$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: i5Ho5X1i91lipihxKxHggOz1xmBZMzY62ictGO84r8E= Subject key identifier: 88:16:51:CD:2B:C2:80:23:AB:01:AD:43:33:F7:01:56:FD:2C:C6:D2 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 185C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1842 Signing time: Wed 04 Jun 2025 16:32:08 +0000 Manifest this update: Wed 04 Jun 2025 16:32:07 +0000 Manifest next update: Wed 11 Jun 2025 16:32:07 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: IwfB8tJ8KsnNQorROWVaFUYabpJ6epUy3fNtyHgmEIo=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6236 (0x185c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jun 4 16:32:07 2025 GMT Not After : Jun 11 16:32:07 2025 GMT Subject: CN=68407508-15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:53:7f:90:4c:f9:fa:49:7b:30:be:4a:ed: 56:46:fd:0d:69:87:ae:37:ec:92:c3:18:de:54:84: 2c:27:ec:9c:d1:33:e2:6f:1d:71:64:7f:e7:14:c7: 5d:de:6f:3d:5c:b8:e3:f9:4c:34:90:5d:aa:6a:b4: 6d:b3:bd:72:8f:1f:8b:a6:46:c6:2c:e5:4c:c1:fb: b1:19:77:03:68:08:ff:fb:75:b6:c1:11:69:51:57: 92:dc:fb:3b:fb:f9:17:80:26:01:0c:af:2d:17:24: 40:7d:43:8e:ee:e6:35:51:ab:8f:7e:5d:51:09:8f: 28:06:51:86:73:fe:c4:6c:7d:54:05:16:f9:55:c0: 8d:83:c8:66:c2:0a:8f:6f:a5:3d:c2:dd:f2:d3:ee: 55:26:89:1c:0c:ce:6c:be:5e:ea:9e:5d:32:e7:b4: 2f:0a:02:cd:a2:de:cc:5c:3f:98:7c:47:66:57:c9: c1:a3:16:82:67:e7:6a:93:34:d1:5d:55:be:75:c5: 6a:47:af:8a:73:3f:c8:3a:6e:94:04:c8:64:eb:a3: 84:e8:68:84:2f:cb:3f:dc:75:fe:e3:23:65:d3:e6: df:73:3e:d1:ce:00:45:40:d4:5b:4f:08:08:fe:72: a0:9b:7d:fc:81:96:d8:58:1f:e6:65:1e:fe:b5:3a: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:16:51:CD:2B:C2:80:23:AB:01:AD:43:33:F7:01:56:FD:2C:C6:D2 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f7:ed:5c:43:ff:89:58:6d:32:55:f3:b3:ca:f3:a2:76:8e: 04:8a:ef:8b:d2:57:25:53:4a:a5:e9:c5:95:64:17:76:12:03: e9:5e:2c:27:41:62:11:a3:b1:45:89:ee:af:fd:cd:0a:c8:53: bb:5e:e6:5d:82:6c:ee:8e:64:a5:be:b0:31:35:df:c7:9f:b1: f8:a6:1e:73:d5:46:2c:51:6d:0d:00:db:6e:64:75:f3:29:4b: 1e:b4:1c:cd:dc:59:95:90:8c:b5:d7:e8:2b:fb:8b:f9:d6:27: b6:1e:a9:7c:d6:15:1e:37:90:0a:31:50:e7:47:df:c0:05:71: 0f:9b:46:c8:5f:34:58:05:5b:31:65:bb:30:63:fa:a1:04:9a: 7b:29:cc:65:d7:2a:cf:89:22:00:62:2c:4a:c5:11:4e:61:39: 5f:59:92:28:7b:60:f2:d8:e9:c7:dc:f3:03:27:b9:e4:73:00: e6:13:f6:bb:ac:e7:c3:16:57:b8:04:06:eb:94:55:a1:0b:09: 9d:71:5b:64:97:4b:8f:50:bc:2a:91:3b:be:04:5d:e8:8a:cb: f7:ff:93:c1:c4:e3:08:97:46:bd:e7:e7:b2:68:86:8c:aa:e8: 78:53:b2:f6:d1:b7:98:5c:1a:50:d8:52:4d:e7:a0:fa:61:01: 81:23:10:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNjA0MTYzMjA3WhcNMjUwNjExMTYzMjA3WjAYMRYwFAYD VQQDEw02ODQwNzUwOC0xNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AtTf5BM+fpJezC+Su1WRv0NaYeuN+ySwxjeVIQsJ+yc0TPibx1xZH/nFMdd 3m89XLjj+Uw0kF2qarRts71yjx+LpkbGLOVMwfuxGXcDaAj/+3W2wRFpUVeS3Ps7 +/kXgCYBDK8tFyRAfUOO7uY1UauPfl1RCY8oBlGGc/7EbH1UBRb5VcCNg8hmwgqP b6U9wt3y0+5VJokcDM5svl7qnl0y57QvCgLNot7MXD+YfEdmV8nBoxaCZ+dqkzTR XVW+dcVqR6+Kcz/IOm6UBMhk66OE6GiEL8s/3HX+4yNl0+bfcz7RzgBFQNRbTwgI /nKgm338gZbYWB/mZR7+tTpk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgWUc0r woAjqwGtQzP3AVb9LMbSMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr9+1cQ/+JWG0yVfOzyvOido4Eiu+L0lclU0ql6cWVZBd2EgPpXiwn QWIRo7FFie6v/c0KyFO7XuZdgmzujmSlvrAxNd/Hn7H4ph5z1UYsUW0NANtuZHXz KUsetBzN3FmVkIy11+gr+4v51ie2Hql81hUeN5AKMVDnR9/ABXEPm0bIXzRYBVsx ZbswY/qhBJp7Kcxl1yrPiSIAYixKxRFOYTlfWZIoe2Dy2OnH3PMDJ7nkcwDmE/a7 rOfDFle4BAbrlFWhCwmdcVtkl0uPULwqkTu+BF3oisv3/5PBxOMIl0a95+eyaIaM quh4U7L20beYXBpQ2FJN56D6YQGBIxAo -----END CERTIFICATE-----Generated at Thu Jun 5 19:49:16 2025 by rpki-client