$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: 71TXsd7RwEOouFipdiUqMoVRVhUFuDnaV8wfwKIuGpo= Subject key identifier: 26:43:26:51:A3:D9:F0:4F:AD:20:CD:AC:DF:5D:C1:C4:25:1A:E9:68 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0BE1 Signing time: Fri 30 May 2025 19:01:18 +0000 Manifest this update: Fri 30 May 2025 19:01:17 +0000 Manifest next update: Fri 06 Jun 2025 19:01:17 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: VL2hKQ4XtXMiYbkPLF1m4avm7SctONHmhf947kOyHIY=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=) 3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: KHc6hdMetfcu7UM69svB42s0SGaTeAMb8i+TaWZ7DWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: May 30 19:01:17 2025 GMT Not After : Jun 6 19:01:17 2025 GMT Subject: CN=683a007e-7c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:84:7a:2a:a5:e2:dc:96:0f:f0:75:e6:99: 80:3b:cb:1d:47:eb:13:34:45:32:9a:32:dc:a2:73: 1a:99:c8:3d:0e:17:88:d3:66:14:66:83:cd:1b:5e: 05:18:83:fe:21:17:50:94:78:82:71:0e:b0:56:f9: 1c:f0:72:95:cf:f8:7d:f4:82:51:2f:a8:ce:25:d1: de:97:1c:a7:0d:64:51:17:7c:e0:dc:20:8d:7d:37: 79:1a:2a:86:27:2c:d9:a6:eb:33:95:44:9a:48:e8: 07:f0:99:1d:44:89:c4:4f:df:d7:f0:1c:8c:34:2b: 57:21:ad:04:35:69:b4:c4:9b:30:84:bf:58:e6:f5: 4f:ca:c8:ea:c2:94:fa:64:4a:63:d3:00:bf:ba:af: 4e:e8:46:3d:53:04:90:73:6c:51:96:25:a5:94:b2: 19:d9:97:e5:95:de:94:ee:fe:1e:74:80:37:0c:2f: 54:71:44:57:db:09:c9:8f:a3:e6:21:21:31:05:fd: 48:87:f8:a9:48:f4:96:68:3e:2d:16:ee:e2:9c:c8: 25:a8:95:db:66:03:90:62:cc:18:51:7d:13:31:f2: fe:ad:60:fd:21:e5:65:7d:f6:4e:2f:cd:60:e4:3b: cf:02:73:bb:ba:ef:f3:85:84:5e:85:9f:2c:96:66: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:43:26:51:A3:D9:F0:4F:AD:20:CD:AC:DF:5D:C1:C4:25:1A:E9:68 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:80:ba:75:77:e1:c2:bc:ec:d8:34:66:80:41:53:56:4d:38: f1:db:61:4d:6b:cb:a1:d7:48:72:82:52:3b:c1:f3:d2:02:07: 43:e5:c9:8e:5e:25:64:26:93:83:fa:48:81:74:63:62:2f:49: 89:7a:8f:d1:ef:5a:61:08:5b:fa:13:de:ce:91:3d:4d:63:88: 66:28:e3:8e:fc:8d:74:b3:f4:27:07:96:f7:47:45:6e:af:82: 28:6d:15:56:7f:6e:66:06:b6:c0:c2:e5:91:17:31:6f:25:a6: a1:ce:b9:d4:f8:74:26:68:a2:7d:9e:0e:0d:40:e0:99:7a:51: 32:0f:00:94:8d:70:e5:ae:d5:48:c2:13:2b:66:58:77:c8:7e: 7a:a6:0f:5e:65:e8:01:92:a4:cd:e1:d3:ad:bb:6e:15:36:f0: b8:22:75:a4:34:25:32:89:48:25:2b:0b:a6:25:e6:d4:97:53: 9b:98:fa:e6:9a:c1:92:9c:65:d6:cd:2c:83:34:3e:2f:fe:74: b3:c3:58:a3:77:47:1a:a4:9f:1d:e5:43:ae:38:7a:18:41:29: 56:18:a1:ec:97:fe:44:53:11:8d:af:a6:01:c7:e0:62:b2:d2: be:ca:02:7d:83:17:c9:e3:44:11:47:cd:4b:28:8d:87:0c:86: 4e:24:54:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNTMwMTkwMTE3WhcNMjUwNjA2MTkwMTE3WjAYMRYwFAYD VQQDEw02ODNhMDA3ZS03Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ6Eeiql4tyWD/B15pmAO8sdR+sTNEUymjLconMamcg9DheI02YUZoPNG14F GIP+IRdQlHiCcQ6wVvkc8HKVz/h99IJRL6jOJdHelxynDWRRF3zg3CCNfTd5GiqG JyzZpuszlUSaSOgH8JkdRInET9/X8ByMNCtXIa0ENWm0xJswhL9Y5vVPysjqwpT6 ZEpj0wC/uq9O6EY9UwSQc2xRliWllLIZ2Zflld6U7v4edIA3DC9UcURX2wnJj6Pm ISExBf1Ih/ipSPSWaD4tFu7inMglqJXbZgOQYswYUX0TMfL+rWD9IeVlffZOL81g 5DvPAnO7uu/zhYRehZ8slmZCXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZDJlGj 2fBPrSDNrN9dwcQlGuloMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsgLp1d+HCvOzYNGaAQVNWTTjx22FNa8uh10hyglI7wfPSAgdD5cmO XiVkJpOD+kiBdGNiL0mJeo/R71phCFv6E97OkT1NY4hmKOOO/I10s/QnB5b3R0Vu r4IobRVWf25mBrbAwuWRFzFvJaahzrnU+HQmaKJ9ng4NQOCZelEyDwCUjXDlrtVI whMrZlh3yH56pg9eZegBkqTN4dOtu24VNvC4InWkNCUyiUglKwumJebUl1ObmPrm msGSnGXWzSyDND4v/nSzw1ijd0capJ8d5UOuOHoYQSlWGKHsl/5EUxGNr6YBx+Bi stK+ygJ9gxfJ40QRR81LKI2HDIZOJFSJ -----END CERTIFICATE-----Generated at Sat May 31 17:32:02 2025 by rpki-client