$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json) Hash identifier: QIZY91GEuM85fSuTFTPbrUrv1IGY2QwGaKzNTmZ45hg= Subject key identifier: 7E:FB:3E:77:FC:72:58:A4:70:6B:84:3F:AE:B7:AF:8B:C7:9D:3F:36 Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft Manifest number: 3C Signing time: Sat 31 May 2025 07:09:20 +0000 Manifest this update: Sat 31 May 2025 07:09:19 +0000 Manifest next update: Sat 07 Jun 2025 07:09:19 +0000 Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: ohF/V1x7xs9iaVVHX09QTI+LRzs/1BFQdbjrUtTn6uc=) 2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: aQCWDBoOh5osM5C7MBD0kh6o6WsN7hx2kjcWDkx53es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Validity Not Before: May 31 07:09:19 2025 GMT Not After : Jun 7 07:09:19 2025 GMT Subject: CN=683aab1f-fe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:73:2f:c7:f5:03:04:1a:dc:37:15:52:20: 57:ff:73:d9:f0:57:b2:03:f9:28:7f:df:bd:7d:de: 4f:ac:84:a3:f4:45:1a:ab:64:fb:20:12:91:fa:76: a8:1e:0e:81:29:d1:8a:fb:28:cf:83:ca:a2:7b:c9: fa:1f:d3:ce:db:fa:5f:1f:d9:ff:b4:02:f6:b2:43: 79:56:35:49:fd:ad:78:94:52:50:da:db:18:98:c1: 1d:f1:50:9d:a4:a0:94:13:7a:01:62:28:55:a2:ac: 0c:4f:41:d3:6c:d8:31:1f:0d:fa:36:be:f9:7c:0f: 21:07:e5:05:f1:6a:8c:bd:5f:83:d1:46:49:bc:28: da:ed:4d:9c:91:84:49:b5:ad:85:60:31:42:ab:08: 48:73:5f:12:33:ca:47:6a:7b:7f:bb:d9:fd:79:f1: 89:45:bf:c2:2d:9c:53:1f:1f:b7:00:17:75:db:41: d5:68:d9:d1:fd:54:a4:5d:f5:f9:28:10:69:a6:a1: 2b:7b:f0:cf:64:96:ec:6d:1c:66:7d:ce:4c:c3:1c: 09:c0:d4:11:a3:e2:d4:31:41:a3:5a:42:1c:26:7c: ba:70:d8:23:b8:e4:cb:6b:3c:65:89:26:dd:f8:52: 59:e0:b8:18:a3:3d:4d:72:12:b5:f2:a8:c3:2c:23: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:3E:77:FC:72:58:A4:70:6B:84:3F:AE:B7:AF:8B:C7:9D:3F:36 X509v3 Authority Key Identifier: keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ca:ef:74:c5:99:07:23:d1:11:ef:9e:f8:7c:8b:93:05:bd: d9:87:1b:02:64:19:e3:72:1f:29:4d:a5:9d:64:9a:47:79:23: af:fc:14:dd:d5:5a:49:0a:85:dc:f2:42:8d:51:31:45:39:3d: 8a:c3:ee:a9:99:13:d6:47:f1:93:91:f2:ff:97:18:46:29:25: 01:5a:b3:f3:f2:d1:2f:16:28:8e:38:7d:90:86:7d:b3:df:6a: 07:6b:d2:0f:ec:28:5a:84:17:f9:67:3f:86:62:40:49:cb:7c: 80:10:00:10:4e:d5:a9:4b:11:d6:2f:fb:42:02:75:cc:be:aa: cc:2a:cd:5e:32:9e:9a:d0:9e:14:0c:70:d9:d3:db:f3:d8:52: 67:a7:a6:4f:f8:86:8b:3b:d1:6e:f8:29:24:95:c0:36:54:db: f2:52:63:71:48:9e:86:aa:b1:6c:80:2a:e3:f8:10:9d:5b:7c: 4a:ee:ed:bc:c0:99:c8:9e:e9:62:ae:f0:cc:93:4b:66:a9:2a: 9a:f8:27:d7:01:74:1d:ec:04:55:1c:ce:de:d7:2c:dc:3e:c4: 37:20:98:20:e4:db:ca:ed:a8:87:e5:bc:03:ee:07:a3:0b:54: 49:5e:be:2a:b6:3c:1c:5c:37:3d:94:4b:f1:ed:cd:12:77:88: 76:9a:01:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEE0MjExMC8GA1UEBRMoODBCMThCODFENDdCNjE3NzEzMDRFMEY3NjEwRDExQTdD MzQwNjEyMzAeFw0yNTA1MzEwNzA5MTlaFw0yNTA2MDcwNzA5MTlaMBgxFjAUBgNV BAMTDTY4M2FhYjFmLWZlODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDToXMvx/UDBBrcNxVSIFf/c9nwV7ID+Sh/37193k+shKP0RRqrZPsgEpH6dqge DoEp0Yr7KM+DyqJ7yfof087b+l8f2f+0AvayQ3lWNUn9rXiUUlDa2xiYwR3xUJ2k oJQTegFiKFWirAxPQdNs2DEfDfo2vvl8DyEH5QXxaoy9X4PRRkm8KNrtTZyRhEm1 rYVgMUKrCEhzXxIzykdqe3+72f158YlFv8ItnFMfH7cAF3XbQdVo2dH9VKRd9fko EGmmoSt78M9kluxtHGZ9zkzDHAnA1BGj4tQxQaNaQhwmfLpw2CO45MtrPGWJJt34 UlnguBijPU1yErXyqMMsIwA9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfvs+d/xy WKRwa4Q/rrevi8edPzYwHwYDVR0jBBgwFoAUgLGLgdR7YXcTBOD3YQ0Rp8NAYSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QTQyLzFGQjBGNjc2RUE4 QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0xHTGdkUjdZWGNUQk9EM1lRMFJwOE5BWVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 QTQyLzFGQjBGNjc2RUE4QzExRUY4OEM5MDg1QUM0RjlBRTAyL2dMR0xnZFI3WVhj VEJPRDNZUTBScDhOQVlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADK73TFmQcj0RHvnvh8i5MFvdmHGwJkGeNyHylNpZ1kmkd5I6/8FN3V WkkKhdzyQo1RMUU5PYrD7qmZE9ZH8ZOR8v+XGEYpJQFas/Py0S8WKI44fZCGfbPf agdr0g/sKFqEF/lnP4ZiQEnLfIAQABBO1alLEdYv+0ICdcy+qswqzV4ynprQnhQM cNnT2/PYUmenpk/4hos70W74KSSVwDZU2/JSY3FInoaqsWyAKuP4EJ1bfEru7bzA mcie6WKu8MyTS2apKpr4J9cBdB3sBFUczt7XLNw+xDcgmCDk28rtqIflvAPuB6ML VEleviq2PBxcNz2US/HtzRJ3iHaaATk= -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client