$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: OMS50dI6HnFJ3Z08XG4gVIJByfxgHsPGMFZ353UG8Ok= Subject key identifier: C7:4B:65:8E:F3:89:1D:7B:BF:D1:D4:B3:5D:62:91:0C:39:C6:9B:44 Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: CF Signing time: Sat 31 May 2025 05:16:02 +0000 Manifest this update: Sat 31 May 2025 05:16:02 +0000 Manifest next update: Sat 07 Jun 2025 05:16:02 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: GqxaPwU2VlWyGSRregia1o/D8VvZZmkXvjeq0uOWiVE=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: May 31 05:16:02 2025 GMT Not After : Jun 7 05:16:02 2025 GMT Subject: CN=683a9092-1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:c2:bc:36:aa:0e:dd:85:84:f5:ae:7c:d3: 2b:cc:a1:56:c6:4c:d8:b9:6c:a0:d5:c2:23:27:fc: 69:fa:f0:06:3e:c2:b1:40:7e:e3:56:91:3c:ba:0f: 73:b8:fa:6f:fd:42:c3:31:d1:33:1b:2f:c6:a3:52: c7:9b:b6:94:30:e0:54:fd:db:46:aa:65:d2:cf:f8: 2c:c6:e7:43:68:1a:c2:83:dd:24:b9:04:4c:fe:c8: c6:e6:7e:d0:a3:03:0f:c9:2b:dd:83:e7:03:f2:7b: 31:9c:9a:ac:9c:41:c5:b1:67:24:33:6b:ab:6d:15: 16:89:bb:87:d3:99:e1:0b:65:7a:9b:d1:7a:c1:f7: 36:b6:de:1b:58:3b:22:ca:51:7b:8e:7d:70:97:a4: d2:21:ab:2c:ee:6c:13:3d:89:56:30:a1:1c:e6:0f: dd:89:f4:2e:df:c0:94:8d:d4:90:a4:64:33:db:37: de:7d:ee:e2:29:2b:9c:20:70:3f:1c:74:e4:66:0c: 38:6c:86:f7:3f:0b:a9:6e:f4:56:42:87:fa:24:a0: 8c:fd:27:ea:42:86:6c:98:4c:72:22:94:47:b7:1f: 33:dc:bb:3e:f4:18:fa:64:63:f0:b8:80:fa:a9:d6: a5:c6:4a:17:9f:5f:3d:f8:8a:1f:59:a2:a8:25:e1: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4B:65:8E:F3:89:1D:7B:BF:D1:D4:B3:5D:62:91:0C:39:C6:9B:44 X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d5:ca:da:79:23:86:8f:b3:d2:34:1a:e3:10:cf:3c:fb:95: 9c:a7:0a:c4:69:f2:59:ce:1e:9d:56:39:13:b4:05:05:e0:0e: 39:cf:a7:0f:59:7b:15:3a:8f:b1:d9:8d:4b:e5:c1:95:96:4a: 96:18:49:f8:21:e2:6e:f4:e9:7d:8a:68:36:91:c7:fb:48:7b: f1:0a:74:56:33:92:af:c3:9f:84:db:0b:aa:62:8d:1c:c5:36: da:80:e5:28:d2:2b:d6:4a:2d:e2:83:20:ea:1f:9a:4c:4e:ee: a1:d9:2a:16:73:13:b0:d9:d6:37:8f:b6:4f:4e:37:32:b7:48: 80:4a:44:fd:4e:6c:ad:47:99:d7:2a:01:c6:a2:e3:6d:df:e8: 94:dc:5f:12:cb:f4:a1:24:b5:97:a5:02:a6:fb:7f:e7:58:01: 97:39:c0:06:40:96:52:ed:ac:76:4a:e3:6c:f4:ee:40:dc:48: f9:00:52:29:73:e5:98:d1:76:f0:05:9c:80:bc:9e:2b:bf:e3: dc:9d:1a:b9:6e:09:04:55:4a:82:06:3b:93:e5:66:27:c5:ed: dd:7e:6b:ad:e0:67:c5:7a:3b:c6:20:24:1f:52:7c:be:36:37: 7c:ca:5e:1b:85:69:98:ce:2f:7f:0f:91:83:24:90:b1:d3:05: 97:d7:1d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUwNTMxMDUxNjAyWhcNMjUwNjA3MDUxNjAyWjAYMRYwFAYD VQQDEw02ODNhOTA5Mi0xMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA617CvDaqDt2FhPWufNMrzKFWxkzYuWyg1cIjJ/xp+vAGPsKxQH7jVpE8ug9z uPpv/ULDMdEzGy/Go1LHm7aUMOBU/dtGqmXSz/gsxudDaBrCg90kuQRM/sjG5n7Q owMPySvdg+cD8nsxnJqsnEHFsWckM2urbRUWibuH05nhC2V6m9F6wfc2tt4bWDsi ylF7jn1wl6TSIass7mwTPYlWMKEc5g/difQu38CUjdSQpGQz2zfefe7iKSucIHA/ HHTkZgw4bIb3PwupbvRWQof6JKCM/SfqQoZsmExyIpRHtx8z3Ls+9Bj6ZGPwuID6 qdalxkoXn189+IofWaKoJeEpgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdLZY7z iR17v9HUs11ikQw5xptEMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX1craeSOGj7PSNBrjEM88+5WcpwrEafJZzh6dVjkTtAUF4A45z6cP WXsVOo+x2Y1L5cGVlkqWGEn4IeJu9Ol9img2kcf7SHvxCnRWM5Kvw5+E2wuqYo0c xTbagOUo0ivWSi3igyDqH5pMTu6h2SoWcxOw2dY3j7ZPTjcyt0iASkT9TmytR5nX KgHGouNt3+iU3F8Sy/ShJLWXpQKm+3/nWAGXOcAGQJZS7ax2SuNs9O5A3Ej5AFIp c+WY0XbwBZyAvJ4rv+PcnRq5bgkEVUqCBjuT5WYnxe3dfmut4GfFejvGICQfUny+ Njd8yl4bhWmYzi9/D5GDJJCx0wWX1x2A -----END CERTIFICATE-----Generated at Sat May 31 14:49:41 2025 by rpki-client