$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: 7EyjWnu5l195atQoLjhMAdFUGAxql4wAe0SSfOuE0TQ= Subject key identifier: 5E:E3:39:AE:CD:1D:2F:D5:51:1A:B4:37:C3:50:32:E9:C6:4A:8C:7D Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 0185 Signing time: Thu 05 Jun 2025 03:00:16 +0000 Manifest this update: Thu 05 Jun 2025 03:00:15 +0000 Manifest next update: Thu 12 Jun 2025 03:00:15 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: d6ctoJhiLTfEjjNRvvclmzXZleYnb/QW+jOOeut4KrQ=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: F7gDTN0o2wOD506HIpMLfgl8UeSu5eT6/M2YdzZQ6qI=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Jun 5 03:00:15 2025 GMT Not After : Jun 12 03:00:15 2025 GMT Subject: CN=6841083f-5f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:59:b1:a0:21:29:7c:ee:56:51:2d:62:b4: 43:8d:cf:96:46:2d:40:e9:a5:99:12:6e:4c:7f:d5: 0a:2c:34:38:1d:84:39:46:41:b6:36:ba:1e:85:25: 1b:f6:65:e1:dd:fd:21:75:3a:2c:79:4a:6a:53:34: c5:1f:09:68:17:84:d5:64:a6:cd:b9:d5:b0:ef:6f: cf:a9:0e:e1:2b:35:5e:b0:aa:d3:be:ee:14:7c:7b: 1c:a4:2d:a1:af:8d:80:51:98:66:e0:08:d2:ae:09: 64:55:8c:02:51:f3:0b:af:fe:cb:db:a2:8b:c0:87: 06:0b:7d:3d:c5:01:5e:f0:9e:6c:1d:6f:87:c8:45: 03:32:dd:b9:e0:12:61:1d:c0:38:64:eb:3f:2e:7e: fd:9d:e1:c0:9d:cf:9e:01:d4:ec:9f:28:a7:c1:02: be:17:75:46:f5:52:43:80:7c:8b:82:4a:e2:02:78: 01:2b:d8:6c:5a:6a:0a:98:eb:ec:80:b4:a7:9a:6f: 07:6d:97:20:42:bf:0a:02:fa:d3:1b:bb:4c:a3:c0: 62:b0:a4:2a:5a:a2:b6:f4:d8:60:43:f3:07:63:e6: 21:55:bb:20:9d:cf:2f:91:29:84:53:36:e0:23:f7: 07:de:f2:aa:de:75:56:3d:a4:79:4f:11:59:ce:6a: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E3:39:AE:CD:1D:2F:D5:51:1A:B4:37:C3:50:32:E9:C6:4A:8C:7D X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bb:32:44:b0:8a:78:22:0c:c5:00:ea:89:26:1d:27:e6:d6: d2:87:82:28:2c:6d:50:fc:02:f0:39:02:7c:08:66:e2:22:f4: 16:9f:f9:89:d0:02:dc:89:23:b5:da:54:2d:17:d3:f7:f6:2c: a0:16:ab:a9:22:ed:15:f8:4a:8b:95:da:75:03:4f:8c:f4:0a: 12:6d:8e:09:c6:e1:41:81:c0:51:06:35:91:06:e9:86:fb:41: 51:28:a8:88:f6:84:ae:98:4d:0f:68:9d:8b:7a:af:ec:fc:b8: e3:03:97:28:7d:3b:fa:a1:25:d1:0d:bc:d8:65:b9:9b:c9:93: c9:66:95:32:44:24:14:e3:94:bd:d3:90:1c:1f:ed:4b:06:94: ab:04:8c:ac:f3:d2:76:4d:74:aa:7e:ed:9a:d0:74:1c:b3:77: d6:3e:af:52:d1:44:38:61:99:55:fe:13:d1:69:42:ff:aa:3d: 3c:3f:26:f5:28:45:9f:a6:5f:f1:89:40:c9:31:8b:42:3f:09: e6:c8:8c:8a:31:f9:71:7b:1a:30:fa:93:71:33:19:ab:45:1c: 61:c0:6e:c0:95:b0:eb:27:6c:91:55:c9:ce:02:75:4b:89:9e: ef:5e:66:c7:6c:d5:14:6d:a1:19:b1:2b:e5:e1:7f:94:5e:14: f1:b8:7e:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUwNjA1MDMwMDE1WhcNMjUwNjEyMDMwMDE1WjAYMRYwFAYD VQQDEw02ODQxMDgzZi01ZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qNZsaAhKXzuVlEtYrRDjc+WRi1A6aWZEm5Mf9UKLDQ4HYQ5RkG2NroehSUb 9mXh3f0hdToseUpqUzTFHwloF4TVZKbNudWw72/PqQ7hKzVesKrTvu4UfHscpC2h r42AUZhm4AjSrglkVYwCUfMLr/7L26KLwIcGC309xQFe8J5sHW+HyEUDMt254BJh HcA4ZOs/Ln79neHAnc+eAdTsnyinwQK+F3VG9VJDgHyLgkriAngBK9hsWmoKmOvs gLSnmm8HbZcgQr8KAvrTG7tMo8BisKQqWqK29NhgQ/MHY+YhVbsgnc8vkSmEUzbg I/cH3vKq3nVWPaR5TxFZzmrQowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7jOa7N HS/VURq0N8NQMunGSox9MB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPuzJEsIp4IgzFAOqJJh0n5tbSh4IoLG1Q/ALwOQJ8CGbiIvQWn/mJ 0ALciSO12lQtF9P39iygFqupIu0V+EqLldp1A0+M9AoSbY4JxuFBgcBRBjWRBumG +0FRKKiI9oSumE0PaJ2Leq/s/LjjA5cofTv6oSXRDbzYZbmbyZPJZpUyRCQU45S9 05AcH+1LBpSrBIys89J2TXSqfu2a0HQcs3fWPq9S0UQ4YZlV/hPRaUL/qj08Pyb1 KEWfpl/xiUDJMYtCPwnmyIyKMflxexow+pNxMxmrRRxhwG7AlbDrJ2yRVcnOAnVL iZ7vXmbHbNUUbaEZsSvl4X+UXhTxuH7O -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:54 2025 by rpki-client