$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: q8DbXYG9c9FnPaJo3ZFE+Fkmhp/Y8uUFAu6T/vLv9W8= Subject key identifier: 97:CE:F1:D0:F1:01:7D:65:3D:6C:29:1C:A5:7E:E7:04:BA:9D:CA:34 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 0653 Signing time: Sat 14 Jun 2025 22:16:48 +0000 Manifest this update: Sat 14 Jun 2025 22:16:47 +0000 Manifest next update: Sat 21 Jun 2025 22:16:47 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: vrM9QC5ZzG1YFDFLCr/QjxAhp4TWfZjxFC7X1RU2p+s=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: Jun 14 22:16:47 2025 GMT Not After : Jun 21 22:16:47 2025 GMT Subject: CN=684df4d0-84fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:df:8b:4f:e5:ef:4e:bb:f8:48:51:1d:c6: 07:4b:1a:63:34:da:58:40:5e:05:24:fc:88:99:33: 9e:2c:92:1f:24:be:25:cb:18:71:ee:ef:d6:88:72: 94:8b:97:d9:32:c4:d0:c2:0d:ab:1e:03:90:34:49: 9e:89:19:52:f6:c0:12:63:21:6d:17:05:4a:20:a5: 09:ba:8c:1f:98:a8:1b:89:43:e1:2d:e0:0c:61:66: 54:3d:b0:1d:fb:22:51:e5:94:9d:93:9d:61:06:c0: 80:a2:4f:a9:85:fb:33:4e:cb:38:0f:4a:ad:21:ca: b3:24:44:63:9b:27:95:df:cc:b5:ad:88:82:18:38: 9f:10:01:9f:82:f9:51:46:b3:d4:0a:f8:39:12:3e: 35:36:d7:ea:82:31:6d:55:d7:61:08:10:c4:b7:23: fc:5a:32:23:23:02:4b:54:93:b7:1e:71:ae:4e:d0: 6d:53:3b:d9:db:d7:87:90:08:7b:75:ee:7d:2e:c7: 5a:d7:56:7a:04:da:23:a6:e7:85:cd:20:c1:10:66: 6a:a8:c9:ec:5c:1b:26:c0:12:69:ea:7d:a3:06:2b: b7:26:68:32:93:14:e8:85:3d:67:43:f2:01:ae:c1: a1:56:eb:06:5e:61:bd:ba:1f:bc:cd:46:bf:f6:f7: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CE:F1:D0:F1:01:7D:65:3D:6C:29:1C:A5:7E:E7:04:BA:9D:CA:34 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:d4:00:fc:2e:a9:d4:d2:49:31:0d:68:cf:0d:8d:ff:53:10: 16:7e:6f:70:63:a6:70:74:6a:cc:5f:94:3d:e1:a0:44:db:b5: 2c:9a:5d:cc:2b:43:07:30:bd:6f:04:31:86:2e:dc:88:9e:21: bd:d1:5c:61:fc:c8:0f:9a:7e:2a:9b:ff:d9:a8:bd:48:c1:9b: c6:66:05:43:18:fb:c2:38:f2:58:37:5f:68:f7:d0:9b:aa:e6: bf:b3:e7:85:0d:0d:34:ee:c4:ab:6c:b8:f5:07:9e:4a:9b:0b: 54:cb:03:ce:3b:9f:5b:f0:aa:71:5a:f4:c3:a4:91:a0:7c:c4: 09:6a:04:aa:d8:f3:87:46:45:72:26:66:29:65:08:a2:f7:13: 39:cf:73:9b:6c:71:e5:cd:9e:76:c9:b6:99:a7:7b:ba:a6:df: 43:37:86:7b:b2:4d:d9:3a:e2:1d:fe:5c:97:54:cd:7d:23:9e: d8:bc:15:90:22:03:28:d4:44:47:1a:99:61:29:af:88:b4:de: 43:74:96:e1:8c:8d:92:24:5a:83:b8:35:cb:88:fd:31:32:f0: 8a:4f:7e:cc:ff:5a:fb:f2:c3:66:40:d5:7d:3a:19:72:62:2b: 0b:8c:b1:bb:3e:43:8a:ad:5f:59:78:e4:74:0e:29:ac:23:c3: 73:52:ce:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUwNjE0MjIxNjQ3WhcNMjUwNjIxMjIxNjQ3WjAYMRYwFAYD VQQDEw02ODRkZjRkMC04NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IPfi0/l7067+EhRHcYHSxpjNNpYQF4FJPyImTOeLJIfJL4lyxhx7u/WiHKU i5fZMsTQwg2rHgOQNEmeiRlS9sASYyFtFwVKIKUJuowfmKgbiUPhLeAMYWZUPbAd +yJR5ZSdk51hBsCAok+phfszTss4D0qtIcqzJERjmyeV38y1rYiCGDifEAGfgvlR RrPUCvg5Ej41NtfqgjFtVddhCBDEtyP8WjIjIwJLVJO3HnGuTtBtUzvZ29eHkAh7 de59Lsda11Z6BNojpueFzSDBEGZqqMnsXBsmwBJp6n2jBiu3JmgykxTohT1nQ/IB rsGhVusGXmG9uh+8zUa/9vd2pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfO8dDx AX1lPWwpHKV+5wS6nco0MB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf1AD8LqnU0kkxDWjPDY3/UxAWfm9wY6ZwdGrMX5Q94aBE27Usml3M K0MHML1vBDGGLtyIniG90Vxh/MgPmn4qm//ZqL1IwZvGZgVDGPvCOPJYN19o99Cb qua/s+eFDQ007sSrbLj1B55KmwtUywPOO59b8KpxWvTDpJGgfMQJagSq2POHRkVy JmYpZQii9xM5z3ObbHHlzZ52ybaZp3u6pt9DN4Z7sk3ZOuId/lyXVM19I57YvBWQ IgMo1ERHGplhKa+ItN5DdJbhjI2SJFqDuDXLiP0xMvCKT37M/1r78sNmQNV9Ohly YisLjLG7PkOKrV9ZeOR0DimsI8NzUs4k -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:38 2025 by rpki-client