$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: C/1M3HmyucmWO2Hp3IYNUKoZUua9wYHvvkxfBSp2IQo= Subject key identifier: A8:4E:67:4A:0F:83:C7:95:87:C9:81:C2:E4:2C:07:49:ED:FD:AA:99 Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0BC7 Signing time: Fri 30 May 2025 19:06:32 +0000 Manifest this update: Fri 30 May 2025 19:06:32 +0000 Manifest next update: Fri 06 Jun 2025 19:06:32 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: HBKoBUoHs19Ii5Vp4GHyXiK1jozgR0PKnALHit9dRlE=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: May 30 19:06:32 2025 GMT Not After : Jun 6 19:06:32 2025 GMT Subject: CN=683a01b8-34c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:db:c1:ee:1f:5e:19:48:c0:6e:0a:9e:67: 35:b5:04:ba:be:ec:cd:2a:97:29:f1:c0:98:67:3f: 33:cb:0d:cf:f1:64:40:77:cb:87:db:14:22:85:60: f1:57:89:94:cb:f3:75:29:c3:f9:7f:c1:5c:4c:94: 09:5a:7f:57:08:21:6f:97:c8:aa:a4:52:62:3a:a2: f4:3f:04:93:7f:6b:f6:e7:bb:8f:62:21:8a:1d:2a: 70:b4:e9:63:58:22:4e:21:8e:a2:32:5a:0a:65:6a: e1:23:d9:a2:1a:8a:e9:a8:e1:e7:21:1f:36:ed:94: cc:b3:0c:4b:72:f5:1a:6b:da:a6:37:54:2c:38:21: 81:ed:80:25:ff:1a:dd:b0:70:e2:d7:29:20:30:d2: ad:d5:fd:f8:ca:d3:4d:48:fe:dd:b6:e9:18:3a:06: c9:13:f6:76:bb:d6:17:d6:64:01:b9:ed:3b:bd:fc: dd:03:08:4c:18:12:0f:4c:f5:3a:c0:3a:8c:4a:e3: 97:ed:77:e2:59:4c:97:da:cb:38:eb:ea:13:14:71: b2:32:33:75:27:f3:f8:77:a8:09:fe:99:de:88:3c: fd:01:2b:5f:6a:85:60:fc:7d:73:47:6b:88:d0:d6: 09:87:77:b8:5d:a3:d3:2b:5d:f7:be:6f:ee:52:a7: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:67:4A:0F:83:C7:95:87:C9:81:C2:E4:2C:07:49:ED:FD:AA:99 X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:db:2f:e3:b8:6c:e3:81:8a:8f:62:6e:e6:d9:40:68:2a:92: 44:7f:ce:69:ab:8a:b4:d2:7e:d0:58:68:c9:ad:10:81:99:aa: 9a:54:fc:a5:87:ca:30:3a:37:22:04:ff:dd:b2:78:6a:99:46: 8b:20:d0:14:cc:22:51:c5:7f:62:30:f1:38:ec:4d:4d:14:b4: 09:cf:96:0b:a9:13:fd:97:a1:d1:83:53:ec:cb:47:43:72:b7: 61:be:da:66:60:86:8c:0b:5e:4a:7a:a5:ab:8b:4b:38:ff:27: 86:e9:1b:3b:90:46:3c:23:59:6b:e6:65:45:eb:77:e3:59:66: a1:c8:f1:47:7a:87:6a:a9:ef:56:39:48:73:11:c9:b8:a6:1f: f6:24:70:9a:42:fc:aa:39:26:ae:90:db:1e:b9:78:77:e3:58: 8e:a3:f5:b1:7d:1d:34:b6:52:47:4b:49:80:12:97:2f:1c:2f: ee:17:af:12:22:50:1b:85:1c:dd:68:0d:8e:b7:bc:f4:35:70: 6e:a4:78:9c:38:93:89:2d:ee:f8:c9:7f:3c:dc:66:d8:bc:ba: c9:9f:d7:ce:5d:87:c7:3c:6c:d1:27:3f:a2:9f:20:9f:b7:55: ec:1e:44:cd:ae:ed:04:a7:dd:0b:70:b4:26:25:64:34:b8:fe: 34:b1:91:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjUwNTMwMTkwNjMyWhcNMjUwNjA2MTkwNjMyWjAYMRYwFAYD VQQDEw02ODNhMDFiOC0zNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GTbwe4fXhlIwG4Knmc1tQS6vuzNKpcp8cCYZz8zyw3P8WRAd8uH2xQihWDx V4mUy/N1KcP5f8FcTJQJWn9XCCFvl8iqpFJiOqL0PwSTf2v257uPYiGKHSpwtOlj WCJOIY6iMloKZWrhI9miGorpqOHnIR827ZTMswxLcvUaa9qmN1QsOCGB7YAl/xrd sHDi1ykgMNKt1f34ytNNSP7dtukYOgbJE/Z2u9YX1mQBue07vfzdAwhMGBIPTPU6 wDqMSuOX7XfiWUyX2ss46+oTFHGyMjN1J/P4d6gJ/pneiDz9AStfaoVg/H1zR2uI 0NYJh3e4XaPTK133vm/uUqcpaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhOZ0oP g8eVh8mBwuQsB0nt/aqZMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE2y/juGzjgYqPYm7m2UBoKpJEf85pq4q00n7QWGjJrRCBmaqaVPyl h8owOjciBP/dsnhqmUaLINAUzCJRxX9iMPE47E1NFLQJz5YLqRP9l6HRg1Psy0dD crdhvtpmYIaMC15KeqWri0s4/yeG6Rs7kEY8I1lr5mVF63fjWWahyPFHeodqqe9W OUhzEcm4ph/2JHCaQvyqOSaukNseuXh341iOo/WxfR00tlJHS0mAEpcvHC/uF68S IlAbhRzdaA2Ot7z0NXBupHicOJOJLe74yX883GbYvLrJn9fOXYfHPGzRJz+inyCf t1XsHkTNru0Ep90LcLQmJWQ0uP40sZHm -----END CERTIFICATE-----Generated at Sat May 31 16:30:35 2025 by rpki-client