$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: 1njfa6To6ims8r1vjvyYzb8w0+XvEz8AJKA1C2got6Q= Subject key identifier: 09:1C:6D:18:73:A9:81:F5:38:49:43:8B:96:84:E7:0B:5A:D5:DA:89 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D07 Signing time: Fri 30 May 2025 18:16:41 +0000 Manifest this update: Fri 30 May 2025 18:16:39 +0000 Manifest next update: Fri 06 Jun 2025 18:16:39 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: nEy4jyyPqPL4bOCGXYCa248B6xBjUEzB4e9odVasoys=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: A3euC+JMbFaWVx5aIIYMhJy2o8x3eQCdnzPijIO/OPI=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: /lCYyr/ggNz4m2hSHph8iFrUwvAmVOifZgcsV4MIeXY=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: dYlMryTZgDYlMwbzeqzaAmjgFNBL4klqki3/QbfzqsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: May 30 18:16:39 2025 GMT Not After : Jun 6 18:16:39 2025 GMT Subject: CN=6839f608-3f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:03:fd:23:2a:c1:38:00:4b:ec:15:c4:f6: cf:b3:15:6d:b4:bf:fd:ca:1f:c0:87:d1:4d:98:a0: c4:3c:21:ba:ad:70:70:b8:6c:89:0a:a2:bc:42:66: 89:15:69:47:d9:00:20:5e:88:bf:bc:91:13:1e:aa: c6:e5:c8:9b:61:fd:6d:1c:26:82:eb:b8:ec:3a:63: b0:86:bf:2a:f9:98:9c:3d:8d:e0:b1:91:c9:22:26: 47:7e:02:ae:ff:7f:5d:a3:47:a5:01:84:47:63:f9: 39:07:05:5f:44:06:d9:88:7a:2f:14:ea:ac:1e:4c: ae:d7:a5:07:12:94:8d:4f:60:27:87:ad:87:62:56: de:33:4d:e9:7e:3f:1f:e4:06:31:23:d9:0c:a0:a1: d9:27:13:f6:35:ec:34:73:9d:9d:33:50:49:ba:53: 28:0e:eb:55:a9:60:bf:32:18:5e:76:ab:8b:f4:ac: df:f1:c8:d5:3a:b5:2d:18:e9:97:12:ee:e5:ba:dc: 0e:26:8b:82:f6:11:67:d2:62:35:0b:b6:91:77:79: 9b:4f:93:3b:be:84:a2:d8:54:84:e1:d7:1f:bc:07: a3:74:5f:a6:b7:6d:86:28:6e:79:eb:a5:8b:23:70: 18:22:64:d3:21:0e:70:f9:fb:2e:e5:a2:25:11:54: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1C:6D:18:73:A9:81:F5:38:49:43:8B:96:84:E7:0B:5A:D5:DA:89 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:62:0f:75:ba:37:0b:ea:70:4c:5f:9b:bd:57:2c:05:ff:96: 88:0f:37:57:61:78:15:fb:6e:fe:42:4d:20:d3:ad:cc:d8:59: fe:f1:ef:6d:6a:60:b1:15:97:03:c6:95:34:7c:03:fc:83:21: 22:ff:4b:27:48:90:3d:36:bd:63:d6:6f:a6:32:c8:ec:9d:6f: be:9b:4b:86:69:3c:ad:f0:a8:47:8b:56:b5:f2:73:c8:0d:0d: ed:40:b6:da:ca:f1:05:6e:40:3c:f3:17:c6:86:71:9d:af:02: ff:03:01:50:20:8c:de:e5:cf:5e:b0:79:18:84:18:4f:49:2a: ee:f2:d2:67:8e:2f:2f:fc:14:a6:a4:e6:dc:d0:18:bf:bf:1f: 96:38:27:db:ca:5e:cd:81:0c:56:41:cd:34:ae:63:64:fc:6a: 3e:c3:4d:02:f8:ba:a1:22:3c:a5:2b:20:8e:36:47:48:be:ae: 59:2c:fe:af:91:a0:57:54:57:2e:56:b6:09:49:a9:0e:02:de: 8a:8a:37:67:38:cf:de:7d:84:51:63:0f:17:e5:d6:4d:69:ec: df:ec:74:d2:d5:02:a7:59:b5:7d:36:a4:fb:6f:4b:32:0d:5d: 4e:5d:b6:da:df:96:c5:7a:64:b8:2b:70:6a:f1:c0:d7:e2:df: 01:32:81:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNTMwMTgxNjM5WhcNMjUwNjA2MTgxNjM5WjAYMRYwFAYD VQQDEw02ODM5ZjYwOC0zZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnAD/SMqwTgAS+wVxPbPsxVttL/9yh/Ah9FNmKDEPCG6rXBwuGyJCqK8QmaJ FWlH2QAgXoi/vJETHqrG5cibYf1tHCaC67jsOmOwhr8q+ZicPY3gsZHJIiZHfgKu /39do0elAYRHY/k5BwVfRAbZiHovFOqsHkyu16UHEpSNT2Anh62HYlbeM03pfj8f 5AYxI9kMoKHZJxP2New0c52dM1BJulMoDutVqWC/MhhedquL9Kzf8cjVOrUtGOmX Eu7lutwOJouC9hFn0mI1C7aRd3mbT5M7voSi2FSE4dcfvAejdF+mt22GKG5566WL I3AYImTTIQ5w+fsu5aIlEVQGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkcbRhz qYH1OElDi5aE5wta1dqJMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMYg91ujcL6nBMX5u9VywF/5aIDzdXYXgV+27+Qk0g063M2Fn+8e9t amCxFZcDxpU0fAP8gyEi/0snSJA9Nr1j1m+mMsjsnW++m0uGaTyt8KhHi1a18nPI DQ3tQLbayvEFbkA88xfGhnGdrwL/AwFQIIze5c9esHkYhBhPSSru8tJnji8v/BSm pObc0Bi/vx+WOCfbyl7NgQxWQc00rmNk/Go+w00C+LqhIjylKyCONkdIvq5ZLP6v kaBXVFcuVrYJSakOAt6KijdnOM/efYRRYw8X5dZNaezf7HTS1QKnWbV9NqT7b0sy DV1OXbba35bFemS4K3Bq8cDX4t8BMoF6 -----END CERTIFICATE-----Generated at Sat May 31 17:46:30 2025 by rpki-client