$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: HzhpjEj+IOXGcMyvgmhYrlsxp5/SQ5kOhY3ZLr1JRYI= Subject key identifier: BE:07:B7:84:F7:B1:4D:9D:B3:45:71:12:92:A0:36:1B:F5:18:4F:9F Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 060C Signing time: Sat 31 May 2025 22:44:39 +0000 Manifest this update: Sat 31 May 2025 22:44:39 +0000 Manifest next update: Sat 07 Jun 2025 22:44:39 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: 8hEwAuln6EuVz9bfPzZvOzejsCyx2vTZTnppMkYguKo=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: May 31 22:44:39 2025 GMT Not After : Jun 7 22:44:39 2025 GMT Subject: CN=683b8657-be21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:13:67:d1:9a:8a:b8:85:cf:8d:5b:d5:69: b2:91:b4:df:a2:84:14:4f:35:87:8f:8f:7f:f5:9d: 4d:0a:cc:49:d8:42:ad:58:86:55:44:42:76:44:a3: 72:b0:c0:30:e6:5e:57:83:c5:02:4b:5b:e4:40:c1: 1c:34:be:37:97:c1:27:54:36:9b:a8:0e:d1:59:98: 1f:37:bc:b3:97:cb:5b:71:e3:2f:87:c9:83:3b:6c: 7a:a2:df:a4:40:cc:d1:9e:89:a3:30:17:41:71:db: 0e:7c:13:48:1d:b5:8d:a9:60:33:2d:c4:39:a4:78: fd:40:74:91:1a:b3:0e:f8:b0:1e:03:a0:07:9a:54: b4:e7:d9:56:02:a9:c5:32:35:31:46:16:d0:cd:82: 76:4e:0a:8a:3e:ad:fd:7c:16:d5:8f:92:ec:0c:4e: 9a:43:c4:02:19:c5:da:74:2d:fc:fa:c3:9d:5a:85: b3:ef:fc:50:f5:50:34:9a:ec:8f:ac:bc:5e:13:24: e7:ae:d8:0b:17:06:b2:e4:fb:72:14:38:a0:81:03: 46:10:30:17:c5:59:59:3e:e1:ff:d2:da:cd:39:2e: 62:fa:65:fe:01:5b:5e:cb:08:3c:55:56:d6:b7:ef: 25:a0:19:9f:2c:cb:d3:19:d5:11:73:17:2b:fc:af: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:B7:84:F7:B1:4D:9D:B3:45:71:12:92:A0:36:1B:F5:18:4F:9F X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b8:4d:b4:b8:ec:5b:ca:b5:65:15:7b:79:df:b6:4f:ab:96: b6:6b:3d:12:d9:54:e8:d3:94:69:b6:62:82:85:9b:05:85:35: 99:1b:83:a0:e5:71:9f:75:8c:5f:bd:60:2d:d6:d9:27:fb:0c: 5a:5e:1a:25:06:43:2f:6d:8a:08:a3:2e:6e:b2:4c:ce:2f:3f: 60:17:21:d0:03:c1:86:4d:ae:7e:02:0a:74:8a:3f:27:b9:86: 4d:22:ff:f4:5f:e9:86:6d:c8:f4:c3:5e:14:d6:45:a6:9d:2c: 74:2b:cd:2c:38:88:1d:aa:56:09:01:f7:34:4f:0c:c1:51:74: 65:46:a2:71:e7:a2:48:30:4d:f7:03:65:6f:91:33:c5:c7:4e: ca:8f:b2:81:fe:de:2c:e1:90:47:41:e6:1e:97:ed:57:78:dc: eb:5a:bb:47:d4:94:0e:97:b0:9f:5c:70:34:b5:f9:fa:ef:63: 31:aa:1c:09:7d:d5:8a:a3:29:07:96:81:5d:39:0e:d4:e8:5e: 34:f1:43:a4:d9:c6:7a:b8:ae:f0:12:b8:0d:98:bd:de:c3:38: 93:4a:ce:2c:ff:83:ad:54:9c:b8:50:75:c9:33:c2:9c:6c:76: 53:38:0d:e4:c3:d5:17:64:b9:b5:6f:94:df:4b:6d:3d:8e:fa: 63:c0:d6:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUwNTMxMjI0NDM5WhcNMjUwNjA3MjI0NDM5WjAYMRYwFAYD VQQDEw02ODNiODY1Ny1iZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPkTZ9GairiFz41b1WmykbTfooQUTzWHj49/9Z1NCsxJ2EKtWIZVREJ2RKNy sMAw5l5Xg8UCS1vkQMEcNL43l8EnVDabqA7RWZgfN7yzl8tbceMvh8mDO2x6ot+k QMzRnomjMBdBcdsOfBNIHbWNqWAzLcQ5pHj9QHSRGrMO+LAeA6AHmlS059lWAqnF MjUxRhbQzYJ2TgqKPq39fBbVj5LsDE6aQ8QCGcXadC38+sOdWoWz7/xQ9VA0muyP rLxeEyTnrtgLFway5PtyFDiggQNGEDAXxVlZPuH/0trNOS5i+mX+AVteywg8VVbW t+8loBmfLMvTGdURcxcr/K8yrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4Ht4T3 sU2ds0VxEpKgNhv1GE+fMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBauE20uOxbyrVlFXt537ZPq5a2az0S2VTo05RptmKChZsFhTWZG4Og 5XGfdYxfvWAt1tkn+wxaXholBkMvbYoIoy5uskzOLz9gFyHQA8GGTa5+Agp0ij8n uYZNIv/0X+mGbcj0w14U1kWmnSx0K80sOIgdqlYJAfc0TwzBUXRlRqJx56JIME33 A2VvkTPFx07Kj7KB/t4s4ZBHQeYel+1XeNzrWrtH1JQOl7CfXHA0tfn672MxqhwJ fdWKoykHloFdOQ7U6F408UOk2cZ6uK7wErgNmL3ewziTSs4s/4OtVJy4UHXJM8Kc bHZTOA3kw9UXZLm1b5TfS209jvpjwNZm -----END CERTIFICATE-----Generated at Mon Jun 2 20:24:35 2025 by rpki-client