$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: NSy7NKRgkFjDC/pWqRzNcKD5rIix/L92A+SAQCX4gnk= Subject key identifier: 70:50:A3:B4:FD:B6:C6:67:C2:DD:5C:0D:E0:4C:FA:49:AA:08:D3:3E Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0BC8 Signing time: Fri 30 May 2025 19:06:00 +0000 Manifest this update: Fri 30 May 2025 19:06:00 +0000 Manifest next update: Fri 06 Jun 2025 19:06:00 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: AhCbNQENESFo9cw1eH3bk5l9UNfXt4t1IEUr+71mr1I=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: JDQqvRw4ZPlyW1Qs7m60+Ohq51xFppw3tiFaV+jNmJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: May 30 19:06:00 2025 GMT Not After : Jun 6 19:06:00 2025 GMT Subject: CN=683a0198-6be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:15:f4:57:57:3d:c3:4c:fb:5a:dc:fb:1e: 94:18:24:f1:0e:e3:a1:a2:86:02:d8:bb:87:b3:a3: c9:9a:1c:ce:2f:35:65:04:36:5b:c9:98:30:59:ad: 84:b0:a5:a2:5d:90:ef:b6:04:37:f8:73:1e:1a:97: dd:1b:85:e7:80:83:39:61:0f:da:b1:24:93:e8:93: 07:60:10:1e:f6:6b:14:17:72:55:d2:e9:38:09:ed: aa:ab:48:9f:2e:57:29:60:5e:80:90:27:8d:70:1d: e8:06:3c:61:4a:0a:d0:6f:1a:c6:6f:72:f1:02:36: 4c:45:ab:0b:da:37:4c:d2:e3:c5:91:d7:f5:37:e5: 77:1b:6d:fd:fd:a6:18:35:41:f0:e0:07:c5:2f:32: 20:d8:51:1b:b3:c8:dc:0f:c1:c3:f2:3a:d8:21:b5: fd:e0:4f:b8:b7:76:d0:84:fa:dc:32:2e:fa:6f:57: d9:ba:51:ce:6e:30:08:85:54:51:4c:db:1d:b8:f1: df:5c:06:ac:d1:27:61:10:3a:2f:b9:c8:fd:c7:90: 7e:f8:b4:10:dc:bb:63:6a:fb:22:10:29:f9:4e:50: 61:e2:1c:03:76:e4:b1:70:19:84:b8:12:53:c3:45: 4b:33:b4:47:d0:cb:bf:ea:30:89:3d:7e:06:78:b6: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:A3:B4:FD:B6:C6:67:C2:DD:5C:0D:E0:4C:FA:49:AA:08:D3:3E X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:13:75:3b:5d:ee:f6:08:bf:9e:6a:c1:49:33:c1:58:bc: e8:8f:52:b2:e1:f1:74:ed:c0:83:90:c7:64:de:2a:53:da:9d: f1:11:72:e9:38:8b:c2:6b:eb:c2:e3:15:62:35:aa:f2:ba:63: 30:c0:66:22:5f:9a:14:ac:ef:a2:02:0f:9f:19:39:6f:d5:7b: b9:31:10:11:e6:7e:04:62:d7:f7:43:14:3c:66:f1:f3:15:0a: 4c:1c:42:48:25:c6:21:5c:5c:58:5c:27:89:35:22:31:c6:47: 08:b4:2e:7a:fb:c1:fd:37:7f:48:97:ba:e5:1a:45:58:e3:1f: f7:72:1b:93:c6:c6:4e:92:17:59:86:86:54:90:a5:9a:cb:09: 7d:ae:4b:17:fc:06:da:6b:d7:72:85:66:3e:ce:9f:86:69:ca: e3:cf:54:3a:c4:b3:0d:29:75:53:80:fa:23:63:f8:ad:35:cc: dc:db:02:70:8e:de:ef:bd:d4:d4:fb:eb:6a:d6:33:47:12:95: de:2e:17:75:aa:bc:5a:af:cb:6f:ff:47:8b:54:f1:06:e4:78: df:f8:54:b2:0b:b0:19:04:de:b4:17:85:5f:0d:b3:fc:63:b7: e1:44:4c:dd:6a:4e:66:0f:0f:d2:ea:5b:62:c7:10:53:64:9a: 5d:83:05:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUwNTMwMTkwNjAwWhcNMjUwNjA2MTkwNjAwWjAYMRYwFAYD VQQDEw02ODNhMDE5OC02YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMwV9FdXPcNM+1rc+x6UGCTxDuOhooYC2LuHs6PJmhzOLzVlBDZbyZgwWa2E sKWiXZDvtgQ3+HMeGpfdG4XngIM5YQ/asSST6JMHYBAe9msUF3JV0uk4Ce2qq0if LlcpYF6AkCeNcB3oBjxhSgrQbxrGb3LxAjZMRasL2jdM0uPFkdf1N+V3G239/aYY NUHw4AfFLzIg2FEbs8jcD8HD8jrYIbX94E+4t3bQhPrcMi76b1fZulHObjAIhVRR TNsduPHfXAas0SdhEDovucj9x5B++LQQ3LtjavsiECn5TlBh4hwDduSxcBmEuBJT w0VLM7RH0Mu/6jCJPX4GeLb/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBQo7T9 tsZnwt1cDeBM+kmqCNM+MB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy6hN1O13u9gi/nmrBSTPBWLzoj1Ky4fF07cCDkMdk3ipT2p3xEXLp OIvCa+vC4xViNaryumMwwGYiX5oUrO+iAg+fGTlv1Xu5MRAR5n4EYtf3QxQ8ZvHz FQpMHEJIJcYhXFxYXCeJNSIxxkcItC56+8H9N39Il7rlGkVY4x/3chuTxsZOkhdZ hoZUkKWaywl9rksX/Abaa9dyhWY+zp+Gacrjz1Q6xLMNKXVTgPojY/itNczc2wJw jt7vvdTU++tq1jNHEpXeLhd1qrxar8tv/0eLVPEG5Hjf+FSyC7AZBN60F4VfDbP8 Y7fhREzdak5mDw/S6ltixxBTZJpdgwVl -----END CERTIFICATE-----Generated at Sat May 31 17:14:38 2025 by rpki-client