$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: nNL31dSCVbdevSFmRg3NC5AF2yJUsccJ+UCrOp80gtg= Subject key identifier: DB:25:BF:98:8F:28:63:76:00:89:F7:75:1C:3C:48:C6:3B:30:D0:CD Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1E12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1E06 Signing time: Fri 30 May 2025 16:16:12 +0000 Manifest this update: Fri 30 May 2025 16:16:11 +0000 Manifest next update: Fri 06 Jun 2025 16:16:11 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: /fT1j2Ql3H0wrRMSJGkljyGRcv7jnWGTCUEOA4xi3iE=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: aU2YJVr1JgNSnSBDLACjKPXwpUH3eD6D3PqoxsGGeXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7698 (0x1e12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: May 30 16:16:11 2025 GMT Not After : Jun 6 16:16:11 2025 GMT Subject: CN=6839d9cb-5c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:47:b0:40:29:64:e2:74:f5:6a:15:74:7f: ae:40:4c:65:15:f3:73:98:46:bd:1a:7e:b7:e6:a7: 6b:04:f8:d3:00:bd:91:4f:7f:2b:93:8a:43:ba:0c: 58:04:36:cb:17:fa:7b:eb:69:d0:c0:ff:c7:e8:f1: 1a:48:3c:8e:32:b0:7f:52:d0:1c:e1:42:82:38:41: 9e:75:02:88:c7:36:f2:c1:3c:0d:73:6d:5c:82:54: 8e:39:88:14:f9:f1:f9:9a:9e:04:be:93:c3:a7:05: 62:02:d2:26:cf:cf:88:1d:eb:82:26:db:4f:55:ed: 9b:da:55:cd:90:5c:a2:40:4d:f8:05:e9:da:18:67: c5:73:28:4a:e7:2d:17:42:f0:c4:ab:11:4e:40:65: a3:64:93:a0:04:d8:b4:35:c5:01:61:93:65:12:f9: 88:a5:76:7e:06:53:8c:17:43:22:3a:01:0b:79:92: c4:d1:f8:63:af:97:c8:65:be:9e:e9:c8:42:b6:cd: 27:01:2e:2e:a0:45:cc:18:10:0e:49:9e:f2:9e:e4: b0:4a:dc:c3:3e:6d:5d:a3:84:bb:0f:50:59:f9:01: 50:37:f5:e4:ea:f7:7d:a0:eb:ee:7a:26:f8:c9:3a: 2d:5b:47:5f:5d:bc:46:8e:01:2d:10:cc:7f:5a:0e: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:BF:98:8F:28:63:76:00:89:F7:75:1C:3C:48:C6:3B:30:D0:CD X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0f:4a:17:28:aa:3f:b6:1d:62:fc:8b:45:1c:ff:55:e7:59: 2d:2c:49:3a:ab:9d:a2:45:27:3e:27:dd:0a:9a:25:a8:86:92: 08:c5:82:ab:84:fb:65:48:93:e4:b5:b4:dd:73:cb:47:fa:57: 4d:26:ea:13:aa:35:50:2b:40:64:01:22:af:d2:b0:e7:ab:1e: 16:cf:4c:bc:6f:9a:79:52:2a:dc:77:f9:4e:5b:d8:c6:22:67: df:ca:95:4c:1d:57:ff:7f:60:a1:f7:d8:90:b9:27:7a:a4:c1: 8d:9f:f6:c0:36:0f:31:89:5c:50:c8:4d:0c:ff:84:e7:b6:3a: c1:21:e0:9b:cf:55:c7:f6:fe:84:a2:25:57:df:ad:90:5d:c3: 21:46:af:0d:ff:b2:55:08:fc:2a:f6:32:fe:dd:70:9d:62:bc: 6a:aa:e0:e1:47:42:6b:ac:2d:1e:04:a9:9b:7c:ff:1e:dc:05: 08:ae:94:44:4b:12:2a:b9:78:1c:40:6c:26:3d:d9:19:52:87: 28:1a:57:e2:00:04:0d:fd:22:1e:65:2c:63:73:bd:ac:28:60: ff:c2:41:d5:f6:9a:db:b7:c5:f1:b4:c9:e9:a7:6f:00:0e:d6: 0a:3b:a2:fe:18:2f:aa:c7:81:7b:e3:d9:7e:20:6e:32:04:58: 43:e2:65:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUwNTMwMTYxNjExWhcNMjUwNjA2MTYxNjExWjAYMRYwFAYD VQQDEw02ODM5ZDljYi01YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48JHsEApZOJ09WoVdH+uQExlFfNzmEa9Gn635qdrBPjTAL2RT38rk4pDugxY BDbLF/p762nQwP/H6PEaSDyOMrB/UtAc4UKCOEGedQKIxzbywTwNc21cglSOOYgU +fH5mp4EvpPDpwViAtImz8+IHeuCJttPVe2b2lXNkFyiQE34BenaGGfFcyhK5y0X QvDEqxFOQGWjZJOgBNi0NcUBYZNlEvmIpXZ+BlOMF0MiOgELeZLE0fhjr5fIZb6e 6chCts0nAS4uoEXMGBAOSZ7ynuSwStzDPm1do4S7D1BZ+QFQN/Xk6vd9oOvueib4 yTotW0dfXbxGjgEtEMx/Wg507QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNslv5iP KGN2AIn3dRw8SMY7MNDNMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7D0oXKKo/th1i/ItFHP9V51ktLEk6q52iRSc+J90KmiWohpIIxYKr hPtlSJPktbTdc8tH+ldNJuoTqjVQK0BkASKv0rDnqx4Wz0y8b5p5Uircd/lOW9jG ImffypVMHVf/f2Ch99iQuSd6pMGNn/bANg8xiVxQyE0M/4TntjrBIeCbz1XH9v6E oiVX362QXcMhRq8N/7JVCPwq9jL+3XCdYrxqquDhR0JrrC0eBKmbfP8e3AUIrpRE SxIquXgcQGwmPdkZUocoGlfiAAQN/SIeZSxjc72sKGD/wkHV9prbt8XxtMnpp28A DtYKO6L+GC+qx4F749l+IG4yBFhD4mVn -----END CERTIFICATE-----Generated at Sat May 31 17:00:17 2025 by rpki-client