$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: S0NH35cxVUIPbKKOSWpH8RTg3+uPkHZpyTxusy4dXLI= Subject key identifier: FC:13:81:56:CB:4C:F6:2F:D8:CD:FE:19:6D:79:96:01:3A:26:3D:FA Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 3572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 34DD Signing time: Fri 30 May 2025 14:45:57 +0000 Manifest this update: Fri 30 May 2025 14:45:56 +0000 Manifest next update: Fri 06 Jun 2025 14:45:56 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: nfuaboFgOAcok9Qt6eiB9HJjMhzCBlsTJDprdJqQrkg=) 2: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: jjJ8qPnS0/nICN56yp6qO0H5skT5XCL/0DlZKxMJ70k=) 3: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: hsYOwOWg5RWqGecDOMbtdo5wShwG/Gl7BoVP0vZ6bGc=) 4: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kMC2WeYC4MWKHd2Kh8Eq/aNV3X4hXQ+t8sr83adHojY=) 5: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: wLtvBH1ixy3w8HEFDYVnVxsE51AunrDxg1Sv+UfH0y8=) 6: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: ZJ7mBIfK6kg44ULz9lZ+nGdvGWEwkZ1i6idGhEH1ny8=) 7: 29F5CB12FB5411ED914D5C39C4F9AE02.roa (hash: kLMHUaXxDc9JSr3uCUVN9uok6cTqtVMvyzIAoodsl5w=) 8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: 7IUX8R8tCZTwRimEawOsuuQRkKntzFGSWJJzMjhRIhw=) 9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: t2VqhrZAW3k4gdKbAI0o6ca/tb/0ybdt22kYPc3tp54=) 10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: nKUEIfIPimBIzQtFV8VjV5K70GmMdKase3l7FgyeD2c=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: itcw/LzViA9/AL4k7aRJEFd+ng6R/f3GHawU3mFJnvU=) 12: 9F5180204DE611ED852CCB87C4F9AE02.roa (hash: FXKeIuPsz0cxq/rV/xoooCu4bWy/R4+M5W25tXkYyCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13682 (0x3572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: May 30 14:45:56 2025 GMT Not After : Jun 6 14:45:56 2025 GMT Subject: CN=6839c4a4-6626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:bd:e2:6c:f3:9a:04:c2:6f:ec:0f:0f:ff: e6:dc:21:f8:15:a0:3c:c5:a6:4c:4f:33:ce:1e:5b: aa:92:56:88:99:0c:dc:f4:4e:2b:90:1a:51:f1:a3: 56:51:9f:cd:b1:ba:2e:3d:bd:eb:55:b5:2c:5e:41: ba:d6:9d:cb:1e:1d:8d:5f:a2:68:1e:46:10:05:75: 21:93:3e:bd:3d:9d:42:72:4b:64:38:bd:5b:0f:7a: 00:c5:53:64:58:48:3f:6a:97:ff:09:2e:08:93:ad: 0d:af:4b:a2:0f:c4:4c:13:c1:70:09:c9:b7:b2:96: 03:4b:b0:d5:7c:59:f6:b4:8f:46:45:0a:f8:d0:bf: ef:f6:24:e5:1e:3a:d3:80:2d:29:c5:1d:49:b0:e4: 6d:6d:a4:cd:a2:36:a2:c4:4f:cc:d4:4b:40:00:e7: 59:7e:12:aa:06:59:86:bd:47:ae:19:a7:70:e1:a6: be:70:1f:fc:43:5d:34:0c:1e:bc:59:b7:5d:79:a4: 7e:33:6a:38:fc:b9:f5:c6:41:90:2c:a0:2c:d6:4f: f3:9e:43:08:16:85:07:f0:cb:00:60:01:15:90:12: 81:de:80:93:74:d1:9c:99:41:91:ee:55:66:a8:d0: 0a:53:c0:7b:3a:fa:00:14:fd:8d:42:e4:ec:66:87: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:81:56:CB:4C:F6:2F:D8:CD:FE:19:6D:79:96:01:3A:26:3D:FA X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:94:91:18:0d:05:66:62:a1:8b:e2:fa:d0:df:52:4c:eb:50: 39:da:1d:cc:66:1a:be:d4:67:ad:31:e7:30:d8:f8:7a:40:fe: 3e:0b:eb:4e:b0:ef:70:be:11:c0:00:cc:df:b1:b7:3a:0f:d9: e6:5a:07:01:94:b4:3b:7d:55:af:fe:d1:9a:e2:0e:66:c1:c1: 64:63:bd:31:3f:36:36:29:73:c2:c6:1a:06:c8:c4:25:76:0a: 1d:47:cf:5c:2a:a0:5d:25:af:1e:15:da:fa:50:5f:f6:a4:b3: 7c:57:f1:e8:e4:76:78:dc:d0:aa:60:51:89:86:d1:9a:0b:86: a5:4b:70:89:e1:a6:c9:01:09:e2:2e:be:6d:f5:b7:c6:ce:c6: 9f:96:66:a1:97:8b:73:a6:ca:40:d6:c5:53:88:50:59:67:76: c2:e9:d7:2e:9d:15:cf:85:8a:d2:00:60:04:cc:35:b4:21:76: 72:1f:eb:6d:fa:f8:a8:8b:0d:e9:ec:8c:14:52:cf:19:de:43: 07:fd:27:1e:2a:c9:02:d6:18:1f:12:3a:98:f2:01:ce:d2:45: 30:26:1e:60:85:d5:63:84:07:29:fc:d8:65:6e:ad:94:f1:c1: 07:26:ba:fb:11:08:93:60:a4:aa:48:c6:6e:e9:56:de:36:75: 34:23:bc:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNTMwMTQ0NTU2WhcNMjUwNjA2MTQ0NTU2WjAYMRYwFAYD VQQDEw02ODM5YzRhNC02NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNO94mzzmgTCb+wPD//m3CH4FaA8xaZMTzPOHluqklaImQzc9E4rkBpR8aNW UZ/NsbouPb3rVbUsXkG61p3LHh2NX6JoHkYQBXUhkz69PZ1CcktkOL1bD3oAxVNk WEg/apf/CS4Ik60Nr0uiD8RME8FwCcm3spYDS7DVfFn2tI9GRQr40L/v9iTlHjrT gC0pxR1JsORtbaTNojaixE/M1EtAAOdZfhKqBlmGvUeuGadw4aa+cB/8Q100DB68 WbddeaR+M2o4/Ln1xkGQLKAs1k/znkMIFoUH8MsAYAEVkBKB3oCTdNGcmUGR7lVm qNAKU8B7OvoAFP2NQuTsZoe+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwTgVbL TPYv2M3+GW15lgE6Jj36MB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPlJEYDQVmYqGL4vrQ31JM61A52h3MZhq+1GetMecw2Ph6QP4+C+tO sO9wvhHAAMzfsbc6D9nmWgcBlLQ7fVWv/tGa4g5mwcFkY70xPzY2KXPCxhoGyMQl dgodR89cKqBdJa8eFdr6UF/2pLN8V/Ho5HZ43NCqYFGJhtGaC4alS3CJ4abJAQni Lr5t9bfGzsaflmahl4tzpspA1sVTiFBZZ3bC6dcunRXPhYrSAGAEzDW0IXZyH+tt +vioiw3p7IwUUs8Z3kMH/SceKskC1hgfEjqY8gHO0kUwJh5ghdVjhAcp/Nhlbq2U 8cEHJrr7EQiTYKSqSMZu6VbeNnU0I7yC -----END CERTIFICATE-----Generated at Sat May 31 17:08:54 2025 by rpki-client