$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: kA3iXlHxMYIjRJFUk/XldN16yGMb9C7aLLki2dcL1NI= Subject key identifier: A4:E0:28:99:AC:F7:86:44:B9:8E:CB:94:9B:E2:18:5A:EF:C4:62:DB Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 32 Signing time: Fri 13 Jun 2025 06:33:37 +0000 Manifest this update: Fri 13 Jun 2025 06:33:36 +0000 Manifest next update: Fri 20 Jun 2025 06:33:36 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: ZWt/p5qNGoS+2sb2os/328slfvccLwL1m9R4CFMnBZE=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Jun 13 06:33:36 2025 GMT Not After : Jun 20 06:33:36 2025 GMT Subject: CN=684bc641-1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:51:ba:20:8d:17:4b:65:c4:45:a9:58:72: 8d:db:d0:a0:4a:06:a9:85:a2:1a:87:57:1c:63:52: e0:23:7d:a7:77:72:7f:c6:54:ac:3e:64:83:3e:e4: a5:e6:e3:dd:02:f0:e1:ae:2c:75:7c:fb:c7:ae:21: c3:c1:a1:5a:8c:f2:3b:bc:64:df:bc:6c:81:09:1b: 1e:e4:d1:91:98:13:71:93:bf:5f:99:93:6b:7b:f4: 0e:b4:54:0f:a3:4e:6c:8d:2b:f0:18:00:93:7f:73: 0d:bf:1b:53:c8:b7:7e:86:a5:07:27:04:84:4f:e1: 69:d0:78:64:38:eb:28:c1:9a:f6:4f:a6:9b:ef:50: af:c4:b3:82:49:83:0a:cf:37:c1:62:eb:c0:52:3c: 9e:cc:7f:a1:42:d2:28:a1:74:32:e3:ab:7c:80:b2: ac:d7:85:fe:50:ea:45:52:7d:dc:9e:93:87:bd:49: 05:78:66:ea:9b:10:ce:dd:71:06:47:1b:d8:08:5f: 28:ff:d0:2d:f1:f3:c9:66:1d:9a:4f:3a:25:5b:59: e6:72:f4:30:37:8d:65:aa:27:b9:58:03:08:de:88: f4:bb:14:f5:10:b4:44:c9:a4:42:ae:b2:ab:94:e7: 35:d6:82:a6:b3:23:c2:11:ef:f2:08:b3:f8:65:f2: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:28:99:AC:F7:86:44:B9:8E:CB:94:9B:E2:18:5A:EF:C4:62:DB X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b2:00:a3:a4:24:ef:11:cc:ba:0b:c5:5d:45:3c:8d:97:0e: 3a:ae:04:10:86:be:28:50:a7:60:fe:51:5f:f1:e3:22:20:7c: f8:b7:1e:a1:27:25:dd:cb:db:3f:6e:a1:30:e5:44:ab:d3:3d: da:77:0f:3d:3c:5f:77:2a:d3:05:35:06:40:1f:9c:36:7f:68: 55:5c:1e:b1:d7:6f:d4:d4:19:20:50:10:9c:94:03:cb:9b:eb: 48:21:5b:f7:03:30:66:a3:78:bf:28:b2:c0:c1:be:e6:3b:1c: a6:29:68:53:97:90:06:85:4a:d4:aa:9c:c5:8b:e7:5e:42:8f: f9:7d:12:ad:92:72:32:be:c1:49:f1:e8:88:29:06:0d:f4:ee: e1:87:12:19:16:80:c2:69:b5:1b:42:0b:60:2b:bf:f1:6b:c1: 7b:08:7f:77:9f:bc:0c:3c:f2:b4:df:0a:75:41:53:a3:83:af: c5:31:94:e9:2b:0e:79:a2:0a:a1:9a:6f:f9:bc:19:b5:af:2b: b7:8e:7c:1d:89:68:13:aa:11:8c:f3:02:2c:09:2f:8d:09:1f: 01:90:90:b2:1e:ec:bb:89:f8:ba:92:6e:6e:df:47:12:f1:92: 2a:61:52:c7:ee:d6:9e:36:fd:0c:4c:0e:42:aa:a6:56:c4:c8: 8f:14:31:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA2MTMwNjMzMzZaFw0yNTA2MjAwNjMzMzZaMBgxFjAUBgNV BAMTDTY4NGJjNjQxLTE4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtEFG6II0XS2XERalYco3b0KBKBqmFohqHVxxjUuAjfad3cn/GVKw+ZIM+5KXm 490C8OGuLHV8+8euIcPBoVqM8ju8ZN+8bIEJGx7k0ZGYE3GTv1+Zk2t79A60VA+j TmyNK/AYAJN/cw2/G1PIt36GpQcnBIRP4WnQeGQ46yjBmvZPppvvUK/Es4JJgwrP N8Fi68BSPJ7Mf6FC0iihdDLjq3yAsqzXhf5Q6kVSfdyek4e9SQV4ZuqbEM7dcQZH G9gIXyj/0C3x88lmHZpPOiVbWeZy9DA3jWWqJ7lYAwjeiPS7FPUQtETJpEKusquU 5zXWgqazI8IR7/IIs/hl8vT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpOAomaz3 hkS5jsuUm+IYWu/EYtswHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+yAKOkJO8RzLoLxV1FPI2XDjquBBCGvihQp2D+UV/x4yIgfPi3HqEn Jd3L2z9uoTDlRKvTPdp3Dz08X3cq0wU1BkAfnDZ/aFVcHrHXb9TUGSBQEJyUA8ub 60ghW/cDMGajeL8ossDBvuY7HKYpaFOXkAaFStSqnMWL515Cj/l9Eq2ScjK+wUnx 6IgpBg307uGHEhkWgMJptRtCC2Arv/FrwXsIf3efvAw88rTfCnVBU6ODr8UxlOkr DnmiCqGab/m8GbWvK7eOfB2JaBOqEYzzAiwJL40JHwGQkLIe7LuJ+LqSbm7fRxLx kiphUsfu1p42/QxMDkKqplbEyI8UMWU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:17 2025 by rpki-client