$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: yzIGu8PAOLnAQyxZPdxSZL8bT2Np8+9rTsvwEC5XY2A= Subject key identifier: A0:94:0C:58:C3:CB:22:42:A7:E2:9F:71:04:9C:C0:61:D1:05:7C:9A Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 0C Signing time: Sun 01 Jun 2025 07:47:42 +0000 Manifest this update: Sun 01 Jun 2025 07:47:41 +0000 Manifest next update: Sun 08 Jun 2025 07:47:41 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: jNb/zBDLq92rhKweXjbPrGkvY/jEotUvt6qSUwZQ6Jk=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Jun 1 07:47:41 2025 GMT Not After : Jun 8 07:47:41 2025 GMT Subject: CN=683c059d-a083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:d1:51:d6:00:74:03:3c:c1:50:19:63:ca: b3:8a:15:27:9f:cf:23:48:b7:8b:b9:12:07:1e:0e: ce:df:19:b2:b4:aa:50:15:77:91:98:cb:ce:3c:ca: bd:1f:eb:cf:06:72:dc:e6:56:9c:89:48:4f:36:9f: 0b:01:b5:36:fd:2e:db:29:5f:4a:d9:b8:6b:0c:e2: d5:22:7f:93:90:2c:ca:a3:ba:d3:e2:73:17:86:18: fe:9b:63:71:2f:a3:3e:8f:cf:7c:2c:ff:b0:d3:5e: 89:fc:ef:3f:24:ec:7d:9e:22:2f:5d:1b:25:07:86: 11:e4:fd:ed:a3:e1:c1:1e:b9:bb:98:bf:c2:86:16: a9:23:d9:fa:6c:fd:fe:a4:77:25:90:28:b6:01:28: 85:1a:16:af:34:b1:ad:a5:ff:62:f1:94:ce:69:a3: f7:f7:ca:a1:a1:34:54:5e:8a:a7:a0:a1:05:a4:ff: 15:8c:18:31:45:17:9e:30:15:e6:e1:9e:3f:e7:ce: 0b:51:d6:3f:ba:a7:bf:10:39:85:4c:a2:8a:60:19: a7:12:2d:b0:01:8d:6e:47:37:37:bb:87:40:fa:9c: bd:d5:f1:4f:f9:71:24:a0:08:d3:ed:01:6f:ef:51: ce:68:44:20:08:74:5a:d4:b3:16:62:04:27:4a:0b: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:0C:58:C3:CB:22:42:A7:E2:9F:71:04:9C:C0:61:D1:05:7C:9A X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7b:18:56:0d:04:9a:9a:65:db:bd:b1:0d:80:1a:56:fa:08: 05:8b:c6:20:db:44:b9:64:a7:74:5a:20:b6:0d:7b:53:5a:4b: 2a:f5:03:da:14:e7:6c:e7:6f:0f:95:4d:ff:d4:27:5f:59:d2: 70:4e:ea:e3:84:89:2b:84:d2:23:2f:ca:b3:e7:88:74:bd:66: 34:92:4f:b6:bd:de:d7:47:5f:57:3b:47:46:2c:74:d6:48:3c: e2:53:d3:ed:19:18:fd:66:b2:00:41:7e:93:4c:07:7e:26:5f: 2b:0c:5e:cb:e9:32:56:1c:76:29:5e:a3:7c:97:49:fd:f1:96: ae:e0:b7:fb:81:9d:c1:08:8a:64:e1:ec:a6:cb:ef:bc:85:a0: 3c:cb:09:a7:6c:a0:f4:ae:b0:68:f7:df:bc:69:bd:8e:ea:8b: db:4b:1b:71:51:99:df:fe:65:b9:f4:ea:0a:9b:43:bc:db:75: e8:f3:39:67:45:b0:1f:b8:5a:37:b2:4b:8b:34:c7:ae:e5:d2: 70:54:61:83:8e:d5:b7:6e:a5:f7:a4:d9:ff:fa:8a:f8:04:84: 28:99:24:3c:da:b0:6d:8e:fe:ac:cf:17:b1:bb:ee:7f:66:81: 79:a6:bb:af:15:f2:ec:46:24:a1:70:b0:73:7f:0e:ab:53:89: 86:cc:32:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA2MDEwNzQ3NDFaFw0yNTA2MDgwNzQ3NDFaMBgxFjAUBgNV BAMTDTY4M2MwNTlkLWEwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF5dFR1gB0AzzBUBljyrOKFSefzyNIt4u5EgceDs7fGbK0qlAVd5GYy848yr0f 688GctzmVpyJSE82nwsBtTb9LtspX0rZuGsM4tUif5OQLMqjutPicxeGGP6bY3Ev oz6Pz3ws/7DTXon87z8k7H2eIi9dGyUHhhHk/e2j4cEeubuYv8KGFqkj2fps/f6k dyWQKLYBKIUaFq80sa2l/2LxlM5po/f3yqGhNFReiqegoQWk/xWMGDFFF54wFebh nj/nzgtR1j+6p78QOYVMoopgGacSLbABjW5HNze7h0D6nL3V8U/5cSSgCNPtAW/v Uc5oRCAIdFrUsxZiBCdKC7cjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoJQMWMPL IkKn4p9xBJzAYdEFfJowHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF17GFYNBJqaZdu9sQ2AGlb6CAWLxiDbRLlkp3RaILYNe1NaSyr1A9oU 52znbw+VTf/UJ19Z0nBO6uOEiSuE0iMvyrPniHS9ZjSST7a93tdHX1c7R0YsdNZI POJT0+0ZGP1msgBBfpNMB34mXysMXsvpMlYcdileo3yXSf3xlq7gt/uBncEIimTh 7KbL77yFoDzLCadsoPSusGj337xpvY7qi9tLG3FRmd/+Zbn06gqbQ7zbdejzOWdF sB+4WjeyS4s0x67l0nBUYYOO1bdupfek2f/6ivgEhCiZJDzasG2O/qzPF7G77n9m gXmmu68V8uxGJKFwsHN/DqtTiYbMMk4= -----END CERTIFICATE-----Generated at Mon Jun 2 22:15:08 2025 by rpki-client