$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: FP58P98CGJu5R3e1s9A8iR+kFWDiPtxy1sm7wGJAEhs= Subject key identifier: 4C:D9:77:92:FE:AE:D5:41:0C:78:3A:B7:4E:CD:E1:A1:9D:A6:77:AD Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0B5F Signing time: Sun 08 Jun 2025 18:51:52 +0000 Manifest this update: Sun 08 Jun 2025 18:51:52 +0000 Manifest next update: Sun 15 Jun 2025 18:51:52 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 73Ow7O15VELZRTrkfYG7+zxAWD6O45K9tbvEkgD/mps=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Jun 8 18:51:52 2025 GMT Not After : Jun 15 18:51:52 2025 GMT Subject: CN=6845dbc8-5b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:ab:8f:5c:c3:61:b8:18:a7:b9:4e:d6:5a: 29:a1:ae:5c:44:b1:8e:3b:90:bc:f1:e2:96:55:c6: 10:7d:c2:87:36:14:96:34:c7:34:53:40:fc:9d:f3: a0:41:53:7c:bb:98:16:50:0b:e3:97:aa:f9:1f:2b: 10:c0:af:8e:ff:24:6b:99:69:93:3f:ff:c3:66:67: 51:c7:b6:22:26:7c:b1:8a:4b:71:b0:f6:55:1d:f7: 9e:4c:37:ad:f8:72:ee:b9:21:22:92:ec:ac:4b:a1: 66:dd:db:5c:d7:20:17:1f:54:72:2f:e2:14:d2:4e: 47:fd:cb:d9:77:5c:a8:5f:72:33:8c:69:fc:6c:96: 63:25:62:36:51:53:79:ea:99:30:38:f8:90:85:ba: 32:09:49:94:71:20:6b:a4:f0:32:77:8e:90:97:db: 5c:3d:d6:1e:aa:d2:4b:6f:a0:25:8b:5b:b5:98:dd: 7d:72:42:31:22:9c:ea:cc:b9:13:f3:f9:64:f7:74: 94:bc:b8:9a:54:c7:4f:d4:a7:34:98:e8:2e:86:59: 36:3d:a6:7f:24:b8:44:09:bd:ef:b2:71:23:d3:99: 94:bc:d2:11:c7:61:0d:b4:90:82:49:3f:1e:63:57: 1c:62:c2:aa:ef:53:31:db:f9:bb:81:4a:6b:3b:6b: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D9:77:92:FE:AE:D5:41:0C:78:3A:B7:4E:CD:E1:A1:9D:A6:77:AD X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c3:64:5f:01:f5:dd:5c:2f:5b:9d:d4:ec:7f:d9:1d:48:84: 7e:8e:01:c8:7e:42:76:af:c3:3b:fd:f7:62:e9:71:58:a3:6a: 1f:63:8b:cb:32:74:27:53:a8:d5:f3:59:c6:ed:ff:82:d8:c8: e1:06:85:43:48:e0:a4:ec:b9:a8:7b:5b:59:1d:f4:14:c2:eb: c8:a0:2b:c7:38:a3:02:d0:bd:17:ce:1b:dd:e2:17:f8:dc:89: 24:16:5a:8f:aa:56:ea:f0:80:b2:fe:a8:2c:33:9b:e3:17:d2: 55:94:d8:54:3a:54:74:26:07:c2:6b:8e:aa:85:79:a4:9c:35: 05:73:bb:d3:98:b9:cc:ed:d1:3f:34:0b:ec:4b:43:ea:6c:58: fa:a2:32:0c:3c:9a:3d:a0:08:9d:b7:dc:c5:de:a2:4c:22:d8: 5c:20:2c:92:8c:3d:2d:3b:90:10:21:9a:f1:ea:b3:d0:07:68: db:97:eb:ca:52:e8:7e:f7:69:77:93:b7:81:f4:bc:39:69:13: 04:59:d2:ea:37:41:52:d0:a9:ee:71:e3:03:34:3d:a3:ea:42: 0e:b9:4e:73:3b:af:e6:09:a1:1b:84:53:02:0a:54:9d:e1:12: ea:90:df:17:15:f5:d4:6c:b8:96:55:d2:14:41:48:08:a6:95: 21:c2:28:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUwNjA4MTg1MTUyWhcNMjUwNjE1MTg1MTUyWjAYMRYwFAYD VQQDEw02ODQ1ZGJjOC01YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LGrj1zDYbgYp7lO1lopoa5cRLGOO5C88eKWVcYQfcKHNhSWNMc0U0D8nfOg QVN8u5gWUAvjl6r5HysQwK+O/yRrmWmTP//DZmdRx7YiJnyxiktxsPZVHfeeTDet +HLuuSEikuysS6Fm3dtc1yAXH1RyL+IU0k5H/cvZd1yoX3IzjGn8bJZjJWI2UVN5 6pkwOPiQhboyCUmUcSBrpPAyd46Ql9tcPdYeqtJLb6Ali1u1mN19ckIxIpzqzLkT 8/lk93SUvLiaVMdP1Kc0mOguhlk2PaZ/JLhECb3vsnEj05mUvNIRx2ENtJCCST8e Y1ccYsKq71Mx2/m7gUprO2sL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzZd5L+ rtVBDHg6t07N4aGdpnetMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJw2RfAfXdXC9bndTsf9kdSIR+jgHIfkJ2r8M7/fdi6XFYo2ofY4vL MnQnU6jV81nG7f+C2MjhBoVDSOCk7Lmoe1tZHfQUwuvIoCvHOKMC0L0Xzhvd4hf4 3IkkFlqPqlbq8ICy/qgsM5vjF9JVlNhUOlR0JgfCa46qhXmknDUFc7vTmLnM7dE/ NAvsS0PqbFj6ojIMPJo9oAidt9zF3qJMIthcICySjD0tO5AQIZrx6rPQB2jbl+vK Uuh+92l3k7eB9Lw5aRMEWdLqN0FS0KnuceMDND2j6kIOuU5zO6/mCaEbhFMCClSd 4RLqkN8XFfXUbLiWVdIUQUgIppUhwigV -----END CERTIFICATE-----Generated at Mon Jun 9 18:18:54 2025 by rpki-client