$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: jOeM1cQ34xbXPlSKghDnx1CLhRXsML+J94ZONioc09c= Subject key identifier: A2:92:FF:AB:DB:EE:23:21:09:26:DA:DF:8A:CA:63:73:D1:A9:49:F5 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B13 Signing time: Fri 30 May 2025 19:30:16 +0000 Manifest this update: Fri 30 May 2025 19:30:16 +0000 Manifest next update: Fri 06 Jun 2025 19:30:16 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: +9ppMrV7xeN4ejVcWIxpUPEqV3BTQ1z6PjxwFfpMjKY=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: zFt+0w+kAFNr7NicRmzvofA0omlHEP7AqJhUpc/xR5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: May 30 19:30:16 2025 GMT Not After : Jun 6 19:30:16 2025 GMT Subject: CN=683a0748-545e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:d9:c6:21:9b:8d:87:13:f4:42:33:e9:50: 0e:78:3a:a3:62:79:92:8d:a4:55:61:9d:23:00:a5: 32:59:c0:2c:20:ba:05:ab:42:68:f3:24:8f:a1:49: 72:21:a8:7f:6b:73:4c:51:f0:6f:c6:12:1a:88:29: e0:a6:36:06:77:b9:31:fc:9f:c6:76:51:f7:e0:a0: 26:ae:26:c7:d7:de:67:9e:e1:be:1e:c4:37:ec:33: 06:dc:95:33:b4:34:45:5d:d3:ce:d8:1d:87:52:6f: 9f:27:f0:2f:32:67:95:2b:1b:df:90:04:04:9a:a1: 7b:1c:eb:5f:14:78:79:0d:b2:fc:20:f7:b1:20:f0: ed:15:5e:15:36:ae:c9:79:bc:5f:1e:73:fd:ab:fe: 16:4d:b5:6e:d4:91:43:f1:26:0d:fd:a8:de:ff:37: cc:0f:f3:7d:0c:8f:0c:ac:58:b1:9b:c6:09:fc:fa: a2:58:c6:61:13:14:b1:4f:ff:f7:f9:7c:75:86:40: d4:e5:dd:9c:99:fd:7b:5f:eb:72:32:c7:bb:f9:46: ef:ae:82:d9:b0:06:da:71:05:94:a9:ea:75:2d:13: 80:97:46:0f:bc:26:2f:a5:bb:df:f0:bc:bf:d5:fc: d0:7e:40:39:3e:e4:81:6c:d6:4c:99:ba:eb:7a:11: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:92:FF:AB:DB:EE:23:21:09:26:DA:DF:8A:CA:63:73:D1:A9:49:F5 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a8:88:91:8f:fb:22:db:88:c6:d9:c1:c3:ea:ad:0b:25:62: 08:9a:4b:b6:38:35:07:9d:6f:83:cc:85:35:23:41:32:2d:7a: 8a:8f:05:57:17:2a:c7:81:52:54:08:1f:ea:69:0f:ea:78:72: 4b:6f:fe:92:27:68:e0:99:52:2c:ca:fe:81:a6:31:43:35:c1: 33:76:a1:2f:b1:e5:46:36:e1:30:63:65:1b:c7:5f:0d:6d:f0: b2:07:43:fb:a2:1a:76:68:78:1e:c3:86:87:e2:15:c6:e4:e0: f5:fe:71:a7:99:0e:1c:6f:4e:31:04:6f:5d:50:c4:8b:9e:d7: 1e:55:22:48:7f:a2:93:72:60:b5:f9:26:d2:95:1b:d4:fb:0a: 0a:d1:01:70:16:72:de:d9:0f:b1:61:6d:b0:1a:13:ce:27:6d: 52:91:9f:60:6f:82:71:26:fa:1e:a4:d5:f8:10:84:94:56:da: 33:7b:b9:1a:1a:7c:9a:a2:fb:2e:cd:ca:89:61:0a:ef:44:05: f3:9a:c8:67:d9:f5:06:b8:5c:95:7c:6a:e0:79:8f:ed:22:5c: 58:11:a8:39:20:0f:d9:05:8e:d4:b2:3b:96:39:13:0c:e2:c4: 20:85:1d:00:e2:c6:d7:82:78:36:8c:61:a6:28:b3:1a:7c:4f: 5c:e3:42:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUwNTMwMTkzMDE2WhcNMjUwNjA2MTkzMDE2WjAYMRYwFAYD VQQDEw02ODNhMDc0OC01NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtobZxiGbjYcT9EIz6VAOeDqjYnmSjaRVYZ0jAKUyWcAsILoFq0Jo8ySPoUly Iah/a3NMUfBvxhIaiCngpjYGd7kx/J/GdlH34KAmribH195nnuG+HsQ37DMG3JUz tDRFXdPO2B2HUm+fJ/AvMmeVKxvfkAQEmqF7HOtfFHh5DbL8IPexIPDtFV4VNq7J ebxfHnP9q/4WTbVu1JFD8SYN/aje/zfMD/N9DI8MrFixm8YJ/PqiWMZhExSxT//3 +Xx1hkDU5d2cmf17X+tyMse7+UbvroLZsAbacQWUqep1LROAl0YPvCYvpbvf8Ly/ 1fzQfkA5PuSBbNZMmbrrehFXawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKS/6vb 7iMhCSba34rKY3PRqUn1MB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqIiRj/si24jG2cHD6q0LJWIImku2ODUHnW+DzIU1I0EyLXqKjwVX FyrHgVJUCB/qaQ/qeHJLb/6SJ2jgmVIsyv6BpjFDNcEzdqEvseVGNuEwY2Ubx18N bfCyB0P7ohp2aHgew4aH4hXG5OD1/nGnmQ4cb04xBG9dUMSLntceVSJIf6KTcmC1 +SbSlRvU+woK0QFwFnLe2Q+xYW2wGhPOJ21SkZ9gb4JxJvoepNX4EISUVtoze7ka GnyaovsuzcqJYQrvRAXzmshn2fUGuFyVfGrgeY/tIlxYEag5IA/ZBY7UsjuWORMM 4sQghR0A4sbXgng2jGGmKLMafE9c40Ib -----END CERTIFICATE-----Generated at Sat May 31 16:43:04 2025 by rpki-client