$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: 1+f709Zd4KOzZy8JOHzy0c6TuaxW9z0jy5UFl6hoXps= Subject key identifier: 4D:01:9E:3A:77:FA:A8:3E:18:F4:E1:09:A3:1A:96:CA:73:15:FD:DB Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 074F Signing time: Fri 30 May 2025 21:53:16 +0000 Manifest this update: Fri 30 May 2025 21:53:16 +0000 Manifest next update: Fri 06 Jun 2025 21:53:16 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: /buC7UutOXg/Ugn9t0gRGYPNuVLHNThNExagKVxyjU4=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: RF8Kiol9Bl+cT8NMkiixB2yHl7PyCHbWNwT/OTtymFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: May 30 21:53:16 2025 GMT Not After : Jun 6 21:53:16 2025 GMT Subject: CN=683a28cc-6b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:f5:89:f4:d0:81:83:17:b5:53:37:ad:19: e0:8b:52:75:f7:f2:62:24:91:c7:b3:f4:21:8d:34: d1:bb:d7:d3:77:cf:f7:b8:af:a1:80:75:c7:da:ea: e1:95:cf:33:8e:9b:79:6b:c1:93:01:8f:c7:03:05: bb:00:32:0e:39:1d:43:90:1e:40:4a:7b:42:15:e3: ad:34:f1:7a:67:e4:7d:59:8e:6d:56:b2:7c:fc:33: 0c:cd:1a:3b:ec:51:59:b6:7e:3f:13:4a:c6:e8:92: 44:1c:92:b0:1c:12:be:23:f9:82:79:ed:ab:19:76: 7c:2b:e0:71:bb:0f:ec:8a:c8:6b:4a:0b:50:92:ac: 07:f0:0b:50:66:8f:e4:49:8a:c4:fd:03:9e:82:cc: b9:3f:c5:d8:35:eb:a4:88:84:b8:15:b3:06:5c:39: 65:12:a0:3e:76:c2:3f:a1:32:02:61:e9:ba:3e:a0: 57:c5:20:04:53:cf:93:23:0f:5f:74:48:26:58:15: ee:04:e8:84:00:97:f8:93:21:0d:a6:e8:de:82:20: 0f:81:8c:e6:b1:fb:70:53:64:28:56:43:a5:59:ee: 8e:87:a6:08:81:61:cd:df:0d:1b:b2:a2:77:0b:3d: 8d:74:bd:8c:c4:d3:cf:e2:77:2d:d8:7f:e7:ea:fe: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:01:9E:3A:77:FA:A8:3E:18:F4:E1:09:A3:1A:96:CA:73:15:FD:DB X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cf:a7:7f:e0:2f:18:a2:1a:8f:4c:15:31:47:09:3b:d7:de: 57:51:64:51:c8:24:ee:f4:35:36:a2:25:43:76:59:79:8e:f6: ca:c2:d5:27:15:7e:ac:33:4a:ed:88:bf:a7:53:ab:f2:bb:b1: a4:16:9a:d4:bf:97:6b:61:a6:f7:62:db:43:55:98:19:c0:9d: 0a:95:32:12:9c:ed:98:28:f4:d3:23:22:b5:dc:e9:e8:fc:02: 5e:6d:2f:35:e6:8f:f0:f6:e1:03:59:fc:44:8a:44:fb:61:a2: 34:a1:a9:94:05:3f:b4:fe:c0:83:46:64:7e:2b:ff:0e:ee:9b: 10:c9:ed:71:33:ca:21:7d:b7:2f:21:f6:46:b1:b0:81:11:e3: fc:4e:7a:b1:d1:03:ee:68:f8:7e:4e:21:0b:cf:f7:b0:92:56: 5f:36:b1:56:2c:00:3a:c1:36:19:ad:bc:b3:5f:07:81:52:48: c9:49:28:7a:85:ef:2a:c8:4b:59:d8:72:71:3e:90:79:be:13: cc:44:d6:d7:de:05:5b:37:28:a0:f0:00:b0:86:5c:c2:91:82: 39:c3:6e:a6:e1:11:f8:5d:a1:06:85:d8:23:48:92:90:28:2a: 06:71:1f:2b:0b:7d:8a:f5:8f:11:d8:02:31:5a:27:98:29:96: a9:fe:f6:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwNTMwMjE1MzE2WhcNMjUwNjA2MjE1MzE2WjAYMRYwFAYD VQQDEw02ODNhMjhjYy02YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4z1ifTQgYMXtVM3rRngi1J19/JiJJHHs/QhjTTRu9fTd8/3uK+hgHXH2urh lc8zjpt5a8GTAY/HAwW7ADIOOR1DkB5ASntCFeOtNPF6Z+R9WY5tVrJ8/DMMzRo7 7FFZtn4/E0rG6JJEHJKwHBK+I/mCee2rGXZ8K+Bxuw/sishrSgtQkqwH8AtQZo/k SYrE/QOegsy5P8XYNeukiIS4FbMGXDllEqA+dsI/oTICYem6PqBXxSAEU8+TIw9f dEgmWBXuBOiEAJf4kyENpujegiAPgYzmsftwU2QoVkOlWe6Oh6YIgWHN3w0bsqJ3 Cz2NdL2MxNPP4nct2H/n6v7gDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0Bnjp3 +qg+GPThCaMalspzFf3bMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7z6d/4C8YohqPTBUxRwk7195XUWRRyCTu9DU2oiVDdll5jvbKwtUn FX6sM0rtiL+nU6vyu7GkFprUv5drYab3YttDVZgZwJ0KlTISnO2YKPTTIyK13Ono /AJebS815o/w9uEDWfxEikT7YaI0oamUBT+0/sCDRmR+K/8O7psQye1xM8ohfbcv IfZGsbCBEeP8Tnqx0QPuaPh+TiELz/ewklZfNrFWLAA6wTYZrbyzXweBUkjJSSh6 he8qyEtZ2HJxPpB5vhPMRNbX3gVbNyig8ACwhlzCkYI5w26m4RH4XaEGhdgjSJKQ KCoGcR8rC32K9Y8R2AIxWieYKZap/vYy -----END CERTIFICATE-----Generated at Sat May 31 15:12:59 2025 by rpki-client