$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: ixOuSOg4OnwamYnxPSYATcSSgte/ov+SdnSEH9Fg8v8= Subject key identifier: D6:8C:E8:CA:ED:8C:1B:4A:58:51:21:12:E9:B2:BA:44:92:D6:15:10 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 8B Signing time: Sun 01 Jun 2025 06:19:31 +0000 Manifest this update: Sun 01 Jun 2025 06:19:30 +0000 Manifest next update: Sun 08 Jun 2025 06:19:30 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: +lSBkUiqt0s6eu9DZ3GFGh+iBmBKBxc7+xExwstvyuA=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: k8bmIEi5AkEe4xzWalacEnF3qdgyVE7VkZI11nYD+RY=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=) 4: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: rPvzorCtxEUQHBw6HlxY0A29sySWnjRa4667RhmeUc8=) 5: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: FsiT3oYazNjnPtPEe7G6GkJ5HTMUOkycbdZ+8LjujNs=) 6: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: d+1sX6tY5J0jwkyX1i5fUM/tk/BpB8/UlFulaWgxJOc=) 7: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: L5hcVKih/+nBko6kW7js31KvZiJs+q86I/1/tFKfyVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Jun 1 06:19:30 2025 GMT Not After : Jun 8 06:19:30 2025 GMT Subject: CN=683bf0f3-5b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:ef:d7:91:62:03:e0:5e:1f:9d:a5:0f:f2: 6d:f9:39:fd:93:9d:81:fe:a5:47:7b:ff:d9:c0:92: 02:91:42:41:9b:d2:50:2b:f0:d1:fd:13:b7:8b:01: dd:8a:f1:33:56:98:dc:20:b9:3b:91:88:9d:55:ac: 45:7e:6d:cf:1f:d4:a5:a8:a1:b0:91:cd:ad:91:5f: 2d:39:b5:50:d9:e2:cf:69:bf:c3:aa:07:80:61:9d: 1c:2c:d2:9f:d4:7b:a9:cf:66:96:0e:77:ee:46:10: f9:55:b3:41:f3:d3:74:68:c0:7f:90:08:e2:39:6d: b0:15:a2:df:da:54:de:ca:4d:8b:ae:f5:da:e1:b8: 72:21:86:35:e3:bb:a1:47:54:d9:27:8a:97:67:1e: d9:08:a9:fe:8e:b9:30:9e:f0:0e:55:df:b2:06:3c: a2:6f:27:79:41:59:f3:b6:bd:ff:ea:92:4e:57:4f: 9f:23:3b:54:ad:a3:f2:ce:d0:84:f2:99:28:d8:6e: 34:56:99:85:bb:be:f8:e1:f6:be:6e:a2:26:27:1b: 7f:46:dc:90:07:49:12:07:3c:83:46:61:b3:c3:1f: 0c:a5:a6:8b:42:3b:5d:8d:21:43:2b:c3:89:8d:c2: 9d:b0:c1:cd:8b:1a:69:40:67:3f:27:6c:1a:71:66: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:E8:CA:ED:8C:1B:4A:58:51:21:12:E9:B2:BA:44:92:D6:15:10 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a2:85:e9:00:b4:79:64:05:d4:16:b7:d2:30:22:0c:5a:3a: 0d:11:f9:e6:b4:66:73:4d:99:4f:44:cd:36:f4:7c:c6:41:55: 7f:83:5a:92:9e:92:85:96:8b:00:46:54:80:ab:b4:dc:8e:00: 95:6a:8d:af:06:33:72:2f:25:ad:93:83:16:fa:81:9b:ab:b9: 8f:ca:e6:52:6d:af:b7:3d:86:26:d4:b4:ff:e2:8f:18:88:1c: 37:4f:55:0b:a3:58:de:01:7f:e7:d9:c9:b6:a8:a2:62:c5:b4: d8:74:2b:02:bd:d0:1c:1b:a7:c1:fa:b2:ad:99:b2:40:52:a3: 02:58:00:ec:76:b1:dd:1e:7a:64:9b:d1:e6:05:47:2c:f6:77: 5c:b5:0b:54:92:fe:38:91:e3:36:b9:a6:a1:0a:79:ec:97:4f: 15:4e:5f:15:aa:7f:00:7e:85:48:8e:f0:75:76:0a:93:39:d5: b7:40:6a:aa:7c:d8:45:61:15:b8:52:f0:3a:77:61:d4:e9:fe: 6b:d8:85:e3:ed:c3:73:15:77:cd:a7:5c:6d:f6:6c:bf:73:6d: a0:94:94:a3:8d:36:72:41:5a:4f:68:45:65:b9:09:d5:0f:d0: e0:a0:e2:68:b7:3d:1d:12:a5:44:be:83:23:ee:bb:8b:97:eb: e1:98:11:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwNjAxMDYxOTMwWhcNMjUwNjA4MDYxOTMwWjAYMRYwFAYD VQQDEw02ODNiZjBmMy01YjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KTv15FiA+BeH52lD/Jt+Tn9k52B/qVHe//ZwJICkUJBm9JQK/DR/RO3iwHd ivEzVpjcILk7kYidVaxFfm3PH9SlqKGwkc2tkV8tObVQ2eLPab/DqgeAYZ0cLNKf 1Hupz2aWDnfuRhD5VbNB89N0aMB/kAjiOW2wFaLf2lTeyk2LrvXa4bhyIYY147uh R1TZJ4qXZx7ZCKn+jrkwnvAOVd+yBjyibyd5QVnztr3/6pJOV0+fIztUraPyztCE 8pko2G40VpmFu7744fa+bqImJxt/RtyQB0kSBzyDRmGzwx8MpaaLQjtdjSFDK8OJ jcKdsMHNixppQGc/J2wacWZTSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaM6Mrt jBtKWFEhEumyukSS1hUQMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkooXpALR5ZAXUFrfSMCIMWjoNEfnmtGZzTZlPRM029HzGQVV/g1qS npKFlosARlSAq7TcjgCVao2vBjNyLyWtk4MW+oGbq7mPyuZSba+3PYYm1LT/4o8Y iBw3T1ULo1jeAX/n2cm2qKJixbTYdCsCvdAcG6fB+rKtmbJAUqMCWADsdrHdHnpk m9HmBUcs9ndctQtUkv44keM2uaahCnnsl08VTl8Vqn8AfoVIjvB1dgqTOdW3QGqq fNhFYRW4UvA6d2HU6f5r2IXj7cNzFXfNp1xt9my/c22glJSjjTZyQVpPaEVluQnV D9DgoOJotz0dEqVEvoMj7ruLl+vhmBGQ -----END CERTIFICATE-----Generated at Sun Jun 1 20:27:35 2025 by rpki-client