$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: fgOJstqBUugUtnm22IMnZNsXnUYpGUxYa7diYth4jNM= Subject key identifier: 15:6B:22:B2:2B:A2:6E:48:77:8A:5E:ED:7F:58:6B:72:DD:6A:1D:C2 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 03EE Signing time: Sat 31 May 2025 00:47:57 +0000 Manifest this update: Sat 31 May 2025 00:47:57 +0000 Manifest next update: Sat 07 Jun 2025 00:47:57 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: rZlWjVV0q56bDI9r2Y3mFDPP7CxlKx6vsLewWnMRFNI=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: May 31 00:47:57 2025 GMT Not After : Jun 7 00:47:57 2025 GMT Subject: CN=683a51bd-d444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:64:82:68:5c:71:97:4c:c7:04:d6:f1:63: cc:33:8e:19:53:61:be:71:fe:6f:6f:f8:ee:aa:b4: 59:4f:a3:5b:30:2d:62:0f:94:7f:c2:42:cf:8f:7d: 7f:0f:c5:02:20:26:fb:20:c2:2e:0f:54:8e:f2:b1: a1:f3:e0:4c:4c:5e:14:40:31:46:15:64:c2:6e:e6: 56:24:f0:c0:af:b2:3a:90:c5:bb:df:58:73:27:6d: 5c:08:42:0e:52:c0:16:92:b5:db:01:ea:33:d1:d2: a8:ab:af:18:fc:07:3e:92:79:25:ac:f1:ab:5e:4c: 84:4f:05:3e:55:9d:30:a6:63:40:7f:38:63:66:e8: e5:3d:e4:bc:5c:ad:72:01:60:ef:0a:20:80:b3:6a: 6f:b1:ff:67:e3:f0:01:f9:5b:20:96:31:0b:99:43: 90:9c:5d:fc:5d:1b:4b:14:64:f3:88:d3:80:92:72: 29:40:8e:a5:2d:7e:ad:38:65:a4:9a:cd:79:95:e2: 64:c4:84:d6:a0:ec:9e:2a:a8:4a:7c:7f:ef:cf:50: 6f:2e:f9:42:5c:e7:39:9e:ed:03:96:c1:af:6d:0a: 3f:29:90:c6:11:49:0b:3f:5e:36:c6:5b:08:ee:a6: 37:4d:bd:1c:d5:22:8c:ae:4c:b2:9e:f9:ed:03:aa: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:22:B2:2B:A2:6E:48:77:8A:5E:ED:7F:58:6B:72:DD:6A:1D:C2 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ba:33:9d:12:63:c5:1a:39:f7:47:8f:f5:d6:90:1f:75:70: cd:7a:16:1d:61:64:51:01:db:8d:62:0a:3c:55:48:16:d0:a6: 42:2e:77:8d:3f:95:94:15:c2:80:6f:b1:db:4d:b1:2e:73:81: b5:b4:a3:9d:e0:dd:c5:ba:9b:c3:5f:d9:7c:b1:98:00:1f:aa: 2d:85:e4:c9:55:ba:d8:d2:2f:4b:3e:4f:19:d4:b7:21:6f:8d: b1:91:6b:6c:72:7b:e2:24:a2:e6:50:c8:cb:64:10:62:08:1d: 89:71:9b:8d:15:d3:8a:05:58:2a:44:da:4c:f9:fb:bd:e4:44: a0:ad:28:00:1b:b5:73:39:e4:2e:05:9d:e2:c4:a8:f9:6a:e4: 02:8a:0a:0e:2e:6a:20:43:ca:3b:9b:56:e0:7c:cd:b7:dd:f6: 91:71:67:62:ea:44:eb:ed:ef:31:ce:ed:10:14:2b:64:00:fd: ff:0d:2c:a0:e4:6c:52:61:d9:72:0a:cd:04:17:10:5c:4b:50: ce:1d:b2:55:60:40:5e:4a:67:05:86:8e:2a:b4:34:f5:0b:86: 2a:3a:67:4e:08:0e:16:8a:4a:eb:a8:b4:c4:af:7a:43:ed:6e: dd:e8:87:23:a3:62:e1:f7:80:7e:b5:51:06:cf:37:0c:f9:1a: 74:25:8f:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwNTMxMDA0NzU3WhcNMjUwNjA3MDA0NzU3WjAYMRYwFAYD VQQDEw02ODNhNTFiZC1kNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5klkgmhccZdMxwTW8WPMM44ZU2G+cf5vb/juqrRZT6NbMC1iD5R/wkLPj31/ D8UCICb7IMIuD1SO8rGh8+BMTF4UQDFGFWTCbuZWJPDAr7I6kMW731hzJ21cCEIO UsAWkrXbAeoz0dKoq68Y/Ac+knklrPGrXkyETwU+VZ0wpmNAfzhjZujlPeS8XK1y AWDvCiCAs2pvsf9n4/AB+VsgljELmUOQnF38XRtLFGTziNOAknIpQI6lLX6tOGWk ms15leJkxITWoOyeKqhKfH/vz1BvLvlCXOc5nu0DlsGvbQo/KZDGEUkLP142xlsI 7qY3Tb0c1SKMrkyynvntA6q/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVrIrIr om5Id4pe7X9Ya3Ldah3CMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZujOdEmPFGjn3R4/11pAfdXDNehYdYWRRAduNYgo8VUgW0KZCLneN P5WUFcKAb7HbTbEuc4G1tKOd4N3FupvDX9l8sZgAH6otheTJVbrY0i9LPk8Z1Lch b42xkWtscnviJKLmUMjLZBBiCB2JcZuNFdOKBVgqRNpM+fu95ESgrSgAG7VzOeQu BZ3ixKj5auQCigoOLmogQ8o7m1bgfM233faRcWdi6kTr7e8xzu0QFCtkAP3/DSyg 5GxSYdlyCs0EFxBcS1DOHbJVYEBeSmcFho4qtDT1C4YqOmdOCA4WikrrqLTEr3pD 7W7d6Icjo2Lh94B+tVEGzzcM+Rp0JY84 -----END CERTIFICATE-----Generated at Sat May 31 16:40:45 2025 by rpki-client