$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: dKOv9NTbzZy6ZJ0KLUmlnAGnvFX17tsZFXIftOQ4FzU= Subject key identifier: 1D:C0:8B:64:39:12:8E:C1:55:8F:C2:90:D0:67:29:9F:D8:A6:C8:50 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 1026 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 101E Signing time: Sun 08 Jun 2025 17:19:07 +0000 Manifest this update: Sun 08 Jun 2025 17:19:06 +0000 Manifest next update: Sun 15 Jun 2025 17:19:06 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: fHyWCq7OeQJ7iLj5Tw6rM6nrtuQraen5kplaJouiY1A=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: C3t+NehZCmSbxSRABiEsj0jBSfoJdT1ufKsC9pvYusY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4134 (0x1026) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Jun 8 17:19:06 2025 GMT Not After : Jun 15 17:19:06 2025 GMT Subject: CN=6845c60a-bf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:bf:9f:f6:75:65:6d:10:fb:cb:a8:75:4a: 90:21:c1:58:e2:c3:e3:54:b3:77:da:30:5d:88:8d: bc:6f:6e:87:97:fd:f1:45:7e:e0:10:47:36:07:b9: 0f:a0:f3:c2:86:bf:0b:63:68:21:bf:cd:bf:f5:a9: e0:41:e2:85:6b:89:74:7b:e0:cf:1e:c3:45:1f:85: 8c:eb:a9:ff:14:57:7e:cf:c7:16:47:d7:d4:ef:55: 5d:04:d9:de:d3:97:dd:95:5b:41:97:88:f1:e9:31: 9e:e7:90:7a:e5:dc:7a:d0:5d:78:df:c3:15:70:b9: 65:79:20:c0:41:c7:d0:58:ff:14:c7:ab:77:9e:a9: 5d:d5:c4:37:c5:6a:7d:b5:d0:93:80:cd:11:b4:ac: 8c:01:a3:ad:3f:49:68:e7:29:6f:ef:af:b6:4d:c2: 43:2e:bb:a2:3e:3c:63:dc:90:c4:d6:74:69:1b:bd: 69:2c:14:c5:ef:f8:f2:58:d7:7b:fc:cf:e8:3f:a7: b6:3e:65:cf:d3:12:ba:a7:25:0f:2f:a4:f8:76:84: ed:4a:90:29:73:07:18:a9:ef:bf:d2:e9:46:ad:ba: e2:58:d4:1c:4b:3c:9d:d4:4a:79:89:7e:10:f0:d1: 75:d0:6c:c4:8a:99:31:bf:b8:f0:5e:56:01:4e:21: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:8B:64:39:12:8E:C1:55:8F:C2:90:D0:67:29:9F:D8:A6:C8:50 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d5:4e:cc:fe:ca:14:21:41:d9:ca:20:28:e4:4a:6c:b0:cd: 43:0d:78:e8:71:c9:68:d9:cd:cb:a1:0a:2a:23:38:77:50:10: 9f:8c:a3:ae:1a:fc:d9:2a:1a:cb:5d:a1:06:0a:ab:02:ac:7a: 60:69:8d:76:62:01:17:c7:c4:75:fe:9d:37:40:de:ab:9d:c6: ab:c6:38:4d:1e:c3:22:d6:64:7e:84:54:bf:24:12:01:ea:6a: 5f:ac:66:8b:0f:2b:65:30:d3:97:db:8c:e1:e5:4b:98:38:16: a3:e4:fe:1a:7f:e3:27:fc:67:9e:35:09:95:cf:2c:21:c8:2f: 3b:ad:3d:d9:ff:e3:d9:78:5b:00:73:53:4a:2f:dd:46:7a:45: a1:72:b9:5d:33:ec:d5:f9:0b:7f:71:5f:ce:4a:c6:8a:e4:91: b2:79:9b:6e:05:1d:4c:7f:78:7a:aa:1e:c5:a3:da:f8:19:e9: 80:28:7d:28:12:9c:2b:3e:1d:18:35:ba:77:f3:c4:f4:8f:e2: 6d:43:49:4f:d2:23:e1:c5:e8:4a:f1:1c:74:04:97:50:a4:cc: 5b:b8:c0:49:8a:bb:8b:09:f9:3d:e6:47:89:d6:5c:da:96:fb: aa:8b:59:c0:3d:71:fb:28:cc:38:3c:92:77:0f:cf:ff:4b:4b: 15:a5:c2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUwNjA4MTcxOTA2WhcNMjUwNjE1MTcxOTA2WjAYMRYwFAYD VQQDEw02ODQ1YzYwYS1iZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgC/n/Z1ZW0Q+8uodUqQIcFY4sPjVLN32jBdiI28b26Hl/3xRX7gEEc2B7kP oPPChr8LY2ghv82/9angQeKFa4l0e+DPHsNFH4WM66n/FFd+z8cWR9fU71VdBNne 05fdlVtBl4jx6TGe55B65dx60F1438MVcLlleSDAQcfQWP8Ux6t3nqld1cQ3xWp9 tdCTgM0RtKyMAaOtP0lo5ylv76+2TcJDLruiPjxj3JDE1nRpG71pLBTF7/jyWNd7 /M/oP6e2PmXP0xK6pyUPL6T4doTtSpApcwcYqe+/0ulGrbriWNQcSzyd1Ep5iX4Q 8NF10GzEipkxv7jwXlYBTiFGQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3Ai2Q5 Eo7BVY/CkNBnKZ/YpshQMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc1U7M/soUIUHZyiAo5EpssM1DDXjocclo2c3LoQoqIzh3UBCfjKOu GvzZKhrLXaEGCqsCrHpgaY12YgEXx8R1/p03QN6rncarxjhNHsMi1mR+hFS/JBIB 6mpfrGaLDytlMNOX24zh5UuYOBaj5P4af+Mn/GeeNQmVzywhyC87rT3Z/+PZeFsA c1NKL91GekWhcrldM+zV+Qt/cV/OSsaK5JGyeZtuBR1Mf3h6qh7Fo9r4GemAKH0o EpwrPh0YNbp388T0j+JtQ0lP0iPhxehK8Rx0BJdQpMxbuMBJiruLCfk95keJ1lza lvuqi1nAPXH7KMw4PJJ3D8//S0sVpcK/ -----END CERTIFICATE-----Generated at Sun Jun 8 21:36:00 2025 by rpki-client