$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: JNCRgb5ubS3H8mjco2sENzLTPw2hdU9LWI7vcBwwadQ= Subject key identifier: 11:F9:E2:30:5D:40:84:59:77:9A:8C:44:58:2D:FC:FE:0A:F1:9E:D6 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: D3 Signing time: Sat 31 May 2025 05:14:40 +0000 Manifest this update: Sat 31 May 2025 05:14:40 +0000 Manifest next update: Sat 07 Jun 2025 05:14:40 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: Ms2dwjspk9v117oGInikxd7eM56tXK2FS9d6jXVA8Y0=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: May 31 05:14:40 2025 GMT Not After : Jun 7 05:14:40 2025 GMT Subject: CN=683a9040-2e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:84:4f:ce:ed:a3:f7:ec:ef:2d:dc:27:5b: 3d:2d:e7:0f:25:a8:a2:17:75:5f:bc:d9:6b:13:71: f0:e4:e7:03:1e:ec:d2:56:9f:08:55:b4:bb:70:7d: b9:48:8f:74:43:56:aa:21:92:4e:80:e1:54:6a:ef: c5:f8:18:d6:fa:33:13:48:5d:57:c6:9f:9c:ac:0f: 60:f9:4a:2d:41:ff:f6:7a:e2:fa:6b:54:20:3f:b9: 5f:2e:c9:3c:d9:5c:81:41:27:af:b9:6c:7f:17:3a: b8:04:d8:52:f2:29:13:47:b0:51:41:e0:e0:74:d6: 5e:54:2d:a9:ac:f2:df:c8:75:70:0f:46:31:d5:b3: 68:a5:93:5a:4f:9a:29:a2:16:26:0f:6b:04:26:a0: 87:61:c9:86:fe:94:2b:d0:3e:32:bb:05:06:bd:25: ae:f5:e9:21:b2:27:2e:f9:33:87:0f:fe:67:b5:65: 7a:ad:43:c8:d9:ed:4b:bf:a2:d0:8e:6b:8c:3a:85: c8:58:2d:a3:ce:60:d8:96:8f:d9:98:76:b9:07:29: f5:73:04:4b:b8:16:8c:7b:83:18:f5:5a:0b:44:28: d7:e2:29:f0:b3:18:13:6e:c1:7a:99:13:dd:66:bf: 1f:2f:15:0a:5d:f6:43:f7:f1:d0:72:98:85:46:5a: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:E2:30:5D:40:84:59:77:9A:8C:44:58:2D:FC:FE:0A:F1:9E:D6 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:63:71:67:f4:e9:86:25:30:47:05:9d:79:96:ab:99:4a:51: df:03:ba:e8:fd:1f:9f:de:8d:b8:1f:53:8a:cd:71:18:36:22: 15:93:51:b7:44:eb:a6:f9:35:c9:03:d4:ac:de:b2:ff:9c:af: ae:7f:16:b0:35:62:56:67:3d:ff:e8:a4:5d:c6:8d:29:84:1f: da:a2:bc:83:3b:a4:0f:78:88:57:b9:81:f6:28:4c:4a:25:f3: fc:4e:05:8f:79:53:05:ef:8c:07:dd:4e:5c:6b:b4:26:55:92: fb:3c:87:28:8e:05:a0:42:7d:65:e3:a1:2b:a4:ff:ed:7e:f4: ef:86:9f:51:52:66:24:55:6c:f4:88:c0:79:d1:d7:e2:68:f8: ba:07:23:4a:69:bd:1f:89:39:0f:6c:31:48:07:f4:69:03:e3: 81:be:6c:5a:69:97:a0:6e:7a:47:59:da:66:9c:3b:57:a3:39: 98:9f:d7:03:c6:98:b9:71:2f:53:b0:f9:c4:89:d5:b3:22:c1: 87:03:08:cd:9f:0c:42:0c:04:0f:72:83:ad:50:ed:85:7a:74: d9:73:03:e7:d4:56:14:a1:dd:7c:8d:e0:c9:b6:09:16:ae:6d: b4:e6:e8:36:b7:e2:13:50:3e:fc:7f:8c:23:c3:46:a0:07:a0: 34:70:c7:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUwNTMxMDUxNDQwWhcNMjUwNjA3MDUxNDQwWjAYMRYwFAYD VQQDEw02ODNhOTA0MC0yZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgyET87to/fs7y3cJ1s9LecPJaiiF3VfvNlrE3Hw5OcDHuzSVp8IVbS7cH25 SI90Q1aqIZJOgOFUau/F+BjW+jMTSF1Xxp+crA9g+UotQf/2euL6a1QgP7lfLsk8 2VyBQSevuWx/Fzq4BNhS8ikTR7BRQeDgdNZeVC2prPLfyHVwD0Yx1bNopZNaT5op ohYmD2sEJqCHYcmG/pQr0D4yuwUGvSWu9ekhsicu+TOHD/5ntWV6rUPI2e1Lv6LQ jmuMOoXIWC2jzmDYlo/ZmHa5Byn1cwRLuBaMe4MY9VoLRCjX4inwsxgTbsF6mRPd Zr8fLxUKXfZD9/HQcpiFRlqGpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH54jBd QIRZd5qMRFgt/P4K8Z7WMB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTk4Ny9GMEZBNEZBNkZDMjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVB Q3I2NHhFaWdueGxma1RuaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeY3Fn9OmGJTBHBZ15lquZSlHfA7ro/R+f3o24H1OKzXEYNiIVk1G3 ROum+TXJA9Ss3rL/nK+ufxawNWJWZz3/6KRdxo0phB/aoryDO6QPeIhXuYH2KExK JfP8TgWPeVMF74wH3U5ca7QmVZL7PIcojgWgQn1l46ErpP/tfvTvhp9RUmYkVWz0 iMB50dfiaPi6ByNKab0fiTkPbDFIB/RpA+OBvmxaaZegbnpHWdpmnDtXozmYn9cD xpi5cS9TsPnEidWzIsGHAwjNnwxCDAQPcoOtUO2FenTZcwPn1FYUod18jeDJtgkW rm205ug2t+ITUD78f4wjw0agB6A0cMeI -----END CERTIFICATE-----Generated at Sat May 31 17:11:25 2025 by rpki-client