$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft File: gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json) Hash identifier: MT54pIqZY+hJvNaeDJzLW9EiB1zS+666IJDAjvhSIww= Subject key identifier: D1:9E:BC:BF:FC:7B:82:9B:1E:05:E8:C1:77:C1:E7:DB:35:42:4A:F4 Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft Manifest number: 065F Signing time: Fri 30 May 2025 22:40:52 +0000 Manifest this update: Fri 30 May 2025 22:40:52 +0000 Manifest next update: Fri 06 Jun 2025 22:40:52 +0000 Files and hashes: 1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 9JKEf8oZdB6S6J3ahIBZUn1L8ktm6tZe89OsWoeGo8I=) 2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: May 30 22:40:52 2025 GMT Not After : Jun 6 22:40:52 2025 GMT Subject: CN=683a33f4-0f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:9d:8d:91:e1:1a:90:e3:42:e5:50:ce:a4: 0d:4a:a2:d9:34:d0:32:42:db:ed:e3:35:db:74:6b: 4e:d5:65:e6:69:78:be:1a:e5:c0:45:30:86:08:85: 15:65:fb:11:49:5e:e3:fd:b1:e7:28:5f:9c:31:3e: 0e:a8:d3:21:cd:76:33:8a:3d:0b:00:04:dc:0d:9e: 3d:c0:58:14:cc:3d:d8:84:72:28:04:a2:49:11:2e: 1b:c4:d7:87:1c:16:1a:1b:3c:06:dd:05:5a:9a:2c: 16:39:98:92:ba:da:ee:08:68:b6:4c:7c:0e:2d:ba: 1c:5b:57:ea:e2:f4:b6:a6:98:a1:8b:88:ba:ea:49: 4d:93:1f:fc:01:e5:f2:bd:8b:3f:03:cc:4c:3a:05: 5f:0a:b1:80:7f:2e:7f:19:fb:d9:5b:d4:ff:31:72: 7a:e4:93:7d:09:83:90:ba:37:f4:27:05:2a:ee:bd: a9:76:65:bd:45:f6:1f:de:7a:dc:79:30:62:39:5b: 28:12:5b:80:cb:67:9e:1a:35:4c:71:4c:62:95:17: b6:3a:8e:0f:a8:b3:f5:05:86:a9:19:9f:22:46:4b: 5a:ec:c0:e6:0a:d2:0a:f0:08:45:06:7d:95:9d:7b: 5d:7c:b3:f0:b6:72:5d:01:3e:9f:ed:57:47:a5:1a: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9E:BC:BF:FC:7B:82:9B:1E:05:E8:C1:77:C1:E7:DB:35:42:4A:F4 X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c2:3f:f3:a2:ee:d4:10:6e:a7:c9:a4:fa:4d:cb:5b:2a:b9: a5:da:a9:11:2a:18:b0:d6:20:de:9f:10:9b:85:f3:34:67:56: 19:a4:0c:a8:f0:ee:e1:6e:cd:db:92:a8:3e:42:9d:af:9a:c6: 93:84:aa:67:25:6e:ce:5f:2b:c7:ab:77:c5:be:51:da:75:ff: 9e:c0:5a:1c:3f:0a:53:64:16:c1:86:49:02:af:d5:af:9a:52: 74:15:76:78:1f:de:51:eb:d5:83:d3:e0:39:0d:d1:2e:1b:24: d5:10:47:9f:36:01:08:5f:cf:1d:46:61:c2:fe:61:bc:37:17: ba:70:94:35:dd:0d:17:9a:66:88:10:3d:cf:0f:1f:e9:dc:84: cb:e5:65:d6:bf:71:1a:1c:82:d0:7b:bf:28:12:9f:cc:f0:59: 57:af:1e:54:98:ce:21:da:d2:da:f4:4c:09:51:1b:2f:d9:33: 15:32:5a:81:8e:b4:66:08:aa:68:19:60:89:08:9c:68:40:50: 22:2b:3a:6f:d5:1f:e3:5f:70:9e:87:7b:68:01:7d:5b:9d:70: e7:d1:a7:6b:b8:85:66:af:a3:a8:d4:20:c5:13:0d:90:d8:79: 0b:0c:29:d1:7b:9a:18:56:6d:1d:e8:0b:4f:f2:10:f8:cc:2b: 54:86:c9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwNTMwMjI0MDUyWhcNMjUwNjA2MjI0MDUyWjAYMRYwFAYD VQQDEw02ODNhMzNmNC0wZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwqdjZHhGpDjQuVQzqQNSqLZNNAyQtvt4zXbdGtO1WXmaXi+GuXARTCGCIUV ZfsRSV7j/bHnKF+cMT4OqNMhzXYzij0LAATcDZ49wFgUzD3YhHIoBKJJES4bxNeH HBYaGzwG3QVamiwWOZiSutruCGi2THwOLbocW1fq4vS2ppihi4i66klNkx/8AeXy vYs/A8xMOgVfCrGAfy5/GfvZW9T/MXJ65JN9CYOQujf0JwUq7r2pdmW9RfYf3nrc eTBiOVsoEluAy2eeGjVMcUxilRe2Oo4PqLP1BYapGZ8iRkta7MDmCtIK8AhFBn2V nXtdfLPwtnJdAT6f7VdHpRpN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGevL/8 e4KbHgXowXfB59s1Qkr0MB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83 Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzwj/zou7UEG6nyaT6TctbKrml2qkRKhiw1iDenxCbhfM0Z1YZpAyo 8O7hbs3bkqg+Qp2vmsaThKpnJW7OXyvHq3fFvlHadf+ewFocPwpTZBbBhkkCr9Wv mlJ0FXZ4H95R69WD0+A5DdEuGyTVEEefNgEIX88dRmHC/mG8Nxe6cJQ13Q0XmmaI ED3PDx/p3ITL5WXWv3EaHILQe78oEp/M8FlXrx5UmM4h2tLa9EwJURsv2TMVMlqB jrRmCKpoGWCJCJxoQFAiKzpv1R/jX3Ceh3toAX1bnXDn0adruIVmr6Oo1CDFEw2Q 2HkLDCnRe5oYVm0d6AtP8hD4zCtUhskh -----END CERTIFICATE-----Generated at Sat May 31 14:56:23 2025 by rpki-client