dd:73:ef:57:3c:ca:0d:03:c8:3a:f2:15: 59:81:68:eb:29:06:8c:c8:1d:1e:0f:a5:62:84:5c: c7:a6:aa:df:1d:9b:ce:da:64:bf:83:0c:c8:18:8e: c6:f1:5e:83:fa:98:02:13:4a:2a:fb:fa:22:3b:d5: 06:ce:12:c8:db:6c:ac:b7:8f:1d:c1:f8:f8:cf:db: 9f:82:7e:ac:7e:5e:19:ed:95:0f:51:fe:a8:50:6e: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:59:A8:D8:8D:3F:C6:59:99:A6:1A:64:03:F5:A5:0B:82:98:8F:67 X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:57:c2:e6:e0:33:21:a0:99:32:c8:56:3f:90:4b:39:c1:2d: 82:19:2b:aa:f4:8a:a4:ff:00:64:fd:6f:0b:32:cf:ed:00:d4: 8d:65:bd:11:a4:2e:4c:14:c8:8b:32:1e:e7:8e:b4:f5:4a:17: 86:2e:29:26:34:0d:f2:05:30:4c:be:84:79:da:c5:43:aa:e1: 8c:85:09:5a:3a:16:ce:4e:59:cd:82:0c:77:c7:19:ec:ef:8c: b3:da:bc:98:24:39:6b:b4:7f:a6:76:9d:63:d1:08:9a:fb:6c: 72:21:0c:4b:f9:44:df:5d:19:08:74:ee:1a:31:f2:07:8f:68: 03:4a:20:f0:04:24:16:15:75:38:a1:ae:b1:26:09:8c:a0:3f: 2b:4a:a8:4e:6e:7c:c4:83:29:f5:2b:08:a8:b6:55:e9:4b:43: 0e:7f:43:1f:13:01:b6:72:34:93:b0:e2:d2:38:66:7a:4f:be: b1:8c:14:00:66:86:7b:7e:68:73:07:4c:91:a4:3a:04:2e:56: 33:44:84:24:83:51:cf:e4:7a:2d:df:2f:e5:16:aa:51:aa:97: b0:18:57:2f:a4:f9:28:75:11:9a:37:c6:7a:80:5b:e2:74:88: 42:25:d2:9c:21:ca:17:45:bc:07:c1:19:64:a6:13:d6:aa:ec: cd:97:0f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUwNTMxMDM1MDI5WhcNMjUwNjA3MDM1MDI5WjAYMRYwFAYD VQQDEw02ODNhN2M4NS04YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt3sYAHJTI0EBDw3B6N/rS9rTSlIJrxSlO6xub7RbufTOgjEL4OhrD0yxGAW NX5BGIMK3d+Zgz8xVjxDtntNc5Sum7pzdjotEFX9PohUYCZeVTp9YpCBE2nDF6SR cn/YW1zAKzBPLoig+FcNtHc8UcsGxXSyl6tQJ0k5CPzJHfB5V3OPGj8u9XzBTSJC WLmnXPnSt68B93N+JUTh+WhAWEBEsSVHVjzdc+9XPMoNA8g68hVZgWjrKQaMyB0e D6VihFzHpqrfHZvO2mS/gwzIGI7G8V6D+pgCE0oq+/oiO9UGzhLI22yst48dwfj4 z9ufgn6sfl4Z7ZUPUf6oUG7KPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpZqNiN P8ZZmaYaZAP1pQuCmI9nMB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEV8Lm4DMhoJkyyFY/kEs5wS2CGSuq9Iqk/wBk/W8LMs/tANSNZb0R pC5MFMiLMh7njrT1SheGLikmNA3yBTBMvoR52sVDquGMhQlaOhbOTlnNggx3xxns 74yz2ryYJDlrtH+mdp1j0Qia+2xyIQxL+UTfXRkIdO4aMfIHj2gDSiDwBCQWFXU4 oa6xJgmMoD8rSqhObnzEgyn1KwiotlXpS0MOf0MfEwG2cjSTsOLSOGZ6T76xjBQA ZoZ7fmhzB0yRpDoELlYzRIQkg1HP5Hot3y/lFqpRqpewGFcvpPkodRGaN8Z6gFvi dIhCJdKcIcoXRbwHwRlkphPWquzNlw9c -----END CERTIFICATE-----Generated at Sat May 31 16:55:02 2025 by rpki-client