$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: sKubk9vfvs7sGke3nNzAfgIn5NziFVnB4GZ2Zl7hp6o= Subject key identifier: AD:57:85:82:AA:66:30:97:51:19:FC:EB:EE:61:55:64:37:77:A9:3B Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: BC Signing time: Sat 07 Jun 2025 05:24:29 +0000 Manifest this update: Sat 07 Jun 2025 05:24:29 +0000 Manifest next update: Sat 14 Jun 2025 05:24:29 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: EMzHheTzflXi0zhOCEGfm6xh+A6BIg7k8QbEPqqZ2cg=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Jun 7 05:24:29 2025 GMT Not After : Jun 14 05:24:29 2025 GMT Subject: CN=6843cd0d-28eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:50:26:10:20:41:fc:a1:54:89:6b:66:89: 6e:ad:94:73:9b:19:23:b7:df:93:15:68:ee:22:17: 37:d6:90:3f:ff:2e:30:f7:b5:af:80:a0:be:fa:53: 3a:3a:31:90:c9:4e:c2:fb:be:5f:9f:45:24:be:3a: 69:09:69:54:fc:a8:35:79:14:d9:19:82:f5:a3:1a: bc:96:ef:55:08:29:38:b5:7d:e7:bc:10:16:09:97: d0:60:8c:b5:3c:4e:8b:2f:3b:76:13:3e:73:63:d8: b7:d2:d8:1d:8a:b7:ff:ea:df:0f:96:a0:2b:55:a2: 6d:f3:b3:d4:03:8b:fe:68:03:39:54:9b:a1:9e:bb: 05:3a:51:fa:a0:2f:47:a2:18:4c:4d:da:bf:ff:e2: 7f:e9:14:cf:07:66:d8:14:fd:16:58:3f:ba:23:8f: 0c:1a:0a:c8:7f:57:08:58:d4:b6:35:3d:22:58:f5: bf:67:47:e5:2b:1a:89:54:70:14:cc:3f:64:1a:0b: 4f:e3:b1:e5:11:6d:8a:f9:90:34:b2:22:af:c6:8b: 59:72:e1:32:ff:d7:49:cb:9b:a0:23:a2:65:c7:7e: 6c:dd:5b:2c:fb:84:49:c1:53:41:d8:47:40:44:be: 11:ff:42:7b:98:dd:b2:f1:f6:fe:42:8a:ca:a2:b4: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:57:85:82:AA:66:30:97:51:19:FC:EB:EE:61:55:64:37:77:A9:3B X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d2:19:b6:d2:14:b7:d5:b0:e2:2c:d6:5b:04:8f:07:b0:d4: f0:03:d4:f0:f5:b8:1b:77:1c:ac:f0:2d:fc:31:fd:9b:74:6f: 4d:83:db:3b:7b:b6:42:cc:6e:8a:68:32:44:ca:82:4e:a7:e5: 1b:75:1a:27:a4:0a:2b:25:27:58:70:5f:f0:e2:d7:3f:fb:82: e9:92:31:19:0b:65:42:f8:c3:35:21:4d:ad:e9:3f:ff:02:b6: 29:fe:ab:37:18:78:0b:40:52:14:3c:2a:a4:d5:8f:91:2e:0c: ad:79:95:fb:14:8a:08:38:88:cb:97:4a:ee:94:14:18:0a:42: c5:90:0b:6d:ec:4e:bb:1e:44:ab:04:2e:87:37:64:aa:85:67: cb:2a:40:63:5b:ca:d6:83:88:84:d1:ed:34:3f:95:3b:e0:e0: e3:58:82:b0:53:04:2e:5d:28:21:07:8a:33:f5:9a:84:52:c6: d3:a4:71:4f:0c:e5:a8:45:f1:db:02:a8:b3:d5:d4:b1:5c:0e: 3b:03:42:0c:ae:44:78:a3:c6:78:d6:b4:51:0c:bd:2e:57:1b: 52:4d:68:8e:4f:b1:10:37:60:e2:0d:69:12:3c:75:d7:c3:b1: e1:b1:96:db:72:50:39:d7:14:b3:b0:f8:2e:12:df:e5:d9:23: 9d:f9:af:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUwNjA3MDUyNDI5WhcNMjUwNjE0MDUyNDI5WjAYMRYwFAYD VQQDEw02ODQzY2QwZC0yOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjVQJhAgQfyhVIlrZolurZRzmxkjt9+TFWjuIhc31pA//y4w97WvgKC++lM6 OjGQyU7C+75fn0UkvjppCWlU/Kg1eRTZGYL1oxq8lu9VCCk4tX3nvBAWCZfQYIy1 PE6LLzt2Ez5zY9i30tgdirf/6t8PlqArVaJt87PUA4v+aAM5VJuhnrsFOlH6oC9H ohhMTdq//+J/6RTPB2bYFP0WWD+6I48MGgrIf1cIWNS2NT0iWPW/Z0flKxqJVHAU zD9kGgtP47HlEW2K+ZA0siKvxotZcuEy/9dJy5ugI6Jlx35s3Vss+4RJwVNB2EdA RL4R/0J7mN2y8fb+QorKorRczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1XhYKq ZjCXURn86+5hVWQ3d6k7MB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT0hm20hS31bDiLNZbBI8HsNTwA9Tw9bgbdxys8C38Mf2bdG9Ng9s7 e7ZCzG6KaDJEyoJOp+UbdRonpAorJSdYcF/w4tc/+4LpkjEZC2VC+MM1IU2t6T// ArYp/qs3GHgLQFIUPCqk1Y+RLgyteZX7FIoIOIjLl0rulBQYCkLFkAtt7E67HkSr BC6HN2SqhWfLKkBjW8rWg4iE0e00P5U74ODjWIKwUwQuXSghB4oz9ZqEUsbTpHFP DOWoRfHbAqiz1dSxXA47A0IMrkR4o8Z41rRRDL0uVxtSTWiOT7EQN2DiDWkSPHXX w7HhsZbbclA51xSzsPguEt/l2SOd+a+h -----END CERTIFICATE-----Generated at Mon Jun 9 03:05:38 2025 by rpki-client