$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: G7QazrXTtTB1isbtpGvQDoTeYlvzTOnMRCeiuukU6FU= Subject key identifier: 27:04:37:BE:DB:C1:BC:63:95:FF:DC:E6:80:CD:E6:98:B3:9F:C6:54 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 04F4 Signing time: Fri 30 May 2025 23:55:32 +0000 Manifest this update: Fri 30 May 2025 23:55:31 +0000 Manifest next update: Fri 06 Jun 2025 23:55:31 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: q06pk9YUY+NGiXm6BoWPn59tHxewAX/x0hJl9vqnEDU=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: May 30 23:55:31 2025 GMT Not After : Jun 6 23:55:31 2025 GMT Subject: CN=683a4574-c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:30:29:68:08:5f:a6:f9:c4:8d:c8:cb:0a: e3:04:56:4a:17:55:85:c9:44:e5:01:20:5b:9b:47: e2:4f:be:bf:56:bf:76:2f:b7:a9:49:4b:1d:e3:9b: 62:44:b3:36:89:2f:7c:ad:44:b1:42:12:e3:64:6b: ba:a0:35:55:c9:03:3e:2e:53:75:65:3a:93:99:69: 61:32:ea:ad:d7:78:a2:47:3f:8f:a9:bc:f9:b2:71: 9a:f0:10:0f:1a:d0:f7:6a:a6:c8:6e:16:38:97:67: 60:53:f9:ac:c1:8c:ee:4c:e2:ce:b3:2f:d1:27:bb: 29:af:9e:da:57:a5:a0:c9:cd:a0:61:ff:b7:07:17: 59:e5:5b:6c:2f:0e:59:31:7e:a3:b8:30:06:38:29: 43:59:f8:da:3f:fd:f8:d1:3e:2a:f8:67:b8:f6:39: 3c:5d:84:5c:c5:d8:4d:6c:da:28:57:2d:42:33:2e: dd:62:2a:fa:14:a6:2c:4a:ab:92:e8:8d:ae:51:57: 87:22:86:53:d3:bb:71:f4:cf:3c:4e:65:cc:ac:93: 93:9f:72:1d:b2:1c:2c:e2:1a:50:fc:71:79:c4:4d: 98:e8:2b:bf:29:b0:e8:1f:ba:09:cb:a9:38:5a:64: f0:d7:73:34:2a:65:e4:6f:8a:08:76:4d:f1:ad:43: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:37:BE:DB:C1:BC:63:95:FF:DC:E6:80:CD:E6:98:B3:9F:C6:54 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:24:29:97:70:68:91:40:e4:46:85:70:58:f0:0b:43:b8:e1: e2:4b:a1:50:5c:f0:b3:dc:1a:c0:ed:87:9b:92:dd:1d:4c:d9: c6:13:a1:fa:6c:39:0e:64:a0:99:9e:54:7b:53:a6:20:49:e7: 53:11:7b:fa:b7:ee:f8:93:32:fc:cf:ad:89:82:ed:bf:a5:78: 9d:7e:48:bc:90:55:cb:fe:67:66:65:6f:4b:04:67:05:aa:9a: a5:27:88:11:d4:f6:4e:33:9a:50:7e:9f:82:5b:3d:8f:fc:b1: cf:fd:9d:78:27:a3:99:99:a1:01:d7:4b:0a:4d:3e:97:4f:f4: 3a:0b:03:b3:33:22:b9:9a:a6:42:bd:13:39:ad:e9:2a:fc:62: 78:99:11:25:4d:55:dd:65:79:9a:a4:57:dd:dc:e1:72:73:98: d6:60:f5:f5:cc:9b:77:2b:fa:0f:2d:71:91:52:95:00:ff:0e: 54:bf:67:4d:27:63:7a:0d:a4:97:94:27:32:f2:50:7f:a9:04: 21:83:2a:ed:16:55:0e:d8:4a:94:60:34:9f:51:7d:55:c8:34: aa:b2:66:b6:67:fe:31:3b:ce:29:30:e1:08:e7:66:cf:58:77: 4b:11:65:5a:bf:68:b9:c0:d5:fb:4d:51:5e:f7:7b:40:f8:38: 35:89:9b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwNTMwMjM1NTMxWhcNMjUwNjA2MjM1NTMxWjAYMRYwFAYD VQQDEw02ODNhNDU3NC1jODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsQwKWgIX6b5xI3IywrjBFZKF1WFyUTlASBbm0fiT76/Vr92L7epSUsd45ti RLM2iS98rUSxQhLjZGu6oDVVyQM+LlN1ZTqTmWlhMuqt13iiRz+Pqbz5snGa8BAP GtD3aqbIbhY4l2dgU/mswYzuTOLOsy/RJ7spr57aV6Wgyc2gYf+3BxdZ5VtsLw5Z MX6juDAGOClDWfjaP/340T4q+Ge49jk8XYRcxdhNbNooVy1CMy7dYir6FKYsSquS 6I2uUVeHIoZT07tx9M88TmXMrJOTn3Idshws4hpQ/HF5xE2Y6Cu/KbDoH7oJy6k4 WmTw13M0KmXkb4oIdk3xrUMOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcEN77b wbxjlf/c5oDN5pizn8ZUMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlJCmXcGiRQORGhXBY8AtDuOHiS6FQXPCz3BrA7Yebkt0dTNnGE6H6 bDkOZKCZnlR7U6YgSedTEXv6t+74kzL8z62Jgu2/pXidfki8kFXL/mdmZW9LBGcF qpqlJ4gR1PZOM5pQfp+CWz2P/LHP/Z14J6OZmaEB10sKTT6XT/Q6CwOzMyK5mqZC vRM5rekq/GJ4mRElTVXdZXmapFfd3OFyc5jWYPX1zJt3K/oPLXGRUpUA/w5Uv2dN J2N6DaSXlCcy8lB/qQQhgyrtFlUO2EqUYDSfUX1VyDSqsma2Z/4xO84pMOEI52bP WHdLEWVav2i5wNX7TVFe93tA+Dg1iZvM -----END CERTIFICATE-----Generated at Sat May 31 17:06:31 2025 by rpki-client