$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: fMnLwYPjQvKrjMkKxwIwedgcTTVYP/gATfQ3SeGD6iw= Subject key identifier: 46:FB:3E:60:25:36:70:83:54:65:30:D5:2C:37:F0:3D:F6:A0:AA:F8 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0312 Signing time: Sat 31 May 2025 01:24:11 +0000 Manifest this update: Sat 31 May 2025 01:24:11 +0000 Manifest next update: Sat 07 Jun 2025 01:24:11 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: BIdHjPJYjRvBYrbbSD9gOMZJ75MPB2fyABGISFWnATs=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: May 31 01:24:11 2025 GMT Not After : Jun 7 01:24:11 2025 GMT Subject: CN=683a5a3b-8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:68:ac:1f:87:b4:f3:55:ac:18:af:07:be: 13:10:03:fa:5d:e5:dc:5d:ef:9d:ef:7f:27:9a:b0: 85:92:ba:0d:01:29:ee:f1:c4:8f:9e:e1:e6:d3:83: 4e:f8:2e:66:22:c2:bb:54:7e:74:c6:55:d2:ab:7a: e2:94:9d:96:e6:36:bf:6e:80:07:78:4f:1d:ad:82: 8d:16:d3:d2:aa:4a:42:4b:b8:e1:a6:f5:8b:d8:85: 2f:7e:4c:d2:89:d3:89:56:bf:59:cf:4e:0e:74:a3: fa:f4:54:72:ae:fb:4e:83:cd:0a:52:84:27:09:b7: b1:3a:20:17:61:2a:6a:38:89:7d:7f:ee:20:9d:7a: f5:f6:66:37:bb:61:d4:a2:fb:1a:39:86:ad:48:8a: 99:ed:4d:56:55:a5:d3:27:0f:3a:38:b1:93:56:29: e8:52:ae:27:23:6d:36:0d:71:75:b5:be:87:04:cc: 18:56:bf:6b:02:e9:66:03:7f:a2:d9:be:fb:8b:13: fe:44:ef:60:e7:30:62:9f:bc:86:1d:d6:8c:70:82: a1:64:de:20:9f:b7:d3:40:36:18:2b:74:fc:e8:40: ad:1e:9a:5d:89:82:65:03:aa:eb:e8:35:f9:15:53: 2d:38:85:39:4c:17:5b:4e:6f:f6:52:e6:64:ef:ce: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:3E:60:25:36:70:83:54:65:30:D5:2C:37:F0:3D:F6:A0:AA:F8 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:fb:32:ea:a3:39:a5:2b:7d:3f:f2:01:50:1c:b7:6a:d1: f0:12:fe:ae:a5:bd:22:28:9f:c7:0e:fb:ec:16:90:8e:20:f4: f8:68:a6:a6:a8:e4:56:b2:f1:5a:e5:6e:db:84:0e:6a:26:ca: 43:e5:d6:f5:0a:09:dc:61:92:35:86:27:92:bb:bb:39:6f:28: 1d:a1:b7:43:31:e5:ed:66:13:cb:22:13:53:1d:fc:c1:c2:28: d8:99:82:fd:9a:e4:a1:3e:87:bc:59:80:5b:fa:c3:a3:87:67: 20:48:39:c0:78:ee:3e:12:59:f8:aa:41:98:ae:9f:59:f5:d1: fd:89:58:6c:46:6c:68:99:3c:03:21:de:32:49:0e:f3:99:b4: ff:fb:72:5e:35:e1:f9:a3:51:70:07:79:8f:1e:2e:7e:c4:63: f6:a0:22:a4:90:7f:b2:19:e3:ef:cf:7f:b5:12:5d:2a:af:f4: 98:15:d0:9a:a0:45:d5:0a:18:39:11:67:a7:33:f7:c6:79:b5: af:d5:c3:7f:ae:5d:73:b8:a6:af:7e:b3:6e:de:58:64:05:69: 69:7e:5d:13:37:ff:fe:fa:c8:5a:41:5b:60:6a:c9:1d:3c:a1: 15:7d:ce:06:34:7f:5d:5a:e3:68:b5:a2:fe:fb:5a:13:27:56: c0:65:5c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNTMxMDEyNDExWhcNMjUwNjA3MDEyNDExWjAYMRYwFAYD VQQDEw02ODNhNWEzYi04ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMhorB+HtPNVrBivB74TEAP6XeXcXe+d738nmrCFkroNASnu8cSPnuHm04NO +C5mIsK7VH50xlXSq3rilJ2W5ja/boAHeE8drYKNFtPSqkpCS7jhpvWL2IUvfkzS idOJVr9Zz04OdKP69FRyrvtOg80KUoQnCbexOiAXYSpqOIl9f+4gnXr19mY3u2HU ovsaOYatSIqZ7U1WVaXTJw86OLGTVinoUq4nI202DXF1tb6HBMwYVr9rAulmA3+i 2b77ixP+RO9g5zBin7yGHdaMcIKhZN4gn7fTQDYYK3T86ECtHppdiYJlA6rr6DX5 FVMtOIU5TBdbTm/2UuZk7849RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb7PmAl NnCDVGUw1Sw38D32oKr4MB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALZfsy6qM5pSt9P/IBUBy3atHwEv6upb0iKJ/HDvvsFpCOIPT4aKam qORWsvFa5W7bhA5qJspD5db1CgncYZI1hieSu7s5bygdobdDMeXtZhPLIhNTHfzB wijYmYL9muShPoe8WYBb+sOjh2cgSDnAeO4+Eln4qkGYrp9Z9dH9iVhsRmxomTwD Id4ySQ7zmbT/+3JeNeH5o1FwB3mPHi5+xGP2oCKkkH+yGePvz3+1El0qr/SYFdCa oEXVChg5EWenM/fGebWv1cN/rl1zuKavfrNu3lhkBWlpfl0TN//++shaQVtgaskd PKEVfc4GNH9dWuNotaL++1oTJ1bAZVwk -----END CERTIFICATE-----Generated at Sat May 31 16:42:04 2025 by rpki-client