$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft File: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json) Hash identifier: O3z37XS2YL+lcWEZmEGX7ATG9QIPLFkcRjJjTgz31Z8= Subject key identifier: 63:D8:FE:E7:5B:55:91:2C:26:F2:96:EA:7B:22:B6:FD:75:F9:7C:ED Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B Certificate issuer: /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft Manifest number: 01BA Signing time: Thu 05 Jun 2025 02:27:43 +0000 Manifest this update: Thu 05 Jun 2025 02:27:42 +0000 Manifest next update: Thu 12 Jun 2025 02:27:42 +0000 Files and hashes: 1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: MwSDJcT+rTCGFsCgR+dHxgc4+D0vdlEQJYvTbtMt9qY=) 2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: Bdihagf5bO3xblXOGDbX+KOVteATqSpIS0l8qRs7zsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Validity Not Before: Jun 5 02:27:42 2025 GMT Not After : Jun 12 02:27:42 2025 GMT Subject: CN=6841009f-dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:95:94:9a:35:7e:35:7a:16:7b:7e:44:74: 1e:9f:44:ec:e2:40:5f:bd:33:01:ac:16:c9:39:39: 74:6a:aa:4b:85:84:44:51:1f:72:84:8b:57:24:28: 8c:cf:e6:de:97:cb:14:75:46:61:57:09:f3:a5:39: 3a:f1:c3:89:b9:78:ae:ce:48:ea:46:d9:3a:8b:f8: b0:24:ff:f1:e8:92:03:bd:0d:2b:db:ec:61:da:27: 9e:d0:45:f4:a1:74:3a:39:9e:17:78:81:15:0a:22: 90:ff:60:0f:8a:c2:ae:e0:80:91:d4:07:7a:23:34: 52:46:96:ed:44:60:8d:af:e5:b6:ae:5e:d4:5d:bc: 1e:8a:f3:7b:0b:b0:d0:49:21:d0:43:2c:fe:45:b3: 5c:d6:24:04:db:b1:c8:1b:b3:87:02:30:d1:de:08: 54:c7:38:99:67:5c:b8:c7:68:3c:71:ba:53:4b:74: 0d:28:34:4f:f7:04:b3:a9:7d:d8:f5:ae:93:50:d8: bd:93:30:4d:98:02:81:15:f0:0f:c5:45:14:0a:a9: 5b:04:36:79:37:07:24:21:3e:91:4d:03:42:57:57: 6e:51:c6:d9:0c:6a:42:bb:45:57:eb:ca:7a:51:6b: ec:b9:75:19:e4:c8:33:22:39:d6:cc:75:ae:26:af: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:FE:E7:5B:55:91:2C:26:F2:96:EA:7B:22:B6:FD:75:F9:7C:ED X509v3 Authority Key Identifier: keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:10:85:38:09:1e:4e:32:43:3f:c6:9a:b7:9f:51:ba:46:d7: 21:51:12:d2:2d:42:62:33:37:4a:f0:fd:8a:29:5d:61:4e:d8: 2c:36:0a:f5:08:1e:c4:0e:38:2e:aa:7c:06:da:75:3a:be:da: 37:8a:c6:13:de:97:e9:72:bb:1c:a7:67:7d:3a:19:7b:10:51: de:74:34:b8:d7:8f:a1:d8:e7:a9:dd:26:9c:2f:23:ae:56:38: 30:b2:8a:0a:03:36:43:31:a9:69:31:93:f8:84:73:37:c8:f8: a3:55:ed:8f:c5:b6:ac:5d:3b:cc:ff:22:ec:ac:48:95:e2:36: 7c:34:c1:f0:3a:c2:a5:39:a6:cf:55:d4:f5:8c:24:65:e0:ad: 40:8f:62:43:f5:84:ed:4c:45:44:1f:3b:68:e2:c6:99:7e:e0: b4:dc:05:4a:f5:ec:74:ac:25:bd:1f:82:19:2d:c0:37:f2:4e: 30:78:6d:96:21:cf:e5:72:15:42:8c:c7:40:69:5d:b0:2c:db: 7d:56:68:67:1f:36:dc:7b:47:d6:39:1d:1d:42:40:a8:84:3d: a3:df:25:40:4b:81:f7:fc:e1:ac:d2:fb:fa:6d:81:78:a3:24: a9:cf:ec:d8:c4:f8:e9:fb:80:9b:d0:4a:61:e4:ea:21:84:17: 43:85:2a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzM0YxMTAvBgNVBAUTKDE5QzZGNkMzRTY2M0Q4M0Q0NDExOTIxOEM0QTI5QzQ4 RjhCQzk1MEIwHhcNMjUwNjA1MDIyNzQyWhcNMjUwNjEyMDIyNzQyWjAYMRYwFAYD VQQDEw02ODQxMDA5Zi1kYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtySVlJo1fjV6Fnt+RHQen0Ts4kBfvTMBrBbJOTl0aqpLhYREUR9yhItXJCiM z+bel8sUdUZhVwnzpTk68cOJuXiuzkjqRtk6i/iwJP/x6JIDvQ0r2+xh2iee0EX0 oXQ6OZ4XeIEVCiKQ/2APisKu4ICR1Ad6IzRSRpbtRGCNr+W2rl7UXbweivN7C7DQ SSHQQyz+RbNc1iQE27HIG7OHAjDR3ghUxziZZ1y4x2g8cbpTS3QNKDRP9wSzqX3Y 9a6TUNi9kzBNmAKBFfAPxUUUCqlbBDZ5NwckIT6RTQNCV1duUcbZDGpCu0VX68p6 UWvsuXUZ5MgzIjnWzHWuJq95nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPY/udb VZEsJvKW6nsitv11+XztMB8GA1UdIwQYMBaAFBnG9sPmY9g9RBGSGMSinEj4vJUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjMzRi9FRUQ4RUY0NjlB RDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJEMUVFWklZeEtLY1NQaThs UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djYjJ3LVpqMkQxRUVaSVl4S0tjU1BpOGxRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMzRi9FRUQ4RUY0NjlBRDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJE MUVFWklZeEtLY1NQaThsUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZEIU4CR5OMkM/xpq3n1G6RtchURLSLUJiMzdK8P2KKV1hTtgsNgr1 CB7EDjguqnwG2nU6vto3isYT3pfpcrscp2d9Ohl7EFHedDS414+h2Oep3SacLyOu VjgwsooKAzZDMalpMZP4hHM3yPijVe2PxbasXTvM/yLsrEiV4jZ8NMHwOsKlOabP VdT1jCRl4K1Aj2JD9YTtTEVEHzto4saZfuC03AVK9ex0rCW9H4IZLcA38k4weG2W Ic/lchVCjMdAaV2wLNt9VmhnHzbce0fWOR0dQkCohD2j3yVAS4H3/OGs0vv6bYF4 oySpz+zYxPjp+4Cb0Eph5OohhBdDhSpq -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:04 2025 by rpki-client