$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: LqDerRy9I+g72ukXHigpMZ0cRS9sz2pCEH7Qg2/gH34= Subject key identifier: 7A:3D:21:CA:DA:4A:DE:C8:2B:05:B3:B9:9B:73:75:C8:FD:82:3A:94 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D17 Signing time: Sat 31 May 2025 18:05:39 +0000 Manifest this update: Sat 31 May 2025 18:05:38 +0000 Manifest next update: Sat 07 Jun 2025 18:05:38 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: bwGsezE3rVgDVo3qTqieVq1XLJNRz5lR5gY/gezAbaw=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 31 18:05:38 2025 GMT Not After : Jun 7 18:05:38 2025 GMT Subject: CN=683b44f3-08ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:f9:a4:bd:76:7c:1f:e6:6c:eb:15:7c:6e: 5a:9e:5f:be:83:e8:c4:80:7b:db:1c:5e:2a:0d:ee: ab:d2:3f:43:1e:5e:49:bb:1a:78:c5:41:4a:0f:91: f2:a1:82:eb:3a:62:6f:67:92:62:2e:ca:a3:74:73: ce:a7:ad:37:c4:b0:d4:f1:09:74:c1:cc:26:d2:16: 8d:7d:5e:a2:6e:68:61:57:32:67:d2:5a:b5:0b:85: 47:c7:46:4b:f3:80:20:1e:52:2f:c7:ea:08:9e:5d: 49:52:b9:84:bd:78:63:8e:08:10:56:88:ff:83:78: 05:a5:2d:54:06:89:a0:72:e2:7b:4b:7c:3b:c4:67: 43:ef:3f:86:e7:bc:94:7b:cc:51:c8:f4:a9:3f:b2: 60:da:3b:cb:e0:65:92:2e:af:6c:eb:17:ea:4f:d7: f4:06:b4:72:ec:2a:75:13:96:19:a8:b2:b2:aa:d8: 32:cf:6b:de:08:52:4a:93:91:f3:76:db:a0:02:97: 16:7a:f7:41:21:e6:5f:e1:07:f1:27:66:80:e7:ee: ba:df:ce:96:28:a2:e4:89:02:ab:ce:f1:29:f4:2a: d5:5a:3f:e0:a5:44:67:cd:fd:e6:ad:fb:12:3b:78: 3c:e9:6d:14:1e:d7:ed:20:53:44:8d:e0:74:83:89: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3D:21:CA:DA:4A:DE:C8:2B:05:B3:B9:9B:73:75:C8:FD:82:3A:94 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:82:bd:62:c4:cf:f8:75:a1:22:3b:24:6e:08:f5:7c:fb:53: 4e:4e:ff:89:26:7b:bc:7d:2e:2f:11:6e:30:2f:ad:81:23:00: 80:d8:0c:7b:95:3d:ea:29:2c:d2:48:0f:15:8f:6b:12:30:cf: 9b:29:76:c4:46:2e:d5:f9:d4:43:15:7d:ca:63:f2:c3:45:fd: bf:3d:7f:f9:95:33:f0:18:58:82:cf:31:a7:8e:51:11:5a:43: 1d:fa:36:94:5f:cb:a8:5d:ff:0d:dc:db:79:d9:01:fb:7d:02: cd:34:7d:20:c1:1f:52:b2:7c:c8:3e:ad:21:72:f7:d2:13:02: 1a:bc:86:96:89:91:85:f3:21:ea:72:63:ec:1b:8f:e5:48:71: 64:b4:04:79:92:6a:51:9c:5e:d6:7d:34:95:98:f3:b0:96:8b: 58:e4:5b:65:0a:b9:e9:88:26:90:5e:37:6f:51:9e:40:f2:e1: 07:10:9a:2f:eb:22:92:2a:21:8f:20:8c:f8:f6:b8:d8:dc:dc: ba:bd:22:05:39:e0:78:d5:23:c2:d8:1a:07:30:3b:ca:13:af: 42:66:c9:75:62:ea:db:e2:41:2e:20:04:34:f5:32:b6:71:bd: 94:c6:b3:6b:0b:a0:82:38:0c:f6:49:f4:66:b7:af:d6:ac:12: 08:97:72:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwNTMxMTgwNTM4WhcNMjUwNjA3MTgwNTM4WjAYMRYwFAYD VQQDEw02ODNiNDRmMy0wOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXf5pL12fB/mbOsVfG5anl++g+jEgHvbHF4qDe6r0j9DHl5Juxp4xUFKD5Hy oYLrOmJvZ5JiLsqjdHPOp603xLDU8Ql0wcwm0haNfV6ibmhhVzJn0lq1C4VHx0ZL 84AgHlIvx+oInl1JUrmEvXhjjggQVoj/g3gFpS1UBomgcuJ7S3w7xGdD7z+G57yU e8xRyPSpP7Jg2jvL4GWSLq9s6xfqT9f0BrRy7Cp1E5YZqLKyqtgyz2veCFJKk5Hz dtugApcWevdBIeZf4QfxJ2aA5+66386WKKLkiQKrzvEp9CrVWj/gpURnzf3mrfsS O3g86W0UHtftIFNEjeB0g4n4kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo9Icra St7IKwWzuZtzdcj9gjqUMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrgr1ixM/4daEiOyRuCPV8+1NOTv+JJnu8fS4vEW4wL62BIwCA2Ax7 lT3qKSzSSA8Vj2sSMM+bKXbERi7V+dRDFX3KY/LDRf2/PX/5lTPwGFiCzzGnjlER WkMd+jaUX8uoXf8N3Nt52QH7fQLNNH0gwR9SsnzIPq0hcvfSEwIavIaWiZGF8yHq cmPsG4/lSHFktAR5kmpRnF7WfTSVmPOwlotY5FtlCrnpiCaQXjdvUZ5A8uEHEJov 6yKSKiGPIIz49rjY3Ny6vSIFOeB41SPC2BoHMDvKE69CZsl1Yurb4kEuIAQ09TK2 cb2UxrNrC6CCOAz2SfRmt6/WrBIIl3Ks -----END CERTIFICATE-----Generated at Mon Jun 2 06:39:41 2025 by rpki-client