$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: iSDFOHYKBDi0/Iy/NSCksYtRxLvzJXRMjbMwVrzPR4w= Subject key identifier: 2E:EA:9F:0C:ED:27:74:FA:1B:31:77:05:05:9D:CA:4A:C6:8D:B9:C3 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 102A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1020 Signing time: Fri 06 Jun 2025 17:27:45 +0000 Manifest this update: Fri 06 Jun 2025 17:27:44 +0000 Manifest next update: Fri 13 Jun 2025 17:27:44 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: Ecp3ya9EtqCU8u8QAJOTvl2r8/ubnBatCKVuxLCZ2xg=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4138 (0x102a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Jun 6 17:27:44 2025 GMT Not After : Jun 13 17:27:44 2025 GMT Subject: CN=68432511-3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:91:f9:61:96:e2:7a:65:c2:ba:f5:46:b2: b0:f3:05:56:35:4a:d9:6d:01:2c:c7:1e:28:12:70: fb:5a:7a:ba:cf:6e:70:6c:35:8e:2b:01:e9:34:85: 17:09:61:fd:05:42:4d:22:a0:91:f4:6c:7c:1b:17: 4e:b3:33:ec:50:0f:87:a2:bd:68:87:d3:ce:1b:92: ca:24:93:96:d7:16:be:76:c5:ea:91:20:9f:b8:f5: 81:44:dd:51:47:27:a8:76:e8:28:58:bc:4f:83:ee: aa:b5:11:99:e0:3c:7a:cd:94:97:c5:85:e9:ce:ca: c8:a0:e7:e4:32:72:80:bb:49:83:bb:a6:f6:5e:75: 0d:0d:22:63:53:b6:69:69:37:cc:23:92:c1:7c:60: ca:0b:61:96:9a:cc:f2:ed:6e:9b:ee:4d:4b:0b:75: 06:e1:d0:40:60:78:9d:56:61:b0:46:ba:ae:f4:a9: 20:e1:8b:d6:2a:f9:28:3e:ea:3a:5c:1a:d3:f8:e1: 79:2b:bf:7b:fb:c2:ed:6e:2e:9d:0f:47:e1:f3:a8: 79:07:03:fc:5b:c5:5c:22:ee:00:c7:db:61:b5:28: d8:51:15:5a:35:27:f5:e1:0e:92:c8:2c:09:26:e8: 12:bc:cb:2f:eb:9d:ff:ff:42:98:89:51:b7:53:81: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:9F:0C:ED:27:74:FA:1B:31:77:05:05:9D:CA:4A:C6:8D:B9:C3 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:5d:19:81:2a:e5:33:49:6c:76:9a:e2:c7:7e:2e:16:87:eb: d7:79:b7:56:be:8d:cc:7f:01:dd:23:99:fa:53:ac:71:b9:4e: 38:ad:f7:0b:0f:2c:c4:88:45:ec:b2:71:6b:62:c5:0e:f0:86: ed:9e:26:26:92:c2:18:58:2f:ff:0a:50:c7:97:75:6f:25:f0: 54:9d:b9:20:c9:d1:76:e7:d8:67:09:1b:4b:3b:d4:ae:88:40: dd:b2:4a:fb:21:3e:b3:cb:c1:ce:39:0f:bd:1d:26:fb:6e:4d: 54:1f:f7:18:e1:35:57:73:46:e4:a8:6c:f4:a9:e0:99:4d:14: ac:87:44:aa:3e:7c:b5:58:e4:7b:9e:0f:6f:4f:4f:b3:37:d8: 8c:ff:5d:0b:b8:b5:d4:fe:f9:b6:2b:86:a9:41:78:40:b8:98: 67:de:7f:12:9a:92:12:1c:4c:6e:c7:77:d4:3a:d5:29:48:3b: b4:fe:88:57:70:4d:d1:fc:66:23:e4:f2:45:bc:b9:2d:0b:32: 01:fd:3f:21:4a:e0:45:6e:96:6a:13:9b:f2:73:82:b2:0e:cf: 63:3d:30:b2:26:57:17:ff:ad:00:31:ef:8a:cc:2d:da:3d:c2: 90:d9:3d:5f:fb:75:67:95:27:94:60:c7:08:07:69:1c:e7:99: 30:f9:c6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNjA2MTcyNzQ0WhcNMjUwNjEzMTcyNzQ0WjAYMRYwFAYD VQQDEw02ODQzMjUxMS0zMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3GR+WGW4nplwrr1RrKw8wVWNUrZbQEsxx4oEnD7Wnq6z25wbDWOKwHpNIUX CWH9BUJNIqCR9Gx8GxdOszPsUA+Hor1oh9POG5LKJJOW1xa+dsXqkSCfuPWBRN1R RyeodugoWLxPg+6qtRGZ4Dx6zZSXxYXpzsrIoOfkMnKAu0mDu6b2XnUNDSJjU7Zp aTfMI5LBfGDKC2GWmszy7W6b7k1LC3UG4dBAYHidVmGwRrqu9Kkg4YvWKvkoPuo6 XBrT+OF5K797+8Ltbi6dD0fh86h5BwP8W8VcIu4Ax9thtSjYURVaNSf14Q6SyCwJ JugSvMsv653//0KYiVG3U4FYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7qnwzt J3T6GzF3BQWdykrGjbnDMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCXRmBKuUzSWx2muLHfi4Wh+vXebdWvo3MfwHdI5n6U6xxuU44rfcL DyzEiEXssnFrYsUO8IbtniYmksIYWC//ClDHl3VvJfBUnbkgydF259hnCRtLO9Su iEDdskr7IT6zy8HOOQ+9HSb7bk1UH/cY4TVXc0bkqGz0qeCZTRSsh0SqPny1WOR7 ng9vT0+zN9iM/10LuLXU/vm2K4apQXhAuJhn3n8SmpISHExux3fUOtUpSDu0/ohX cE3R/GYj5PJFvLktCzIB/T8hSuBFbpZqE5vyc4KyDs9jPTCyJlcX/60AMe+KzC3a PcKQ2T1f+3VnlSeUYMcIB2kc55kw+caF -----END CERTIFICATE-----Generated at Sat Jun 7 06:30:51 2025 by rpki-client