$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: N4bGHI3hWIPKhbiUmCbHEIbDASTpRwKwB3JnOVVPrXQ= Subject key identifier: 1D:2A:37:21:5A:6D:A2:A8:09:9F:BD:E0:F4:24:76:4A:05:6C:C0:02 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 07FF Signing time: Fri 30 May 2025 21:10:54 +0000 Manifest this update: Fri 30 May 2025 21:10:54 +0000 Manifest next update: Fri 06 Jun 2025 21:10:54 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: RWGcGiMDLd+QF5HRU+FlscUQHHW8vYwgL8U7+IlPzqk=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: May 30 21:10:54 2025 GMT Not After : Jun 6 21:10:54 2025 GMT Subject: CN=683a1ede-e321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:91:1f:29:78:2f:0f:38:46:00:45:57:e8: ce:23:58:b1:55:65:68:b1:e1:08:25:4e:50:71:7c: 00:c5:c1:71:b5:4a:8a:c7:80:8e:0c:76:da:9b:cf: 74:fb:af:ed:1a:4a:ca:76:21:55:0a:4b:03:4f:98: 8b:7b:69:d9:8d:a3:30:96:9f:ed:23:06:47:1e:2d: 31:f5:8e:0a:a1:47:fc:91:de:94:40:e6:02:2f:dd: bb:ad:78:66:73:33:0c:d4:34:95:77:b3:26:4e:3f: ce:c0:8b:e5:55:29:15:72:58:ee:06:87:7d:2b:ef: 8e:ed:45:a1:fa:7b:ec:4d:0e:cf:83:92:99:46:3d: be:60:95:32:4b:b9:8c:95:8b:3e:e5:55:9c:39:f6: f6:a7:49:d9:21:d4:ac:2b:b6:89:18:7d:b6:e0:78: 1b:b5:63:fe:b6:8f:43:b8:bb:e6:16:69:be:14:fa: e8:8b:8c:f1:79:db:62:51:07:01:e2:23:08:30:13: ea:7d:24:47:6a:fb:cb:77:de:9b:0f:b5:e3:f4:7b: 58:de:dd:d2:e2:fb:bf:e9:47:b3:6a:d2:b1:1f:c7: 98:dc:0c:11:0d:f1:10:0a:7e:02:8c:f6:b6:48:57: 57:04:2c:57:96:bc:63:45:a3:73:59:78:cc:1a:3a: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:37:21:5A:6D:A2:A8:09:9F:BD:E0:F4:24:76:4A:05:6C:C0:02 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:58:d9:4d:63:d2:72:dc:b1:82:8d:f8:19:09:1b:f1:91:ac: 74:b5:2c:6c:97:21:5a:40:47:1f:ca:45:e9:36:fe:ca:f3:8c: d0:03:49:79:1b:39:5e:fb:55:3d:39:dd:e9:5c:27:c2:e8:10: 4e:22:b8:be:d2:41:ca:0d:e9:98:e8:53:a3:ac:09:8e:ed:40: ab:8e:fa:73:3d:a2:6d:39:74:cc:09:4b:02:6e:6e:f3:20:76: 06:c5:7e:29:93:60:e1:98:2f:de:b3:ce:22:3a:44:d2:08:d2: c3:63:a3:66:6e:f1:c9:f3:2d:49:df:e4:de:52:5e:7c:56:c6: a2:df:75:59:5a:14:02:de:aa:f5:4c:34:5e:cf:58:8c:ea:bc: f0:ae:6e:1b:6d:72:6b:e6:92:43:c8:29:f6:42:45:b2:6e:fb: de:41:76:1b:e7:58:06:a6:4d:54:54:07:2b:75:b8:6b:1f:0c: 11:bc:4e:5e:50:db:27:60:be:46:fc:be:eb:04:51:d3:c1:87: 68:1a:79:38:ce:9f:12:0c:f8:55:92:35:91:16:61:d7:7c:95: bc:a9:9d:c2:b1:3b:e8:05:e8:48:95:49:6d:31:c3:50:d6:e2: fb:c0:e7:97:f6:bf:1e:f3:b5:f8:c0:39:34:16:a8:12:73:4c: 71:ab:6f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjUwNTMwMjExMDU0WhcNMjUwNjA2MjExMDU0WjAYMRYwFAYD VQQDEw02ODNhMWVkZS1lMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHWRHyl4Lw84RgBFV+jOI1ixVWVoseEIJU5QcXwAxcFxtUqKx4CODHbam890 +6/tGkrKdiFVCksDT5iLe2nZjaMwlp/tIwZHHi0x9Y4KoUf8kd6UQOYCL927rXhm czMM1DSVd7MmTj/OwIvlVSkVcljuBod9K++O7UWh+nvsTQ7Pg5KZRj2+YJUyS7mM lYs+5VWcOfb2p0nZIdSsK7aJGH224HgbtWP+to9DuLvmFmm+FProi4zxedtiUQcB 4iMIMBPqfSRHavvLd96bD7Xj9HtY3t3S4vu/6UezatKxH8eY3AwRDfEQCn4CjPa2 SFdXBCxXlrxjRaNzWXjMGjo6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0qNyFa baKoCZ+94PQkdkoFbMACMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6WNlNY9Jy3LGCjfgZCRvxkax0tSxslyFaQEcfykXpNv7K84zQA0l5 Gzle+1U9Od3pXCfC6BBOIri+0kHKDemY6FOjrAmO7UCrjvpzPaJtOXTMCUsCbm7z IHYGxX4pk2DhmC/es84iOkTSCNLDY6NmbvHJ8y1J3+TeUl58Vsai33VZWhQC3qr1 TDRez1iM6rzwrm4bbXJr5pJDyCn2QkWybvveQXYb51gGpk1UVAcrdbhrHwwRvE5e UNsnYL5G/L7rBFHTwYdoGnk4zp8SDPhVkjWRFmHXfJW8qZ3CsTvoBehIlUltMcNQ 1uL7wOeX9r8e87X4wDk0FqgSc0xxq2/0 -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client