$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: 5bZZZVMUZzcfSi6uXuM3E4SwNZ03Bl2wtjAMET3YfL0= Subject key identifier: A0:B1:77:6B:29:8D:B8:98:82:E7:67:64:67:90:DE:34:CA:C8:58:AA Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 073E Signing time: Thu 24 Apr 2025 21:31:45 +0000 Manifest this update: Thu 24 Apr 2025 21:31:44 +0000 Manifest next update: Thu 01 May 2025 21:31:44 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: JPfAx9FdoTJjvNev3Fmvi/O/O898xbbCD9rS9tm/VP4=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: RF8Kiol9Bl+cT8NMkiixB2yHl7PyCHbWNwT/OTtymFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Apr 24 21:31:44 2025 GMT Not After : May 1 21:31:44 2025 GMT Subject: CN=680aadc1-7852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:1d:ea:0c:75:66:48:59:5b:33:a9:f0:d9: 84:f1:59:75:4f:eb:fe:db:6d:af:c8:a9:96:9c:03: 27:8d:1d:0e:8a:29:04:71:65:ff:84:49:db:2e:f5: aa:7f:73:c8:b7:ce:02:88:fa:b5:97:de:1f:ba:1c: 4b:6e:43:ec:7c:70:af:b1:91:cb:fd:9f:9e:e6:d2: da:75:b2:fe:d9:7f:5a:3c:f5:2e:05:2f:dc:7a:f5: 38:4a:b1:60:42:9d:1a:1d:1b:03:6c:60:27:94:b3: b9:7c:17:1f:19:cb:ba:5e:5d:88:ea:1d:93:22:f4: b8:af:da:36:b4:95:b6:df:36:03:fc:43:fb:e2:af: 44:da:d1:d0:4b:6f:33:47:1e:ff:79:2b:a6:4c:b3: 96:a3:63:9b:ad:f8:b3:89:e7:1f:b4:09:df:c1:fc: 13:34:fc:0e:19:64:9f:99:d9:98:7c:f8:b4:6a:d2: 07:18:cc:d9:51:dd:59:6b:28:ba:d3:25:64:41:6f: cf:b1:12:3f:4d:23:8d:cc:6c:d3:0a:a0:d8:aa:7d: 3f:89:eb:24:99:af:54:c9:56:27:44:29:ab:63:83: 74:87:6d:df:e7:74:2e:20:dc:fb:b3:1d:12:30:f5: 0b:49:aa:0e:9b:d9:ea:50:85:30:5b:6b:85:ac:15: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B1:77:6B:29:8D:B8:98:82:E7:67:64:67:90:DE:34:CA:C8:58:AA X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d5:b8:12:a7:02:19:9d:eb:4d:a2:8f:d2:b7:0a:35:9f:90: 8c:90:8b:9c:eb:e2:8f:58:02:2e:03:a0:6a:f7:dc:75:53:76: 46:0d:f9:2c:6e:ad:fe:3c:86:94:f5:38:3e:e2:24:fc:64:35: ba:94:b5:0e:8b:ec:30:4b:42:29:db:ef:12:48:20:93:01:b9: f3:18:12:02:aa:37:72:0a:07:fa:4e:da:a4:9a:6d:59:e8:44: 53:8e:03:1c:bb:0a:89:4a:30:d4:f5:5f:52:64:18:17:ab:cf: 8a:43:88:65:60:97:68:2e:90:1e:8a:7a:49:26:12:b2:f3:77: e0:76:0c:a3:53:48:91:fa:35:b1:6b:58:64:6f:db:10:82:f2: 3c:12:11:7c:69:76:81:43:ad:fe:1e:11:91:e7:57:7c:c7:f6: 36:14:07:68:07:f0:95:93:06:9b:f8:09:42:f3:1c:3b:a2:26: 73:64:6f:bf:fa:5c:2f:c2:85:90:2f:03:a9:17:d4:6b:89:9f: cb:1a:d3:c2:e4:17:73:16:56:f8:3f:a0:fd:e8:83:86:00:12: 74:96:11:e3:23:21:51:cd:75:84:d1:28:4c:27:ae:71:dc:98: d5:3f:52:a3:76:f6:a1:1f:64:5a:f9:6d:95:cc:9a:c4:dc:db: 63:9a:b8:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwNDI0MjEzMTQ0WhcNMjUwNTAxMjEzMTQ0WjAYMRYwFAYD VQQDEw02ODBhYWRjMS03ODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA178d6gx1ZkhZWzOp8NmE8Vl1T+v+222vyKmWnAMnjR0OiikEcWX/hEnbLvWq f3PIt84CiPq1l94fuhxLbkPsfHCvsZHL/Z+e5tLadbL+2X9aPPUuBS/cevU4SrFg Qp0aHRsDbGAnlLO5fBcfGcu6Xl2I6h2TIvS4r9o2tJW23zYD/EP74q9E2tHQS28z Rx7/eSumTLOWo2ObrfiziecftAnfwfwTNPwOGWSfmdmYfPi0atIHGMzZUd1Zayi6 0yVkQW/PsRI/TSONzGzTCqDYqn0/ieskma9UyVYnRCmrY4N0h23f53QuINz7sx0S MPULSaoOm9nqUIUwW2uFrBWacwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCxd2sp jbiYgudnZGeQ3jTKyFiqMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz1bgSpwIZnetNoo/Stwo1n5CMkIuc6+KPWAIuA6Bq99x1U3ZGDfks bq3+PIaU9Tg+4iT8ZDW6lLUOi+wwS0Ip2+8SSCCTAbnzGBICqjdyCgf6Ttqkmm1Z 6ERTjgMcuwqJSjDU9V9SZBgXq8+KQ4hlYJdoLpAeinpJJhKy83fgdgyjU0iR+jWx a1hkb9sQgvI8EhF8aXaBQ63+HhGR51d8x/Y2FAdoB/CVkwab+AlC8xw7oiZzZG+/ +lwvwoWQLwOpF9RriZ/LGtPC5BdzFlb4P6D96IOGABJ0lhHjIyFRzXWE0ShMJ65x 3JjVP1KjdvahH2Ra+W2VzJrE3Ntjmrjd -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:37 2025 by rpki-client