$ rpki-client -vvf rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft File: Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft (raw, json) Hash identifier: 6bKNrKqDufWwMogh52S/mPe8X3rWgD+IT1kyMAYKH14= Subject key identifier: B2:44:7F:FF:7A:07:49:66:5D:BC:52:6D:90:4F:31:22:8A:08:3D:39 Authority key identifier: 19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 Certificate issuer: /CN=A91753AE/serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft Manifest number: 07FB Signing time: Wed 04 Jun 2025 20:49:21 +0000 Manifest this update: Wed 04 Jun 2025 20:49:21 +0000 Manifest next update: Wed 11 Jun 2025 20:49:21 +0000 Files and hashes: 1: Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl (hash: VMVcMGwGhodhTmXRSvPLvx/LlMutOvmOqg/sn635mTM=) 2: B3078DFAE1E411EAAD5D8545C4F9AE02.roa (hash: 0zq4g5RJk0E/VoR4Pr+LW71Q1CJOf0yYtzjcsTKINfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91753AE, serialNumber=19BE5BE63555F11B7341DC4E1CBC9F44C9EDA0F7 Validity Not Before: Jun 4 20:49:21 2025 GMT Not After : Jun 11 20:49:21 2025 GMT Subject: CN=6840b151-21cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:62:37:e2:ff:3e:e6:7f:b3:50:6a:e2:8a:df: 78:17:27:39:f9:7a:81:8d:02:17:2a:82:da:5f:83: a1:1f:40:a5:48:61:a7:e8:58:e3:17:70:cd:3e:19: 95:77:13:54:6e:86:73:e6:95:b5:d2:18:92:84:44: 53:09:8b:93:fc:44:08:cb:72:ac:54:65:02:09:72: 2a:6d:ed:c5:07:f7:01:d6:eb:26:9d:3d:1d:4c:c1: 3f:1a:1b:60:9c:82:60:5e:17:1d:63:21:cf:29:70: 9d:d9:68:0f:f9:ef:ac:b1:f4:97:65:3f:1c:34:94: 9b:87:04:39:22:ca:c6:f1:88:df:d5:94:1e:15:f0: 35:c6:55:cf:81:2f:5e:49:6b:fb:78:22:86:3e:7f: b4:5f:f0:51:46:52:89:f0:16:39:23:a5:c5:ac:8a: 1c:51:52:14:2a:1e:a1:93:78:7f:7c:b2:3c:a2:06: c4:cb:e1:bc:b7:95:8f:a7:61:bf:03:fb:49:24:03: db:7b:88:89:cd:8f:cc:99:1d:10:2d:57:a1:15:b8: 72:38:65:03:03:be:85:db:82:d2:e0:1f:34:c2:a0: 73:d5:2f:99:5c:e8:01:3e:6d:a1:ef:0e:3a:32:be: 5b:8a:f1:77:81:39:4e:34:e7:b6:22:c5:73:b7:30: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:44:7F:FF:7A:07:49:66:5D:BC:52:6D:90:4F:31:22:8A:08:3D:39 X509v3 Authority Key Identifier: keyid:19:BE:5B:E6:35:55:F1:1B:73:41:DC:4E:1C:BC:9F:44:C9:ED:A0:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gb5b5jVV8RtzQdxOHLyfRMntoPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91753AE/F32998BCE1E211EAABEEC528C4F9AE02/Gb5b5jVV8RtzQdxOHLyfRMntoPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:af:a8:0e:3c:25:81:ae:d4:fb:35:5c:1e:38:b2:9b:9b:2f: 