$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: IPeyzQ6MUQVqysfsI/zFGlJcPeKA+hP6nN44xrj5Fqo= Subject key identifier: 83:61:97:57:76:63:3B:05:50:CE:1D:6E:A8:AD:2A:1E:A4:DC:F0:96 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 4A Signing time: Tue 03 Jun 2025 07:13:22 +0000 Manifest this update: Tue 03 Jun 2025 07:13:21 +0000 Manifest next update: Tue 10 Jun 2025 07:13:21 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: GHnfAMGSPBUfCeT5a39G/wvlcnhNZMAoIPzueCbMA1I=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Jun 3 07:13:21 2025 GMT Not After : Jun 10 07:13:21 2025 GMT Subject: CN=683ea091-fdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:19:78:29:12:6a:da:e3:36:2c:41:10:eb: 45:f3:cd:8e:f0:4f:72:ac:45:b7:bc:05:87:6c:75: 0e:b0:3a:b0:91:77:9a:9e:67:d2:4a:34:47:95:dd: 7c:1c:fc:05:7d:af:24:d0:67:6d:50:11:2b:7b:f3: 7d:04:47:eb:4f:44:d5:eb:ea:dd:80:fb:32:5d:97: 88:50:cf:cc:03:10:b9:53:27:05:7f:54:2d:96:c4: 44:5c:ac:3f:59:21:51:68:52:28:91:80:fa:aa:87: 78:61:91:c2:f2:91:55:07:ce:4e:29:16:60:94:90: 20:97:b2:a2:ee:fc:5d:36:59:6f:7c:a9:e2:78:35: 6f:8c:8c:21:01:1d:a3:de:b1:d9:dc:e5:b3:b5:19: a5:80:49:fc:ae:b1:4d:70:3b:e1:03:d7:86:0d:75: ba:07:3a:07:a1:f3:2f:21:e4:6e:3c:66:54:70:b0: 19:e1:78:94:4a:36:24:93:e3:10:73:bc:19:da:ed: ce:9d:48:9f:39:a8:ba:45:67:f2:d2:e9:81:7c:6f: a3:ce:ae:c1:1b:7a:05:23:3d:10:38:38:34:b6:6c: 40:5b:cf:04:71:e9:12:2c:09:85:cc:c4:c1:03:3a: 50:53:29:66:6a:06:76:08:0c:1b:49:e1:1e:e6:19: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:61:97:57:76:63:3B:05:50:CE:1D:6E:A8:AD:2A:1E:A4:DC:F0:96 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0e:a6:c9:74:bc:71:dd:d0:3e:eb:8c:9e:3b:d4:a2:b1:5a: da:0c:93:a7:41:93:d2:47:2c:61:4b:0a:19:47:c0:02:f3:8e: 27:33:3e:36:2b:73:37:7e:e8:25:47:ab:3e:bf:76:39:e5:aa: 7c:40:bd:e5:e3:5a:55:1c:56:77:d1:96:f3:94:a0:f1:d8:fa: 4d:26:b7:98:00:cc:f3:91:e0:42:67:1d:03:26:f7:f5:61:bc: 3f:de:85:9f:1d:ac:53:c2:67:ab:6a:4e:4c:0f:98:66:24:81: e5:23:89:f3:50:cc:21:43:13:7c:47:81:94:45:92:c5:67:b0: c8:0e:b9:8f:68:20:bf:cb:72:47:13:e8:ff:a2:b1:9f:0e:d5: aa:d0:85:2e:ac:15:1e:59:ce:2a:bf:3b:74:d8:80:2c:6a:bf: fc:de:a2:ff:e7:89:f6:58:9e:c7:3c:1b:56:41:de:fb:ac:75: c1:ab:26:48:76:a1:5a:c5:92:24:bf:d8:70:78:63:bf:25:b9: ba:06:34:be:0b:b2:0a:82:0c:54:b1:82:70:21:6d:02:cb:ab: 8d:d8:22:4c:54:65:b6:85:d7:dd:0c:68:ec:61:48:f3:5d:7b: a4:bb:50:44:e2:24:04:78:a4:a2:0b:ab:fb:be:9c:0c:d5:59: 8f:8b:ff:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTA2MDMwNzEzMjFaFw0yNTA2MTAwNzEzMjFaMBgxFjAUBgNV BAMTDTY4M2VhMDkxLWZkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSSxl4KRJq2uM2LEEQ60XzzY7wT3KsRbe8BYdsdQ6wOrCRd5qeZ9JKNEeV3Xwc /AV9ryTQZ21QESt7830ER+tPRNXr6t2A+zJdl4hQz8wDELlTJwV/VC2WxERcrD9Z IVFoUiiRgPqqh3hhkcLykVUHzk4pFmCUkCCXsqLu/F02WW98qeJ4NW+MjCEBHaPe sdnc5bO1GaWASfyusU1wO+ED14YNdboHOgeh8y8h5G48ZlRwsBnheJRKNiST4xBz vBna7c6dSJ85qLpFZ/LS6YF8b6POrsEbegUjPRA4ODS2bEBbzwRx6RIsCYXMxMED OlBTKWZqBnYIDBtJ4R7mGd7fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg2GXV3Zj OwVQzh1uqK0qHqTc8JYwHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUOpsl0vHHd0D7rjJ471KKxWtoMk6dBk9JHLGFLChlHwALzjiczPjYr czd+6CVHqz6/djnlqnxAveXjWlUcVnfRlvOUoPHY+k0mt5gAzPOR4EJnHQMm9/Vh vD/ehZ8drFPCZ6tqTkwPmGYkgeUjifNQzCFDE3xHgZRFksVnsMgOuY9oIL/LckcT 6P+isZ8O1arQhS6sFR5Zziq/O3TYgCxqv/zeov/nifZYnsc8G1ZB3vusdcGrJkh2 oVrFkiS/2HB4Y78luboGNL4LsgqCDFSxgnAhbQLLq43YIkxUZbaF190MaOxhSPNd e6S7UETiJAR4pKILq/u+nAzVWY+L/+w= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:21 2025 by rpki-client