$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft File: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json) Hash identifier: 8KIRtPW551/Yjr8KjIlKjIN/Z2nzfmHjCSRcqi4YPKQ= Subject key identifier: C1:12:92:F4:EC:71:E1:39:46:18:37:A5:F5:51:D3:90:DB:A4:C9:9F Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 Certificate issuer: /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft Manifest number: 04C6 Signing time: Tue 01 Jul 2025 00:19:22 +0000 Manifest this update: Tue 01 Jul 2025 00:19:22 +0000 Manifest next update: Tue 08 Jul 2025 00:19:22 +0000 Files and hashes: 1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: ri2JVhKcARno/KZuE1CC8aVzuEcQ1DiA/IQah+EmPRc=) 2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: en/5+Is2njNPEHjZ9D4KmksDt8McYOOkdTXWUEGbh1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156 Validity Not Before: Jul 1 00:19:22 2025 GMT Not After : Jul 8 00:19:22 2025 GMT Subject: CN=6863298a-db5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:5d:a7:5f:0b:68:3d:a7:4a:15:46:ba:3a: a7:0c:2f:c9:79:d3:6e:35:20:1f:b8:21:62:1d:2a: 94:3b:da:df:3f:46:bc:06:b4:42:ec:3c:b2:df:a8: 7f:d0:8b:cc:fc:d9:8c:c9:e8:4f:81:1b:41:76:1d: 58:02:76:2a:9f:a0:b2:d1:bf:77:72:11:52:0f:b5: ad:aa:83:c5:7e:06:f6:e0:fe:3f:64:bd:f4:a4:a2: 05:b8:87:38:05:a7:87:9b:05:e5:57:27:c7:9e:66: cc:0b:63:69:80:85:19:b2:5a:e7:62:b8:17:98:32: 7a:f3:7e:d3:30:8a:47:72:08:0d:69:a4:40:f7:8a: 39:bb:5e:57:64:06:2e:54:e7:37:1f:21:f2:ab:6f: 96:20:34:dd:27:39:e3:a2:ed:2a:66:09:d0:fb:d6: f2:c2:61:8b:bc:ab:be:07:34:e3:60:60:23:e0:95: 52:50:7b:8a:bd:6b:b5:2e:23:ed:43:68:08:f4:3e: 10:03:7a:0a:a3:cf:b5:e4:45:68:e4:66:5b:13:40: 63:f4:bb:e0:48:29:c6:95:71:5e:85:2d:10:55:f0: d3:17:3b:87:b1:89:4b:09:72:de:d1:4b:12:d3:85: ee:ff:21:ae:66:a9:22:d8:0e:2f:5c:a2:83:bb:d3: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:12:92:F4:EC:71:E1:39:46:18:37:A5:F5:51:D3:90:DB:A4:C9:9F X509v3 Authority Key Identifier: keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:10:df:fb:04:8b:bb:4e:6f:44:d8:ca:be:01:2b:9b:36:48: 9e:7c:17:57:a8:f6:62:e3:c3:00:62:32:ad:79:c5:3f:9e:51: ea:1e:5f:bd:d9:a6:9f:e9:2e:bb:5c:b8:8f:41:ff:78:da:59: 9c:91:32:f4:6c:f9:1e:49:e1:0a:fc:8b:29:b6:e9:b3:c1:59: c5:87:9f:d5:0e:9c:cc:e1:45:8e:15:cd:6e:a5:85:02:5b:fa: 52:c0:26:8b:30:da:e7:b8:c6:64:d8:2b:46:44:e1:a7:dd:aa: fc:cf:43:26:e7:81:ca:af:71:8e:de:95:94:3e:8d:51:84:23: e4:d2:0f:cf:57:9e:94:de:e1:86:cd:f2:38:57:71:70:d5:f1: c2:e7:8f:fc:ed:17:39:fd:ca:21:5d:fb:a6:ce:16:7e:6d:d1: 83:49:88:0c:b5:ae:07:92:f9:36:48:60:90:77:b5:18:c0:5e: 67:ed:ea:91:d6:e0:96:19:88:29:52:88:33:06:bb:ac:b3:3f: 5c:7e:ce:d8:4a:db:3a:cd:23:a0:ae:b5:0e:08:19:99:df:de: 71:86:7b:a4:94:5a:48:82:b4:de:bd:61:ac:8a:c7:6b:e2:b7: ef:54:4d:9b:14:3e:55:f0:57:fa:7f:9a:79:73:63:7f:6a:6a: 64:98:37:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw MjU1OTYxNTYwHhcNMjUwNzAxMDAxOTIyWhcNMjUwNzA4MDAxOTIyWjAYMRYwFAYD VQQDEw02ODYzMjk4YS1kYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonBdp18LaD2nShVGujqnDC/JedNuNSAfuCFiHSqUO9rfP0a8BrRC7Dyy36h/ 0IvM/NmMyehPgRtBdh1YAnYqn6Cy0b93chFSD7WtqoPFfgb24P4/ZL30pKIFuIc4 BaeHmwXlVyfHnmbMC2NpgIUZslrnYrgXmDJ6837TMIpHcggNaaRA94o5u15XZAYu VOc3HyHyq2+WIDTdJznjou0qZgnQ+9bywmGLvKu+BzTjYGAj4JVSUHuKvWu1LiPt Q2gI9D4QA3oKo8+15EVo5GZbE0Bj9LvgSCnGlXFehS0QVfDTFzuHsYlLCXLe0UsS 04Xu/yGuZqki2A4vXKKDu9O8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMESkvTs ceE5Rhg3pfVR05DbpMmfMB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkxQy9CQzI2M0E4RTJCRDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVD SVlxaV9IYjJGYlFDVlpZVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdEN/7BIu7Tm9E2Mq+ASubNkiefBdXqPZi48MAYjKtecU/nlHqHl+9 2aaf6S67XLiPQf942lmckTL0bPkeSeEK/IsptumzwVnFh5/VDpzM4UWOFc1upYUC W/pSwCaLMNrnuMZk2CtGROGn3ar8z0Mm54HKr3GO3pWUPo1RhCPk0g/PV56U3uGG zfI4V3Fw1fHC54/87Rc5/cohXfumzhZ+bdGDSYgMta4Hkvk2SGCQd7UYwF5n7eqR 1uCWGYgpUogzBrussz9cfs7YSts6zSOgrrUOCBmZ395xhnuklFpIgrTevWGsisdr 4rfvVE2bFD5V8Ff6f5p5c2N/ampkmDdc -----END CERTIFICATE-----Generated at Tue Jul 1 19:51:38 2025 by rpki-client