$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: +KbqPVSfu0mQI5KK4ueEPBrvI5rXVFew7bnbI5pffYM= Subject key identifier: CD:F3:D0:84:C5:02:F1:C0:7B:98:00:CF:6C:35:C9:A5:A9:6D:70:07 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: B0 Signing time: Tue 03 Jun 2025 05:47:25 +0000 Manifest this update: Tue 03 Jun 2025 05:47:24 +0000 Manifest next update: Tue 10 Jun 2025 05:47:24 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: Z4cw0twv9y8OMEgL0WdzeO88AdIvGBOD8u5s5Pt5erc=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jun 3 05:47:24 2025 GMT Not After : Jun 10 05:47:24 2025 GMT Subject: CN=683e8c6d-6dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:a5:a2:83:c7:dd:12:fd:35:71:65:59:d4: 4f:49:6d:af:12:e3:db:84:49:02:79:04:dc:fe:d2: db:c3:e0:bb:d9:09:62:9c:09:d5:47:52:8b:90:53: 85:0c:f6:1f:5c:ff:f9:fd:08:54:f6:25:03:fa:70: fb:54:d3:a7:f1:8a:ca:81:5e:fb:57:ae:ba:fa:45: 58:45:e0:02:d7:c8:7c:4d:b8:9f:87:68:ba:0d:11: 41:c7:66:b0:12:8b:6a:f9:9e:ae:b6:60:c7:9b:f3: a1:b6:24:75:f8:b0:96:0a:a6:20:bf:fa:6d:43:a2: ce:fb:d9:67:25:20:cf:7d:ed:7d:45:b3:a1:50:63: 6e:30:65:a4:f8:28:8c:a9:57:c0:e6:60:22:7a:53: f5:c0:7e:2d:4b:1c:5e:a8:53:a7:dd:32:c8:70:67: 08:2d:b8:cc:a8:c8:5b:96:d3:7b:b2:54:6f:c6:18: 2a:4f:6e:2d:33:2c:cc:cf:c6:a6:bf:30:1b:6f:56: da:c9:2e:58:bc:91:37:03:01:44:2d:bc:b8:3d:db: d2:11:87:df:7e:69:46:84:23:95:a4:9e:2a:8d:ec: 58:1d:a7:6a:7d:43:bc:81:46:2d:c0:c0:bb:78:2d: d6:cf:aa:69:67:5e:b1:da:13:cd:9f:c5:4b:b8:67: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:D0:84:C5:02:F1:C0:7B:98:00:CF:6C:35:C9:A5:A9:6D:70:07 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7f:6a:82:3f:1c:6f:e7:77:8d:ad:e6:5d:8f:2f:97:c1:51: 83:40:a4:b7:55:48:51:e8:be:7e:8f:fe:53:5c:82:08:a4:bb: b9:bd:96:bb:09:e1:89:48:06:65:d5:35:1f:8d:9b:49:48:51: 49:ee:69:b4:60:0a:94:ea:aa:0d:47:4f:c9:6c:e2:c9:ff:02: 31:29:a6:f2:7f:10:15:aa:3d:ed:2f:eb:4f:23:ed:60:10:2f: 30:82:83:92:b4:7b:07:4d:7b:c3:ea:7b:54:5b:44:80:35:4b: b4:0c:2e:fd:40:20:88:fb:40:82:88:31:1d:73:a9:f9:3d:a4: f4:c3:f8:94:9b:c5:b9:0b:28:00:5d:41:d0:71:29:c9:bf:98: e2:54:d4:5a:e1:2a:55:8c:93:53:74:48:41:d6:26:a9:85:17: df:61:cc:54:55:b1:d5:79:74:01:35:97:f9:a8:e2:ed:26:0a: e4:29:39:50:d8:ab:06:78:0e:28:f8:de:16:54:2d:b3:50:5f: b6:6a:92:c5:3d:27:a1:05:4b:8b:d5:9c:3f:42:9d:d8:06:25: 66:db:27:22:75:bc:dd:0f:9e:e6:50:14:e1:90:d2:9b:f9:16: 9d:0f:63:c9:ef:6d:b3:d9:f8:13:c7:22:ab:54:aa:69:c5:3b: 85:6d:62:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwNjAzMDU0NzI0WhcNMjUwNjEwMDU0NzI0WjAYMRYwFAYD VQQDEw02ODNlOGM2ZC02ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NGlooPH3RL9NXFlWdRPSW2vEuPbhEkCeQTc/tLbw+C72QlinAnVR1KLkFOF DPYfXP/5/QhU9iUD+nD7VNOn8YrKgV77V666+kVYReAC18h8Tbifh2i6DRFBx2aw Eotq+Z6utmDHm/OhtiR1+LCWCqYgv/ptQ6LO+9lnJSDPfe19RbOhUGNuMGWk+CiM qVfA5mAielP1wH4tSxxeqFOn3TLIcGcILbjMqMhbltN7slRvxhgqT24tMyzMz8am vzAbb1bayS5YvJE3AwFELby4PdvSEYfffmlGhCOVpJ4qjexYHadqfUO8gUYtwMC7 eC3Wz6ppZ16x2hPNn8VLuGczGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3z0ITF AvHAe5gAz2w1yaWpbXAHMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKf2qCPxxv53eNreZdjy+XwVGDQKS3VUhR6L5+j/5TXIIIpLu5vZa7 CeGJSAZl1TUfjZtJSFFJ7mm0YAqU6qoNR0/JbOLJ/wIxKabyfxAVqj3tL+tPI+1g EC8wgoOStHsHTXvD6ntUW0SANUu0DC79QCCI+0CCiDEdc6n5PaT0w/iUm8W5CygA XUHQcSnJv5jiVNRa4SpVjJNTdEhB1iaphRffYcxUVbHVeXQBNZf5qOLtJgrkKTlQ 2KsGeA4o+N4WVC2zUF+2apLFPSehBUuL1Zw/Qp3YBiVm2ycidbzdD57mUBThkNKb +RadD2PJ722z2fgTxyKrVKppxTuFbWIx -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:40 2025 by rpki-client