$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: JIRPRWM1MMTzVtaXLva15ntFqCDMcbRezELiQFx1nN8= Subject key identifier: F1:33:C1:60:DA:22:6A:08:F6:8A:7A:03:BF:A2:A8:71:73:2E:8C:CE Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BD1 Signing time: Fri 30 May 2025 19:03:11 +0000 Manifest this update: Fri 30 May 2025 19:03:10 +0000 Manifest next update: Fri 06 Jun 2025 19:03:10 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: D240bRsUNwgPhMyNy+gvqClB1XAPbf5Zs+911QM3QZs=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: May 30 19:03:10 2025 GMT Not After : Jun 6 19:03:10 2025 GMT Subject: CN=683a00ee-0a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:b1:af:1f:b5:c5:8a:1e:88:e0:35:cf:bb: 50:96:36:af:48:c3:b7:60:d7:7e:65:54:5f:7d:e9: 5f:19:9c:9e:6b:e9:90:ce:b3:66:b6:85:dd:af:80: 74:b0:26:b1:94:26:45:fd:49:5c:e4:d8:03:ff:83: ce:58:00:94:0c:fa:e6:ea:d6:3f:ec:1a:78:13:51: ce:d4:b0:fe:44:b0:9c:8a:ee:e5:13:6b:9f:53:a3: 2a:b0:e7:12:e6:b8:e2:1d:95:34:c4:57:39:05:88: 57:af:bd:c2:e3:ae:6d:0e:7f:f8:dd:96:81:26:64: 68:1d:d4:f3:78:7e:69:a1:dc:39:13:ea:90:28:f7: e1:2f:e1:5c:61:01:95:c2:ca:6a:c9:85:88:dd:3a: d2:03:6a:84:43:c5:ea:6e:cc:d3:02:f1:67:1a:a7: ad:f4:35:64:37:36:49:8b:21:cc:9e:f2:dc:d8:14: 0d:cf:00:da:35:ff:96:7b:20:26:8d:ad:c9:94:cd: 10:37:4c:4a:fa:c7:8d:3f:c2:d4:2d:51:24:1b:84: 3e:7e:cc:24:6b:ba:f3:8a:64:4e:2f:6e:e6:49:a0: 98:53:0b:c2:f8:8f:9a:50:24:79:8d:7a:81:22:4a: 34:2b:94:c9:aa:70:35:fd:cb:4b:89:a2:91:7f:24: a8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:33:C1:60:DA:22:6A:08:F6:8A:7A:03:BF:A2:A8:71:73:2E:8C:CE X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f9:8d:58:66:7c:0c:7f:32:cc:7f:fe:14:18:cb:65:9c:68: e9:ec:b7:8a:f7:85:46:5d:f7:2a:bc:49:26:ad:f7:24:8e:dd: 0e:c0:c8:03:76:d9:75:1c:4d:b8:f6:4c:01:19:3d:d6:ee:bb: 84:36:46:1b:09:10:0f:c2:e2:42:32:17:58:aa:27:54:df:eb: d9:22:dc:b6:95:f2:42:96:1b:c8:8d:bb:51:06:06:3b:5b:48: ad:dc:70:f0:23:77:00:43:d3:2c:d0:a4:40:db:41:53:f9:8f: bc:40:55:e5:d6:a7:29:79:f9:d9:45:55:8f:31:c2:73:66:10: c4:ee:cd:6e:41:79:d2:99:6a:ce:7f:de:4b:dd:6a:b5:a1:f6: 09:51:71:59:fa:3d:36:42:5b:f3:20:b8:ec:ca:20:80:05:5f: 61:d9:2e:b0:22:c4:b1:86:61:cf:1e:46:9a:46:2e:ac:31:f3: 20:7f:99:b8:1f:de:8d:25:d6:b1:5b:2f:2f:3c:1f:bf:d2:1c: f0:f2:9b:af:b5:01:12:02:d9:3b:48:32:95:65:27:ae:7a:68: 70:8e:4b:ce:e0:bb:f5:4e:10:a5:aa:0b:9a:36:be:c8:92:ed: 74:d0:5e:5f:b8:41:44:6c:7a:a9:06:6a:00:2b:4b:5d:20:2b: 4a:07:03:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNTMwMTkwMzEwWhcNMjUwNjA2MTkwMzEwWjAYMRYwFAYD VQQDEw02ODNhMDBlZS0wYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugmxrx+1xYoeiOA1z7tQljavSMO3YNd+ZVRffelfGZyea+mQzrNmtoXdr4B0 sCaxlCZF/Ulc5NgD/4POWACUDPrm6tY/7Bp4E1HO1LD+RLCciu7lE2ufU6MqsOcS 5rjiHZU0xFc5BYhXr73C465tDn/43ZaBJmRoHdTzeH5podw5E+qQKPfhL+FcYQGV wspqyYWI3TrSA2qEQ8XqbszTAvFnGqet9DVkNzZJiyHMnvLc2BQNzwDaNf+WeyAm ja3JlM0QN0xK+seNP8LULVEkG4Q+fswka7rzimROL27mSaCYUwvC+I+aUCR5jXqB Iko0K5TJqnA1/ctLiaKRfySofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEzwWDa ImoI9op6A7+iqHFzLozOMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6+Y1YZnwMfzLMf/4UGMtlnGjp7LeK94VGXfcqvEkmrfckjt0OwMgD dtl1HE249kwBGT3W7ruENkYbCRAPwuJCMhdYqidU3+vZIty2lfJClhvIjbtRBgY7 W0it3HDwI3cAQ9Ms0KRA20FT+Y+8QFXl1qcpefnZRVWPMcJzZhDE7s1uQXnSmWrO f95L3Wq1ofYJUXFZ+j02QlvzILjsyiCABV9h2S6wIsSxhmHPHkaaRi6sMfMgf5m4 H96NJdaxWy8vPB+/0hzw8puvtQESAtk7SDKVZSeuemhwjkvO4Lv1ThClqguaNr7I ku100F5fuEFEbHqpBmoAK0tdICtKBwM/ -----END CERTIFICATE-----Generated at Sat May 31 17:32:58 2025 by rpki-client