$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json) Hash identifier: l4m6yLxdaUFmZQ7qmsZ4Oaos4oVe+zpGCy/4P+W4UPY= Subject key identifier: 3C:3C:38:A9:12:E8:B0:A1:BF:AB:ED:F5:04:65:31:91:3A:35:1C:7C Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft Manifest number: 01F9 Signing time: Sat 31 May 2025 02:13:43 +0000 Manifest this update: Sat 31 May 2025 02:13:42 +0000 Manifest next update: Sat 07 Jun 2025 02:13:42 +0000 Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: RcsZng3Len25eefGx3Lp3I03ZJ3n7M/saHjG5L8iWeI=) 2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: May 31 02:13:42 2025 GMT Not After : Jun 7 02:13:42 2025 GMT Subject: CN=683a65d7-5713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:84:57:a2:ef:d6:80:7b:de:a7:65:38:56: 68:58:86:97:04:90:29:a6:d6:15:e9:6b:57:dc:f3: 51:a7:2c:8c:14:7d:5b:4a:5a:74:05:b6:b5:ad:66: a5:af:37:5a:73:5a:b2:3c:dc:f4:4b:c4:59:04:d3: c4:de:22:40:17:f4:8f:9c:1f:09:4f:2f:29:4d:10: c9:4e:dd:06:97:3d:60:91:0d:cf:ed:f5:00:e4:73: b6:e9:6f:b4:5b:83:1f:26:3b:15:20:34:7d:19:0e: f5:79:74:6b:26:0e:16:0e:92:9b:55:17:19:9a:f0: 18:d4:dc:38:1c:b3:01:f8:dd:0b:6e:e5:31:8b:b1: 18:6d:3b:58:33:11:70:3d:2b:4e:0e:32:ca:f6:46: 9a:90:72:e5:cf:cf:02:b0:0e:1f:4e:79:b5:4b:16: 20:f5:b2:24:19:5f:6b:20:46:f9:e3:b7:d2:52:99: c7:ff:28:c8:ac:ef:e9:f3:18:14:9f:fc:8c:15:8e: 91:99:f5:57:84:43:fb:0c:73:59:f4:28:bc:52:8a: 8f:61:0b:31:71:20:25:6a:ce:97:89:58:85:91:9f: 9c:d6:c7:1c:ce:9a:13:de:40:54:4f:86:d1:0a:8c: 1c:a5:b3:22:62:16:55:ce:a5:f6:fb:f1:01:53:f7: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:38:A9:12:E8:B0:A1:BF:AB:ED:F5:04:65:31:91:3A:35:1C:7C X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:81:8c:02:30:b3:b0:86:2b:ca:db:9e:9c:14:21:a6:46:e7: 93:73:ab:53:aa:e4:fe:f6:69:ec:a1:eb:25:68:97:cd:f3:09: a8:06:4b:a2:28:a8:ce:c0:70:ee:7b:b0:a5:19:8e:5b:c7:01: 77:d0:1d:6e:ba:52:71:14:ea:c1:0d:b3:97:c8:35:17:f8:ea: 86:bf:72:11:7e:9b:01:79:ae:3c:7b:bb:74:8e:dc:35:4a:45: 6b:72:15:4e:0b:bf:46:d5:6a:08:dc:63:99:e2:fb:59:75:a2: aa:64:3f:06:14:69:a9:78:30:d1:66:dc:ba:37:11:fe:68:a9: cb:cb:cd:8d:1b:cb:eb:7e:30:53:db:d5:2e:f1:fa:42:a6:ff: 4e:aa:51:4d:bb:93:ca:d2:b6:1c:c1:66:0a:ee:15:dd:a9:e2: f1:ab:46:03:2a:4b:64:44:71:4e:b7:d8:44:91:a0:03:a7:c4: 24:a0:38:ad:24:b1:dc:c7:b2:c8:d1:53:f4:bd:8c:16:4c:68: 90:61:89:78:bb:cc:85:75:1d:3f:1e:ce:81:d9:e1:d9:e5:47: fe:3f:56:14:6e:08:b0:24:40:ed:49:23:bf:6f:7a:41:f5:5c: 74:58:6d:48:4e:4e:b1:47:18:55:72:c0:6e:73:ad:65:29:8e: 15:35:54:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjUwNTMxMDIxMzQyWhcNMjUwNjA3MDIxMzQyWjAYMRYwFAYD VQQDEw02ODNhNjVkNy01NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIiEV6Lv1oB73qdlOFZoWIaXBJApptYV6WtX3PNRpyyMFH1bSlp0Bba1rWal rzdac1qyPNz0S8RZBNPE3iJAF/SPnB8JTy8pTRDJTt0Glz1gkQ3P7fUA5HO26W+0 W4MfJjsVIDR9GQ71eXRrJg4WDpKbVRcZmvAY1Nw4HLMB+N0LbuUxi7EYbTtYMxFw PStODjLK9kaakHLlz88CsA4fTnm1SxYg9bIkGV9rIEb547fSUpnH/yjIrO/p8xgU n/yMFY6RmfVXhEP7DHNZ9Ci8UoqPYQsxcSAlas6XiViFkZ+c1scczpoT3kBUT4bR CowcpbMiYhZVzqX2+/EBU/cOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw8OKkS 6LChv6vt9QRlMZE6NRx8MB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7gYwCMLOwhivK256cFCGmRueTc6tTquT+9mnsoeslaJfN8wmoBkui KKjOwHDue7ClGY5bxwF30B1uulJxFOrBDbOXyDUX+OqGv3IRfpsBea48e7t0jtw1 SkVrchVOC79G1WoI3GOZ4vtZdaKqZD8GFGmpeDDRZty6NxH+aKnLy82NG8vrfjBT 29Uu8fpCpv9OqlFNu5PK0rYcwWYK7hXdqeLxq0YDKktkRHFOt9hEkaADp8QkoDit JLHcx7LI0VP0vYwWTGiQYYl4u8yFdR0/Hs6B2eHZ5Uf+P1YUbgiwJEDtSSO/b3pB 9Vx0WG1ITk6xRxhVcsBuc61lKY4VNVT1 -----END CERTIFICATE-----Generated at Sat May 31 17:49:42 2025 by rpki-client