$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: Ojy2O1nLjA55Wywu9fmgZDad8MVXDm9ERkiWTKLrj0A= Subject key identifier: 76:15:DC:C8:84:D6:98:40:EC:5B:3F:A8:C2:56:45:D8:4E:B2:D6:CE Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: BC Signing time: Wed 11 Jun 2025 05:16:22 +0000 Manifest this update: Wed 11 Jun 2025 05:16:22 +0000 Manifest next update: Wed 18 Jun 2025 05:16:22 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: fhYniAMKyj0ulfJJVebIgHNKPBICJ+TrcyAJmowxNEc=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jun 11 05:16:22 2025 GMT Not After : Jun 18 05:16:22 2025 GMT Subject: CN=68491126-6f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:ec:76:8d:47:98:80:02:5b:08:3e:03:fb: 77:8d:df:fc:17:79:eb:41:14:7e:d5:2a:51:a8:5e: 81:f3:92:71:16:3a:b3:85:84:75:87:bc:40:8e:a1: 27:a4:75:10:27:4f:50:cd:74:ff:af:c1:3a:cb:4f: 7b:46:a3:57:9f:51:6d:03:f3:51:bb:68:5a:f7:53: ee:30:50:94:44:ca:ce:95:98:ad:0d:61:ae:c4:2a: 12:93:43:f7:f4:e2:5c:f1:d9:ac:7d:e7:ce:99:e3: d3:a8:71:d4:fd:a4:35:13:8c:b4:6d:69:f4:ea:3f: 7f:30:2c:99:e1:47:7e:f0:af:17:8c:4e:e6:80:9d: 20:e9:2e:15:4c:0c:62:c7:b9:9f:0e:64:42:0e:eb: 0c:ae:2a:e1:31:dd:05:38:30:9c:6b:e5:a1:38:85: c2:10:75:54:49:1f:fd:c3:83:b0:9f:4e:4d:89:38: 7e:cd:0b:36:58:67:8e:a7:1e:a7:ec:31:c2:1b:6f: 15:bb:4e:5c:7f:14:5b:9e:22:a2:a8:ad:c6:82:84: 8d:a9:08:65:e0:0b:36:df:32:01:81:f6:1a:de:01: f3:94:cb:3e:db:10:f5:70:44:99:cb:cb:b4:84:f1: 12:7d:b8:1f:29:44:71:c0:42:76:76:80:b5:c7:bd: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:15:DC:C8:84:D6:98:40:EC:5B:3F:A8:C2:56:45:D8:4E:B2:D6:CE X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2b:18:ec:84:cd:f2:35:3e:64:75:ac:87:8b:30:b0:0c:25: 3e:af:15:1c:95:d4:3b:46:2c:b8:1e:fe:2d:20:ac:75:1e:61: 12:e6:61:55:a9:70:f1:4a:57:b1:dd:01:2f:70:c1:02:81:d8: e7:e5:3e:2a:01:a4:b5:90:83:8c:81:66:08:0a:05:4c:6f:d2: 60:a7:61:a9:59:2b:86:03:7e:34:9b:c4:7d:20:d8:0e:8e:20: b3:50:f0:64:35:f1:dc:8d:a6:6f:b0:d9:14:0c:74:db:36:72: b4:ef:d1:9f:b5:24:a2:47:fa:94:d9:5f:ec:92:05:ed:ef:90: 0f:10:18:06:30:51:a6:a9:be:5b:8e:4d:5d:8e:d9:a7:28:71: 6b:85:50:6d:46:de:66:39:43:84:8e:aa:c1:18:2e:e4:53:18: 27:ed:c1:0c:e0:f7:a2:28:c8:59:89:e0:09:fc:62:5c:b8:3c: 48:a4:ba:62:2c:3d:f3:fb:72:44:de:75:fc:56:79:9d:5a:23: d8:40:9f:51:b5:e4:10:8b:98:1f:6b:b0:e5:3f:9d:83:45:83: 76:56:1a:3a:8a:19:93:20:e6:b3:8f:d6:2f:8e:f3:60:8f:7d: fa:6f:93:b8:14:67:91:35:08:34:04:c8:2b:c8:12:76:25:70: 39:d5:b7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjUwNjExMDUxNjIyWhcNMjUwNjE4MDUxNjIyWjAYMRYwFAYD VQQDEw02ODQ5MTEyNi02ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQrsdo1HmIACWwg+A/t3jd/8F3nrQRR+1SpRqF6B85JxFjqzhYR1h7xAjqEn pHUQJ09QzXT/r8E6y097RqNXn1FtA/NRu2ha91PuMFCURMrOlZitDWGuxCoSk0P3 9OJc8dmsfefOmePTqHHU/aQ1E4y0bWn06j9/MCyZ4Ud+8K8XjE7mgJ0g6S4VTAxi x7mfDmRCDusMrirhMd0FODCca+WhOIXCEHVUSR/9w4Own05NiTh+zQs2WGeOpx6n 7DHCG28Vu05cfxRbniKiqK3GgoSNqQhl4As23zIBgfYa3gHzlMs+2xD1cESZy8u0 hPESfbgfKURxwEJ2doC1x71KrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYV3MiE 1phA7Fs/qMJWRdhOstbOMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+KxjshM3yNT5kdayHizCwDCU+rxUcldQ7Riy4Hv4tIKx1HmES5mFV qXDxSlex3QEvcMECgdjn5T4qAaS1kIOMgWYICgVMb9Jgp2GpWSuGA340m8R9INgO jiCzUPBkNfHcjaZvsNkUDHTbNnK079GftSSiR/qU2V/skgXt75APEBgGMFGmqb5b jk1djtmnKHFrhVBtRt5mOUOEjqrBGC7kUxgn7cEM4PeiKMhZieAJ/GJcuDxIpLpi LD3z+3JE3nX8VnmdWiPYQJ9RteQQi5gfa7DlP52DRYN2Vho6ihmTIOazj9YvjvNg j336b5O4FGeRNQg0BMgryBJ2JXA51bc/ -----END CERTIFICATE-----Generated at Thu Jun 12 04:04:52 2025 by rpki-client