$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft File: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json) Hash identifier: 7oWE72ldjbsN/lMXcKm9/hK6B6msU2tvVd5AR4fR7LE= Subject key identifier: BD:9D:27:DD:CC:D1:FC:63:1C:79:B8:33:44:16:04:5A:63:D3:73:C0 Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A Certificate issuer: /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft Manifest number: 0277 Signing time: Sat 31 May 2025 01:53:10 +0000 Manifest this update: Sat 31 May 2025 01:53:09 +0000 Manifest next update: Sat 07 Jun 2025 01:53:09 +0000 Files and hashes: 1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: JtmLV/tWbQe2MNz7GOmnXhbW6k5C/kYEYDa/NRTaqxM=) 2: EE62A36A0D9F11EDB7631D1BC4F9AE02.roa (hash: 79mqc7tZF4tbIphjhbOXUthxD6els9a6zfI1+s7nFSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A Validity Not Before: May 31 01:53:09 2025 GMT Not After : Jun 7 01:53:09 2025 GMT Subject: CN=683a6106-298d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:33:18:13:6f:24:ca:81:65:1a:ed:ed:42: cf:92:74:4d:c2:58:6b:92:93:1f:0d:a3:e4:a0:d2: c6:31:e0:53:7a:78:ef:4c:ee:f4:1a:d0:02:74:88: 03:88:70:f7:5f:fe:19:e4:05:8d:06:45:ba:38:72: c9:f0:c5:45:95:66:fe:eb:49:19:a3:0f:dd:3a:2a: e6:16:bc:59:d8:be:82:b7:00:cd:56:dd:a9:d3:e1: c1:24:4d:e9:e2:3e:fe:4b:90:20:51:63:83:33:72: da:4e:4f:e2:5c:66:e5:a8:8b:15:80:8f:47:63:42: a7:53:ad:ed:86:5e:c9:50:06:79:14:1e:75:12:6c: 08:75:73:75:06:1e:83:86:7f:e8:06:29:45:66:68: e9:bf:ae:79:55:a2:c0:e4:7d:bc:31:64:87:60:23: 31:26:36:d5:b6:43:87:9d:aa:92:5a:50:20:a3:71: d1:9a:ae:df:db:6e:95:72:9a:57:1c:7e:c2:6f:c2: 43:d7:67:7b:5e:2c:41:bf:84:a7:81:28:04:ae:01: 59:51:22:da:33:8a:23:d5:9d:29:e3:d5:99:3d:58: cc:e4:7c:de:63:63:86:85:14:0b:d4:e8:d8:02:82: 84:8d:fa:c0:f7:d9:12:89:1b:f4:1e:9f:e1:69:66: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9D:27:DD:CC:D1:FC:63:1C:79:B8:33:44:16:04:5A:63:D3:73:C0 X509v3 Authority Key Identifier: keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6c:1f:93:bf:e8:78:9b:d8:3f:af:84:52:52:e6:79:f0:1d: 7f:06:47:ae:76:59:04:37:0f:61:2c:c7:a9:7c:8d:2f:63:c0: fa:5b:87:60:92:f7:99:49:e2:70:3c:5b:50:ba:03:f7:86:dc: 4f:01:aa:21:43:56:66:0c:c7:99:a9:51:f2:77:02:d8:fc:cb: 2e:d1:26:92:af:33:2e:2a:1f:12:f0:bf:c0:8f:2c:c7:42:c4: 04:13:b7:d6:8b:5c:60:b8:30:a7:89:b9:ea:ed:f7:88:69:e6: d8:c6:39:ad:8f:55:5d:3a:32:a3:2b:6a:15:c0:21:c8:4e:b4: 8b:ba:31:bb:76:72:72:0a:8b:a0:e8:40:88:70:5e:aa:64:b1: 0e:3e:6e:cb:c6:ec:80:6d:e5:79:cd:c1:43:97:8d:79:ae:82: 69:65:c9:ef:c7:3b:e1:27:e9:9b:7a:da:3e:b4:44:02:8f:40: 76:bc:73:71:25:28:24:a3:ce:31:8a:76:89:2c:96:a1:6e:b1: dc:78:b9:ef:8e:d4:f6:26:d8:e6:85:ac:3f:0a:07:31:ce:1a: 46:58:0b:35:bd:be:8a:9a:42:a2:6e:7d:88:4b:ae:8e:b5:fc: 5a:4f:ba:e9:fd:7d:f4:4b:21:1f:74:d8:74:84:d0:87:19:3d: d7:50:86:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNBNjcxMTAvBgNVBAUTKDgwRTBBQjE4OUZDRDcwMUVFRTQyQzkyQjkzQzE1QjZG NzQyNDgyNkEwHhcNMjUwNTMxMDE1MzA5WhcNMjUwNjA3MDE1MzA5WjAYMRYwFAYD VQQDEw02ODNhNjEwNi0yOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU4zGBNvJMqBZRrt7ULPknRNwlhrkpMfDaPkoNLGMeBTenjvTO70GtACdIgD iHD3X/4Z5AWNBkW6OHLJ8MVFlWb+60kZow/dOirmFrxZ2L6CtwDNVt2p0+HBJE3p 4j7+S5AgUWODM3LaTk/iXGblqIsVgI9HY0KnU63thl7JUAZ5FB51EmwIdXN1Bh6D hn/oBilFZmjpv655VaLA5H28MWSHYCMxJjbVtkOHnaqSWlAgo3HRmq7f226VcppX HH7Cb8JD12d7XixBv4SngSgErgFZUSLaM4oj1Z0p49WZPVjM5HzeY2OGhRQL1OjY AoKEjfrA99kSiRv0Hp/haWaDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2dJ93M 0fxjHHm4M0QWBFpj03PAMB8GA1UdIwQYMBaAFIDgqxifzXAe7kLJK5PBW290JIJq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0E2Ny9DODA2OTc5MjBE OUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNCN3VRc2tyazhGYmIzUWtn bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPQ3JHSl9OY0I3dVFza3JrOEZiYjNRa2dtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0E2Ny9DODA2OTc5MjBEOUMxMUVEQjhGOUI2MTdDNEY5QUUwMi9nT0NyR0pfTmNC N3VRc2tyazhGYmIzUWtnbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbB+Tv+h4m9g/r4RSUuZ58B1/BkeudlkENw9hLMepfI0vY8D6W4dg kveZSeJwPFtQugP3htxPAaohQ1ZmDMeZqVHydwLY/Msu0SaSrzMuKh8S8L/AjyzH QsQEE7fWi1xguDCnibnq7feIaebYxjmtj1VdOjKjK2oVwCHITrSLujG7dnJyCoug 6ECIcF6qZLEOPm7LxuyAbeV5zcFDl415roJpZcnvxzvhJ+mbeto+tEQCj0B2vHNx JSgko84xinaJLJahbrHceLnvjtT2Jtjmhaw/CgcxzhpGWAs1vb6KmkKibn2IS66O tfxaT7rp/X30SyEfdNh0hNCHGT3XUIYp -----END CERTIFICATE-----Generated at Sat May 31 15:04:30 2025 by rpki-client