$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json) Hash identifier: RVQdCtVt20pzu1/33zN73x0xCCGE5eKNrp15Hmv3LVg= Subject key identifier: 53:9D:7C:50:15:92:4D:E4:7D:67:9D:C8:26:46:FB:A1:EF:2A:25:64 Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft Manifest number: 0127 Signing time: Thu 05 Jun 2025 03:59:50 +0000 Manifest this update: Thu 05 Jun 2025 03:59:49 +0000 Manifest next update: Thu 12 Jun 2025 03:59:49 +0000 Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: JrA91Ox9MBYy+KkwxgxMfbSqUKil7BXb6dMHmbrfSZo=) 2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE Validity Not Before: Jun 5 03:59:49 2025 GMT Not After : Jun 12 03:59:49 2025 GMT Subject: CN=68411636-532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:67:f5:e0:97:e3:e1:23:87:80:3c:b8:7a: ff:16:6e:40:af:06:15:eb:a7:44:a0:88:c8:a0:79: f3:3f:f5:c3:d3:5a:7f:df:fe:c4:76:b0:5b:9a:8b: 00:26:3c:c1:2f:49:e7:38:49:ae:74:78:91:98:87: b0:92:cd:98:da:94:a7:9e:18:a9:7a:d7:f8:d6:4e: bb:d4:8c:d8:c5:d2:d2:71:5e:9e:59:18:41:de:a5: 1e:df:a4:6e:a7:e1:2a:57:34:d2:7a:3c:f7:f7:24: a5:bf:38:bb:40:bd:bd:4d:55:3e:16:a4:51:5a:d9: ca:ef:31:e8:e6:8a:2e:7a:31:77:a4:30:13:bd:40: 0c:50:ad:f7:48:d6:ef:02:77:35:b0:91:34:08:ca: 4a:e1:c9:f5:bb:dc:22:4c:90:dc:fa:64:5b:6c:05: e2:a1:65:22:b7:f9:70:6a:f3:ff:8b:d1:e4:e7:dd: f4:87:34:40:c6:e9:49:77:32:30:88:47:5b:34:9f: ed:99:f7:5d:64:95:f0:f1:43:30:4d:24:58:0a:a6: 0d:73:84:6c:1e:f3:e7:26:1e:2b:ea:18:33:c3:71: 83:94:3d:6f:58:f8:8e:73:64:49:3c:e9:90:a7:03: 96:43:7c:23:53:e7:93:5e:41:56:c2:13:4a:62:79: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:7C:50:15:92:4D:E4:7D:67:9D:C8:26:46:FB:A1:EF:2A:25:64 X509v3 Authority Key Identifier: keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fc:17:59:3c:cc:f2:38:af:95:05:0c:43:e9:bb:b3:29:e6: 66:15:6f:8a:32:61:e3:4f:80:06:34:00:82:99:ba:88:d4:fb: 85:6c:f0:85:6f:b9:7b:c3:0d:5b:4e:d0:9d:e8:65:15:66:db: 8e:16:8e:98:8b:22:f0:76:65:78:51:23:d0:58:d1:f5:fa:3a: 38:c8:b0:34:34:19:7c:53:3f:b5:5b:9c:98:99:b6:fd:3b:d0: 13:96:86:9d:6e:a1:17:6c:a9:cd:49:ca:3e:c0:bd:e7:4d:d6: e4:fb:6d:20:3c:6c:ca:bb:d0:11:1b:ac:e0:8d:57:96:29:47: af:e8:72:4f:98:ec:c9:b4:6a:7a:74:07:71:89:69:84:8c:ea: 96:35:e7:dd:6b:1b:04:a2:cd:50:6a:4c:53:04:f4:cb:cd:bd: 54:cf:ea:62:c3:1d:3b:29:a0:be:5a:6e:55:84:eb:33:95:86: e7:85:89:83:ce:6d:2b:d9:b2:a8:b3:74:d6:16:ec:0a:97:b7: 36:c2:07:ac:cf:30:9c:b4:0c:d7:61:a4:9d:d6:eb:04:bb:8c: 64:2b:c3:b7:a1:ae:45:8a:91:4b:7a:c9:71:0e:13:fd:97:45: 9f:6c:31:ee:02:44:3b:51:50:bb:c3:db:87:9b:d5:0a:31:a0: cc:84:37:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1 NTgzNDMwRUUwHhcNMjUwNjA1MDM1OTQ5WhcNMjUwNjEyMDM1OTQ5WjAYMRYwFAYD VQQDEw02ODQxMTYzNi01MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8tn9eCX4+Ejh4A8uHr/Fm5ArwYV66dEoIjIoHnzP/XD01p/3/7EdrBbmosA JjzBL0nnOEmudHiRmIewks2Y2pSnnhipetf41k671IzYxdLScV6eWRhB3qUe36Ru p+EqVzTSejz39ySlvzi7QL29TVU+FqRRWtnK7zHo5oouejF3pDATvUAMUK33SNbv Anc1sJE0CMpK4cn1u9wiTJDc+mRbbAXioWUit/lwavP/i9Hk5930hzRAxulJdzIw iEdbNJ/tmfddZJXw8UMwTSRYCqYNc4RsHvPnJh4r6hgzw3GDlD1vWPiOc2RJPOmQ pwOWQ3wjU+eTXkFWwhNKYnlrVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOdfFAV kk3kfWedyCZG+6HvKiVkMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4 OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs/BdZPMzyOK+VBQxD6buzKeZmFW+KMmHjT4AGNACCmbqI1PuFbPCF b7l7ww1bTtCd6GUVZtuOFo6YiyLwdmV4USPQWNH1+jo4yLA0NBl8Uz+1W5yYmbb9 O9ATloadbqEXbKnNSco+wL3nTdbk+20gPGzKu9ARG6zgjVeWKUev6HJPmOzJtGp6 dAdxiWmEjOqWNefdaxsEos1QakxTBPTLzb1Uz+piwx07KaC+Wm5VhOszlYbnhYmD zm0r2bKos3TWFuwKl7c2wgeszzCctAzXYaSd1usEu4xkK8O3oa5FipFLeslxDhP9 l0WfbDHuAkQ7UVC7w9uHm9UKMaDMhDcZ -----END CERTIFICATE-----Generated at Thu Jun 5 19:57:18 2025 by rpki-client