$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json) Hash identifier: jBPs2hgN3QCp51+2wmNua4dYys8kLjvGwzQcMqGylc4= Subject key identifier: C3:4E:B1:B0:AA:67:85:17:F9:1F:FB:FA:EC:4B:3E:A9:AC:B7:D9:0B Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft Manifest number: 94 Signing time: Sat 31 May 2025 05:55:53 +0000 Manifest this update: Sat 31 May 2025 05:55:52 +0000 Manifest next update: Sat 07 Jun 2025 05:55:52 +0000 Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: v1wmc08TaZeBpzxicq5L3sDexe4Wig/yz0spEGzWScU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Validity Not Before: May 31 05:55:52 2025 GMT Not After : Jun 7 05:55:52 2025 GMT Subject: CN=683a99e8-723c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:02:70:9e:2e:34:14:34:9e:07:a0:b0:8e: 8b:cc:b0:0b:8e:cb:e6:7c:6d:eb:3f:1c:58:5f:b6: 16:7d:fb:90:78:48:54:f3:7a:ac:d7:9c:0e:f2:17: 12:22:86:27:3a:0c:4d:3f:64:59:00:8b:84:3e:d3: 5d:73:d8:72:65:54:74:db:54:f0:4a:4e:92:d5:9a: c6:ed:98:4a:15:5a:43:d5:62:14:da:74:39:b8:ed: 5c:4e:8b:f8:96:46:5e:6d:68:82:e0:85:c8:28:28: eb:5b:19:54:ea:bf:b7:d3:88:62:33:d3:d9:83:b4: 17:93:28:ca:6d:be:54:36:89:02:e1:4c:3e:b8:39: 15:03:a1:22:31:4c:98:b3:39:fc:7c:9d:4c:03:68: 48:9e:6d:f7:58:e5:2d:c1:3e:2d:ad:b3:51:8b:3b: d5:66:bb:4f:0e:b3:27:92:1b:04:da:c5:a0:4c:2b: f2:47:3f:02:5e:12:28:10:d4:eb:35:5e:e6:36:fe: 06:4d:28:d9:ab:33:9a:22:3b:91:36:71:9a:7a:8f: 99:76:d3:43:ed:dd:8e:47:3b:1b:58:be:25:b4:79: 90:d2:5d:39:b5:94:f7:b8:35:a6:0d:8d:72:a1:24: 62:1a:8e:ad:dc:c1:6f:31:09:d1:43:66:97:b2:19: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4E:B1:B0:AA:67:85:17:F9:1F:FB:FA:EC:4B:3E:A9:AC:B7:D9:0B X509v3 Authority Key Identifier: keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:e3:8a:0e:83:19:6a:60:eb:c4:99:64:4e:8a:2c:33:90:f6: 89:c2:e9:06:49:b1:d4:04:68:7e:cc:0f:99:eb:ce:5f:20:c8: 24:4f:48:0d:85:59:be:9f:6d:d8:20:9f:56:9c:f5:3e:bb:42: ab:f8:ed:0e:67:f9:57:83:7e:35:b3:ce:06:80:aa:08:c2:fd: 57:8d:58:c4:4e:60:bc:00:d3:67:dd:9f:4f:43:4b:ac:f8:a5: 1c:e6:dc:c0:55:10:ad:90:f7:8d:bc:ad:8f:2f:15:88:26:46: 7f:03:d5:30:06:57:54:8d:a6:12:92:f6:c2:19:6e:42:6e:dd: b4:74:c7:10:7e:32:f9:35:da:c5:2d:98:ba:21:5e:95:ce:2f: 39:16:c1:e0:70:56:17:53:57:bc:1d:1d:0c:9d:49:cc:86:af: 68:4c:71:2b:35:5b:fc:6c:29:e1:84:d0:7e:23:06:61:eb:3b: 09:4d:f2:33:d2:cd:aa:aa:dd:5d:74:57:ec:ff:67:9e:ba:cc: 02:71:7e:fd:ee:ed:32:36:f1:f9:9b:f7:ec:e4:d5:47:5e:3e: e6:28:04:26:fc:3c:43:cb:a8:06:12:9d:ee:7b:9a:e9:98:16: 5a:a6:c7:b6:bd:c8:d3:f8:f2:38:65:82:c3:1e:b1:78:da:43: 8e:c6:11:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx N0Y3Q0U5OUEwHhcNMjUwNTMxMDU1NTUyWhcNMjUwNjA3MDU1NTUyWjAYMRYwFAYD VQQDEw02ODNhOTllOC03MjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fMCcJ4uNBQ0ngegsI6LzLALjsvmfG3rPxxYX7YWffuQeEhU83qs15wO8hcS IoYnOgxNP2RZAIuEPtNdc9hyZVR021TwSk6S1ZrG7ZhKFVpD1WIU2nQ5uO1cTov4 lkZebWiC4IXIKCjrWxlU6r+304hiM9PZg7QXkyjKbb5UNokC4Uw+uDkVA6EiMUyY szn8fJ1MA2hInm33WOUtwT4trbNRizvVZrtPDrMnkhsE2sWgTCvyRz8CXhIoENTr NV7mNv4GTSjZqzOaIjuRNnGaeo+ZdtND7d2ORzsbWL4ltHmQ0l05tZT3uDWmDY1y oSRiGo6t3MFvMQnRQ2aXshlRIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNOsbCq Z4UX+R/7+uxLPqmst9kLMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2 QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ44oOgxlqYOvEmWROiiwzkPaJwukGSbHUBGh+zA+Z685fIMgkT0gN hVm+n23YIJ9WnPU+u0Kr+O0OZ/lXg341s84GgKoIwv1XjVjETmC8ANNn3Z9PQ0us +KUc5tzAVRCtkPeNvK2PLxWIJkZ/A9UwBldUjaYSkvbCGW5Cbt20dMcQfjL5NdrF LZi6IV6Vzi85FsHgcFYXU1e8HR0MnUnMhq9oTHErNVv8bCnhhNB+IwZh6zsJTfIz 0s2qqt1ddFfs/2eeuswCcX797u0yNvH5m/fs5NVHXj7mKAQm/DxDy6gGEp3ue5rp mBZapse2vcjT+PI4ZYLDHrF42kOOxhGh -----END CERTIFICATE-----Generated at Sat May 31 17:16:22 2025 by rpki-client