$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: rxOnZCYm5VowKHjVS3SIR1WJSSHGs/bI+E63fCY8uJ8= Subject key identifier: 49:4B:0D:20:CC:12:59:8A:95:EC:67:8E:C3:5D:18:38:92:A0:B9:95 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: 6D Signing time: Sat 31 May 2025 06:28:44 +0000 Manifest this update: Sat 31 May 2025 06:28:43 +0000 Manifest next update: Sat 07 Jun 2025 06:28:43 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: mC4T1V4UvFsB1E2OzYbhS6Q83Dwsue4W4ryERMbOOzk=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: May 31 06:28:43 2025 GMT Not After : Jun 7 06:28:43 2025 GMT Subject: CN=683aa19c-a38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:df:35:9e:ec:22:4d:9a:ac:07:9c:54:ee: df:58:7e:c3:d8:8e:b6:75:82:d5:df:2e:b7:9b:56: 89:16:1b:8e:8f:60:27:e1:e5:0d:e6:ca:85:c5:9b: c9:b5:81:19:52:94:95:84:0d:17:54:e6:df:a6:c0: aa:2d:02:99:f9:22:80:63:2b:72:d6:22:39:ac:51: 72:ab:65:c5:ff:19:d5:a8:8d:e8:2b:b4:2e:11:ea: 6c:48:d6:e4:41:71:67:58:bd:05:22:ae:cc:f5:76: 39:31:2a:ae:60:f9:f9:11:05:d9:22:46:7d:83:3f: 1d:c4:6c:79:f2:06:cf:5d:8e:b6:ca:c5:33:ab:85: 26:22:d7:d5:c1:eb:18:b1:ca:ee:8c:f4:92:db:8a: 44:0a:76:fe:c7:9d:f5:0b:8a:8b:59:fb:d2:47:18: f6:56:73:da:6c:ed:7e:d7:a8:99:37:29:f4:f5:53: 7a:f9:4f:3e:9d:73:da:74:7e:09:0b:fa:0a:53:ca: b0:87:79:2b:5b:43:f8:f2:9f:bd:5c:26:25:e3:c0: b4:6d:d1:f8:87:d6:6f:94:71:36:ac:5d:b1:93:75: 6e:fe:94:08:19:86:4d:ed:ba:19:79:0f:15:3f:ee: 2a:cc:23:7b:13:f6:d1:3a:2c:63:02:ff:db:8f:b9: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:0D:20:CC:12:59:8A:95:EC:67:8E:C3:5D:18:38:92:A0:B9:95 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:28:12:55:6c:b8:f1:9a:dd:2c:73:04:a6:e0:df:31:e1:b1: cc:e3:1f:ac:01:56:96:bc:14:79:e5:51:03:e2:a7:73:c5:94: 98:6e:bd:7c:da:39:c1:63:99:ba:85:d2:2a:df:a4:a6:ac:ad: 49:97:0c:78:5d:56:5e:08:b5:a5:16:29:bd:5e:1b:1a:93:d8: f7:4f:5b:f2:c1:cf:ca:1a:3a:62:3e:ac:49:18:84:82:40:cf: 97:d6:8b:aa:1f:5e:34:e8:2d:76:71:cf:04:4a:1e:5c:18:75: 70:ba:83:21:d8:14:2d:86:2f:c4:49:32:f5:ed:95:91:71:84: a9:81:a3:c5:13:8e:81:d1:5c:98:ad:60:fd:9b:9b:24:b6:99: 73:e2:c4:bb:f0:d8:81:f4:00:79:d4:80:c2:c1:2f:6e:52:c4: 86:d4:60:56:2a:8c:a4:ae:2a:af:96:ff:9f:99:54:00:45:2f: bc:ed:07:7e:77:e7:0c:6e:9f:da:b2:04:31:92:7d:fd:75:39: a1:dd:d5:ed:0a:1d:7b:66:8a:b2:59:1d:fc:47:03:f1:6d:b3: 8a:5c:b0:14:20:13:1c:bd:be:13:66:50:22:b9:d9:13:97:d2: 33:a9:85:9f:7d:23:d5:a2:83:b2:46:47:d9:b3:b8:03:b5:4d: 8e:72:9e:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoRDQ2OTY0RjlGMzczMUYyRjYzRTY3MDA4QzkxRTU5QzdE Q0M3ODU1NzAeFw0yNTA1MzEwNjI4NDNaFw0yNTA2MDcwNjI4NDNaMBgxFjAUBgNV BAMTDTY4M2FhMTljLWEzOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Dt81nuwiTZqsB5xU7t9YfsPYjrZ1gtXfLrebVokWG46PYCfh5Q3myoXFm8m1 gRlSlJWEDRdU5t+mwKotApn5IoBjK3LWIjmsUXKrZcX/GdWojegrtC4R6mxI1uRB cWdYvQUirsz1djkxKq5g+fkRBdkiRn2DPx3EbHnyBs9djrbKxTOrhSYi19XB6xix yu6M9JLbikQKdv7HnfULiotZ+9JHGPZWc9ps7X7XqJk3KfT1U3r5Tz6dc9p0fgkL +gpTyrCHeStbQ/jyn71cJiXjwLRt0fiH1m+UcTasXbGTdW7+lAgZhk3tuhl5DxU/ 7irMI3sT9tE6LGMC/9uPua2NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSUsNIMwS WYqV7GeOw10YOJKguZUwHwYDVR0jBBgwFoAU1Glk+fNzHy9j5nAIyR5Zx9zHhVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0U5MjZFOTEyOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhW Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUdsay1mTnpIeTlqNW5BSXlSNVp4OXpIaFZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RjExL0U5MjZFOTEyOUE3QzExRUY4NDk1MEQzM0M0RjlBRTAyLzFHbGstZk56SHk5 ajVuQUl5UjVaeDl6SGhWYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUoElVsuPGa3SxzBKbg3zHhsczjH6wBVpa8FHnlUQPip3PFlJhuvXza OcFjmbqF0irfpKasrUmXDHhdVl4ItaUWKb1eGxqT2PdPW/LBz8oaOmI+rEkYhIJA z5fWi6ofXjToLXZxzwRKHlwYdXC6gyHYFC2GL8RJMvXtlZFxhKmBo8UTjoHRXJit YP2bmyS2mXPixLvw2IH0AHnUgMLBL25SxIbUYFYqjKSuKq+W/5+ZVABFL7ztB353 5wxun9qyBDGSff11OaHd1e0KHXtmirJZHfxHA/Fts4pcsBQgExy9vhNmUCK52ROX 0jOphZ99I9Wig7JGR9mzuAO1TY5yniA= -----END CERTIFICATE-----Generated at Sat May 31 17:31:54 2025 by rpki-client