$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: MC34ZE1fqhjAwa10GE6JQNyhFZY7Zl0LWYvHsAwSgYk= Subject key identifier: B2:12:73:74:0F:8A:C5:3D:D6:44:69:90:2A:E7:26:04:6E:1C:37:C8 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 07F6 Signing time: Fri 30 May 2025 21:14:08 +0000 Manifest this update: Fri 30 May 2025 21:14:07 +0000 Manifest next update: Fri 06 Jun 2025 21:14:07 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: 2YatMvLON1FNh/2W+d/BRME8GC64vjWVJtU9aHISbb8=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: May 30 21:14:07 2025 GMT Not After : Jun 6 21:14:07 2025 GMT Subject: CN=683a1fa0-739b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:69:ea:3a:14:71:0e:2c:42:dd:70:ef:43: a9:fb:e7:4d:cf:b9:1d:7c:23:3b:67:3c:3d:e3:47: e1:e0:0d:e9:2a:a3:f1:e3:45:ef:4f:5d:0a:33:05: 89:71:11:8a:37:31:b3:d7:65:05:6f:78:db:a0:40: cc:21:20:00:ea:61:f7:c7:a2:dd:7e:a7:fd:9d:03: 04:56:eb:04:fa:a5:4c:a8:85:fe:34:3e:44:a0:da: 78:e9:52:ae:a1:e5:9a:75:e5:9a:f5:62:b0:d8:d6: 9d:b4:ef:8f:20:03:e2:c7:ee:31:39:43:d7:94:c2: 7d:75:e6:58:11:b2:19:47:94:a4:95:46:a9:71:1f: 37:32:d3:12:26:a4:d1:a0:c9:f9:5b:d6:5d:6c:f0: e3:7f:ec:c3:ec:a0:61:69:fd:35:fa:16:29:b1:7c: d8:cd:a5:7d:f0:3a:a2:2a:20:9f:66:19:21:93:47: f2:48:18:b5:a2:d0:8c:54:3c:a3:6f:6a:e1:d8:ce: 19:61:7a:e2:7a:1c:39:b7:f3:98:84:21:bf:a4:f8: 1f:9a:10:40:69:53:78:4a:e0:e3:ee:13:c9:b8:33: 77:a7:70:8f:84:22:86:98:40:18:25:50:a5:18:d5: c0:71:c2:51:cc:4b:61:eb:ba:de:42:d4:3e:37:bf: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:73:74:0F:8A:C5:3D:D6:44:69:90:2A:E7:26:04:6E:1C:37:C8 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:98:83:e5:bf:90:6a:dd:15:6c:63:91:87:21:e4:57:d1:ea: 27:73:ea:d0:61:4c:6f:40:72:af:c8:27:67:05:70:cb:f9:09: ea:38:d9:39:84:19:29:48:1b:bc:ac:ae:0a:ae:97:1c:79:44: 51:4d:40:3a:3b:8a:bc:b4:f5:bc:8f:a7:0a:6c:ae:0c:bf:ec: 4b:d2:66:7b:90:5d:d9:f6:d2:36:2f:96:61:84:40:86:9f:a9: 21:6c:a4:ca:74:36:14:02:d8:55:bb:23:0f:33:b3:ae:9f:8d: 47:6b:03:8c:3a:01:bd:31:7a:1f:81:91:8b:4b:34:22:e0:65: 9e:ce:5b:9a:e2:6b:78:f1:f1:dd:c1:ce:ab:8f:ea:59:57:82: 38:c6:c4:ed:cd:ea:c4:c8:2c:86:96:6c:c0:25:ad:76:90:c3: 31:0c:3a:6d:75:a4:02:87:8b:40:7a:95:30:0c:ed:4e:97:0b: dc:d2:3c:3f:77:f5:9a:2a:82:08:cd:3b:b3:02:25:12:0e:48: a0:69:be:eb:22:63:b9:d4:e6:d0:08:62:44:2a:be:49:b3:92: 76:f1:68:d5:df:71:3b:54:1b:78:69:68:70:fc:98:b0:b7:63: f8:04:6e:fd:c1:c1:c5:a8:c4:2e:bf:f8:75:28:a7:03:c8:5e: 37:7a:a0:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNTMwMjExNDA3WhcNMjUwNjA2MjExNDA3WjAYMRYwFAYD VQQDEw02ODNhMWZhMC03MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8tp6joUcQ4sQt1w70Op++dNz7kdfCM7Zzw940fh4A3pKqPx40XvT10KMwWJ cRGKNzGz12UFb3jboEDMISAA6mH3x6Ldfqf9nQMEVusE+qVMqIX+ND5EoNp46VKu oeWadeWa9WKw2NadtO+PIAPix+4xOUPXlMJ9deZYEbIZR5SklUapcR83MtMSJqTR oMn5W9ZdbPDjf+zD7KBhaf01+hYpsXzYzaV98DqiKiCfZhkhk0fySBi1otCMVDyj b2rh2M4ZYXriehw5t/OYhCG/pPgfmhBAaVN4SuDj7hPJuDN3p3CPhCKGmEAYJVCl GNXAccJRzEth67reQtQ+N7+GxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLISc3QP isU91kRpkCrnJgRuHDfIMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbmIPlv5Bq3RVsY5GHIeRX0eonc+rQYUxvQHKvyCdnBXDL+QnqONk5 hBkpSBu8rK4KrpcceURRTUA6O4q8tPW8j6cKbK4Mv+xL0mZ7kF3Z9tI2L5ZhhECG n6khbKTKdDYUAthVuyMPM7Oun41HawOMOgG9MXofgZGLSzQi4GWezlua4mt48fHd wc6rj+pZV4I4xsTtzerEyCyGlmzAJa12kMMxDDptdaQCh4tAepUwDO1Olwvc0jw/ d/WaKoIIzTuzAiUSDkigab7rImO51ObQCGJEKr5Js5J28WjV33E7VBt4aWhw/Jiw t2P4BG79wcHFqMQuv/h1KKcDyF43eqCA -----END CERTIFICATE-----Generated at Sat May 31 17:49:38 2025 by rpki-client