9d:cf:64:4c:e3:ea:95:08:20:4b:9d:d1:14:93:6e:0a:64:79: 6d:25:55:d2:b3:23:b0:ae:78:a5:b9:f4:db:40:e5:4b:35:66: fc:03:aa:e5:97:91:0c:18:8b:ac:2a:e2:51:4b:36:23:9c:e1: 49:e2:16:71:a7:3b:1d:44:17:62:6e:5a:a5:3c:91:2f:c2:bb: ff:a2:c4:e7:75:f5:53:f7:93:17:16:43:a3:4d:88:c7:6f:86: 57:b3:96:dd:dc:91:5a:82:e5:bc:f1:3c:67:a0:88:05:d0:8b: 55:f0:d6:b1:73:b4:a6:a6:a6:7c:eb:a2:4c:95:3f:9f:d8:ad: 1a:ca:fd:a3:e3:b2:1e:8d:51:b9:99:2a:25:b2:6b:77:0e:e6: 03:b8:14:85:ed:8a:32:2c:7f:d1:83:a6:06:27:1c:28:a6:24: 7e:88:88:3d:0f:b6:a5:4f:ff:3b:52:7a:71:2b:67:ae:3a:37: 8b:6a:8e:13:66:b8:7e:69:2e:06:37:e7:00:7a:a1:f4:6f:fa: 8c:67:5c:2b:52:cb:60:c2:a2:fb:05:b0:53:32:ea:91:87:0b: 81:69:8a:14:6a:5c:5f:ba:75:9d:e6:5c:34:2e:b9:68:db:fe: c3:e5:eb:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzQUUxMTAvBgNVBAUTKDE5QkU1QkU2MzU1NUYxMUI3MzQxREM0RTFDQkM5RjQ0 QzlFREEwRjcwHhcNMjUwNjA0MjA0OTIxWhcNMjUwNjExMjA0OTIxWjAYMRYwFAYD VQQDEw02ODQwYjE1MS0yMWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WI34v8+5n+zUGriit94Fyc5+XqBjQIXKoLaX4OhH0ClSGGn6FjjF3DNPhmV dxNUboZz5pW10hiShERTCYuT/EQIy3KsVGUCCXIqbe3FB/cB1usmnT0dTME/Ghtg nIJgXhcdYyHPKXCd2WgP+e+ssfSXZT8cNJSbhwQ5IsrG8Yjf1ZQeFfA1xlXPgS9e SWv7eCKGPn+0X/BRRlKJ8BY5I6XFrIocUVIUKh6hk3h/fLI8ogbEy+G8t5WPp2G/ A/tJJAPbe4iJzY/MmR0QLVehFbhyOGUDA76F24LS4B80wqBz1S+ZXOgBPm2h7w46 Mr5bivF3gTlONOe2IsVztzBx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJEf/96 B0lmXbxSbZBPMSKKCD05MB8GA1UdIwQYMBaAFBm+W+Y1VfEbc0HcThy8n0TJ7aD3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTNBRS9GMzI5OThCQ0Ux RTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhSdHpRZHhPSEx5ZlJNbnRv UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0diNWI1alZWOFJ0elFkeE9ITHlmUk1udG9QYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTNBRS9GMzI5OThCQ0UxRTIxMUVBQUJFRUM1MjhDNEY5QUUwMi9HYjViNWpWVjhS dHpRZHhPSEx5ZlJNbnRvUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1r6gOPCWBrtT7NVweOLKbmy+dz2RM4+qVCCBLndEUk24KZHltJVXS syOwrnilufTbQOVLNWb8A6rll5EMGIusKuJRSzYjnOFJ4hZxpzsdRBdiblqlPJEv wrv/osTndfVT95MXFkOjTYjHb4ZXs5bd3JFaguW88TxnoIgF0ItV8Naxc7SmpqZ8 66JMlT+f2K0ayv2j47IejVG5mSolsmt3DuYDuBSF7YoyLH/Rg6YGJxwopiR+iIg9 D7alT/87UnpxK2euOjeLao4TZrh+aS4GN+cAeqH0b/qMZ1wrUstgwqL7BbBTMuqR hwuBaYoUalxfunWd5lw0Lrlo2/7D5evS -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:40 2025 by rpki-client