$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: n6eQAT5sWYPpm+YWfGWSiSQAtU/l7sQRY0A3P4f5ePA= Subject key identifier: 52:E6:DC:43:AD:B7:FB:8D:EB:21:CD:FD:DF:8E:13:81:BD:09:AA:A1 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 0607 Signing time: Fri 30 May 2025 23:08:40 +0000 Manifest this update: Fri 30 May 2025 23:08:39 +0000 Manifest next update: Fri 06 Jun 2025 23:08:39 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: pfxN+GlP/cpg4ZUK0gbed4hDuHZCPkl0SaUTCrXT0UY=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: May 30 23:08:39 2025 GMT Not After : Jun 6 23:08:39 2025 GMT Subject: CN=683a3a77-7c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:dd:7c:12:15:47:a7:5d:16:fc:f3:7e:11: fb:e8:45:6e:5c:d5:a1:8e:ba:5f:cb:8b:07:d6:a3: 10:19:9d:e7:b9:53:f8:d8:de:4c:e2:70:e5:56:07: 54:21:b0:ff:e4:0a:31:e4:d8:94:8b:68:41:38:19: 2a:03:13:23:1e:d1:1e:8f:3d:06:c5:8e:19:41:2d: 18:64:93:ad:9a:e5:b2:1c:10:90:5b:31:ea:c4:1b: c2:d2:6e:48:87:05:9f:ce:35:11:6d:91:9b:f0:1d: b9:35:79:15:92:bc:6c:80:7f:a2:9f:11:c1:22:d6: 36:40:eb:ea:76:01:cc:7a:8d:ce:ad:50:5e:fa:9a: da:09:91:e8:97:4d:5b:1b:14:f3:a3:c7:aa:3b:fa: f1:af:1b:5d:9a:6a:45:c9:b0:21:d9:7d:1e:f7:ec: ad:a7:b6:f6:2c:1b:37:84:16:d4:ac:28:da:0a:19: 48:6c:75:d4:5e:07:ae:ae:ad:78:71:53:8f:3c:56: 00:70:ff:1a:f6:9b:4b:b9:03:70:64:8d:c7:e1:ee: 59:98:42:ed:3c:48:80:2d:c6:44:d9:13:6f:19:b7: 6e:b1:73:16:94:43:99:67:03:23:38:f2:d3:aa:0c: 33:d1:eb:b2:7c:60:38:e9:b6:60:7f:aa:0a:04:be: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:DC:43:AD:B7:FB:8D:EB:21:CD:FD:DF:8E:13:81:BD:09:AA:A1 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2b:28:a5:3c:e6:3a:09:0a:d1:1f:0b:80:b0:1c:18:be:10: 3a:1d:51:08:02:7d:80:70:94:14:21:6c:61:d3:7d:b0:0f:77: 99:b0:3c:3e:f9:5d:ee:4f:67:b8:7e:e7:0c:4e:9a:2e:d8:03: 0a:6d:14:95:99:e8:aa:5c:da:81:fa:c6:43:7a:c6:50:da:0c: 5c:cc:98:a8:76:6a:65:f9:ac:51:7f:02:94:d3:14:9c:a0:6a: a8:e3:7b:e2:18:56:82:17:3b:99:c1:b2:15:16:42:90:a7:f3: b3:98:d7:9e:cc:d0:84:5a:6f:07:ad:02:8f:d8:c6:42:29:28: 68:c4:26:f8:b6:38:ee:93:1c:9a:a2:07:5e:78:a8:8c:cc:75: e3:80:79:ca:7c:15:56:d0:89:b7:49:1a:ef:44:1c:1e:2b:91: a8:95:db:4b:3f:e3:63:18:e7:a5:6e:c3:51:98:09:65:cf:d5: b4:82:6d:8b:41:5f:84:1c:42:3f:a1:5b:8a:38:3b:a9:a4:bd: f6:3b:fd:79:90:02:84:ab:c5:6f:eb:04:25:ab:4f:fb:6e:96: 43:22:98:a4:a9:45:93:1f:ce:d0:c9:6d:34:04:6d:96:19:99: 13:b8:5c:0a:bf:b3:d8:7e:43:ae:c7:7b:60:f5:3e:ae:ed:0d: b4:39:71:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUwNTMwMjMwODM5WhcNMjUwNjA2MjMwODM5WjAYMRYwFAYD VQQDEw02ODNhM2E3Ny03YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MbdfBIVR6ddFvzzfhH76EVuXNWhjrpfy4sH1qMQGZ3nuVP42N5M4nDlVgdU IbD/5Aox5NiUi2hBOBkqAxMjHtEejz0GxY4ZQS0YZJOtmuWyHBCQWzHqxBvC0m5I hwWfzjURbZGb8B25NXkVkrxsgH+inxHBItY2QOvqdgHMeo3OrVBe+praCZHol01b GxTzo8eqO/rxrxtdmmpFybAh2X0e9+ytp7b2LBs3hBbUrCjaChlIbHXUXgeurq14 cVOPPFYAcP8a9ptLuQNwZI3H4e5ZmELtPEiALcZE2RNvGbdusXMWlEOZZwMjOPLT qgwz0euyfGA46bZgf6oKBL5evwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLm3EOt t/uN6yHN/d+OE4G9CaqhMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABKyilPOY6CQrRHwuAsBwYvhA6HVEIAn2AcJQUIWxh032wD3eZsDw+ +V3uT2e4fucMTpou2AMKbRSVmeiqXNqB+sZDesZQ2gxczJiodmpl+axRfwKU0xSc oGqo43viGFaCFzuZwbIVFkKQp/OzmNeezNCEWm8HrQKP2MZCKShoxCb4tjjukxya ogdeeKiMzHXjgHnKfBVW0Im3SRrvRBweK5GoldtLP+NjGOelbsNRmAllz9W0gm2L QV+EHEI/oVuKODuppL32O/15kAKEq8Vv6wQlq0/7bpZDIpikqUWTH87QyW00BG2W GZkTuFwKv7PYfkOux3tg9T6u7Q20OXEn -----END CERTIFICATE-----Generated at Sat May 31 15:51:49 2025 by rpki-client