$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: YXHZtfpew0RY8YJzXf69u53ao33otx+5Ao4wQ9/vI28= Subject key identifier: 7B:6C:3E:FF:C3:68:99:00:23:E9:D6:28:4C:C0:FD:E8:AD:7E:12:D2 Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 123B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 122D Signing time: Fri 30 May 2025 17:18:58 +0000 Manifest this update: Fri 30 May 2025 17:18:57 +0000 Manifest next update: Fri 06 Jun 2025 17:18:57 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: 0UM46sDXoXKI4+UnSgIARpopA/WRE8gZG5eWUOAt6Fs=) 2: 98281C68C74D11EFBDEB795AC4F9AE02.roa (hash: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=) 3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: X4hHa40ZZCMFGclLrNNhBeu3iaLFdaY3QcG/fAUp5DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4667 (0x123b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: May 30 17:18:57 2025 GMT Not After : Jun 6 17:18:57 2025 GMT Subject: CN=6839e882-baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:c7:f9:39:86:0e:b4:2c:f5:fd:28:c5:38: a4:9e:0e:92:47:e9:e6:26:e4:e6:b2:9f:65:b3:d0: d5:8a:bc:3f:64:bf:ab:d3:9e:f1:67:24:d5:41:7b: dc:ff:20:57:e9:7a:4c:50:74:b9:7f:42:7f:12:12: fb:6a:b7:c1:c4:55:a5:5c:3e:bf:9d:26:91:45:5e: 7a:0b:e3:be:48:70:6d:50:1a:d7:7a:1b:8a:a2:95: 6c:58:3c:86:67:a0:7d:d8:92:c5:73:26:d9:83:3f: bf:4b:58:d5:3d:ba:bf:ac:be:d0:da:65:b2:10:fc: 62:45:f9:f6:06:c9:fa:44:82:f1:d3:62:15:38:33: 75:7a:b8:31:d3:9f:a3:94:6e:cd:39:c7:87:dc:ae: 7d:b3:5c:85:8a:b1:40:5e:cd:7f:89:99:fa:f3:39: d8:56:86:18:26:a3:9f:6e:ca:15:e2:d8:de:ec:18: fd:53:c1:53:0f:72:9f:be:93:cf:ce:7f:4f:a0:0c: a7:2d:ea:ba:2a:13:37:5e:3a:2d:3a:33:fa:13:cf: af:17:8e:f3:44:39:42:c4:f5:51:d9:b7:88:87:54: 52:7c:45:9b:c1:47:7e:e2:41:e6:3b:ee:ed:b7:0e: 24:06:9d:05:19:cb:60:81:65:8b:86:e9:e3:4b:6b: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:3E:FF:C3:68:99:00:23:E9:D6:28:4C:C0:FD:E8:AD:7E:12:D2 X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d1:8c:45:76:30:26:72:98:f4:64:90:cc:06:7a:f4:ab:b3: 7d:78:dd:2d:26:3b:54:b8:fd:02:a9:6d:33:d5:76:2c:da:9e: ce:b6:59:0b:fc:27:59:be:c6:e2:51:c1:46:d6:c8:5a:fb:cb: 34:1f:30:95:be:6c:29:b0:0f:07:92:0e:d8:47:95:59:35:af: 31:38:09:78:40:62:f6:f1:db:43:d7:0b:57:62:74:21:8d:41: ca:92:b4:f4:5b:24:dc:6c:28:6a:f7:d3:74:53:1d:b5:a1:db: ed:eb:c0:5a:6e:a1:0c:80:c8:1c:46:ae:75:e9:02:d1:b3:09: 23:0d:ac:4f:0e:9a:d4:5c:9d:57:75:e0:c8:81:81:d9:43:72: 0a:39:1e:14:66:a6:27:be:b4:ed:51:72:4d:1b:60:31:30:56: 91:49:78:80:e0:7d:4f:43:e5:49:72:9b:fb:e4:cd:95:ad:fb: 7e:c6:d6:d3:9c:7e:a9:71:30:06:c8:4c:9a:7c:fe:be:0b:ee: c0:7e:b6:a7:c1:8c:04:90:19:1e:e8:c0:f5:6f:fa:04:a8:f7: c9:20:6b:37:33:1f:0e:75:15:9c:44:fb:6b:ec:15:23:a2:4a: a6:45:5c:51:6c:7a:19:73:86:e2:81:f7:90:80:e0:0a:09:19: 81:be:a5:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjUwNTMwMTcxODU3WhcNMjUwNjA2MTcxODU3WjAYMRYwFAYD VQQDEw02ODM5ZTg4Mi1iYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTbH+TmGDrQs9f0oxTikng6SR+nmJuTmsp9ls9DVirw/ZL+r057xZyTVQXvc /yBX6XpMUHS5f0J/EhL7arfBxFWlXD6/nSaRRV56C+O+SHBtUBrXehuKopVsWDyG Z6B92JLFcybZgz+/S1jVPbq/rL7Q2mWyEPxiRfn2Bsn6RILx02IVODN1ergx05+j lG7NOceH3K59s1yFirFAXs1/iZn68znYVoYYJqOfbsoV4tje7Bj9U8FTD3KfvpPP zn9PoAynLeq6KhM3XjotOjP6E8+vF47zRDlCxPVR2beIh1RSfEWbwUd+4kHmO+7t tw4kBp0FGctggWWLhunjS2vUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtsPv/D aJkAI+nWKEzA/eitfhLSMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV0YxFdjAmcpj0ZJDMBnr0q7N9eN0tJjtUuP0CqW0z1XYs2p7OtlkL /CdZvsbiUcFG1sha+8s0HzCVvmwpsA8Hkg7YR5VZNa8xOAl4QGL28dtD1wtXYnQh jUHKkrT0WyTcbChq99N0Ux21odvt68BabqEMgMgcRq516QLRswkjDaxPDprUXJ1X deDIgYHZQ3IKOR4UZqYnvrTtUXJNG2AxMFaRSXiA4H1PQ+VJcpv75M2Vrft+xtbT nH6pcTAGyEyafP6+C+7AfranwYwEkBke6MD1b/oEqPfJIGs3Mx8OdRWcRPtr7BUj okqmRVxRbHoZc4bigfeQgOAKCRmBvqXy -----END CERTIFICATE-----Generated at Sat May 31 17:16:17 2025 by rpki-client