$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: ZHw1SDaAxtjPUQe7vRcMjlBzJEQaSvSyXycsDTaiNXs= Subject key identifier: EC:CE:DE:78:18:93:09:B6:1E:69:EF:AA:13:0C:84:A1:5F:F5:FC:1E Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1848 Signing time: Mon 16 Jun 2025 16:34:13 +0000 Manifest this update: Mon 16 Jun 2025 16:34:12 +0000 Manifest next update: Mon 23 Jun 2025 16:34:12 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 7JaYDxqZ4aj7lJMIo2bLVc72fWSrzRS+MTgDTNkNBRw=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6242 (0x1862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jun 16 16:34:12 2025 GMT Not After : Jun 23 16:34:12 2025 GMT Subject: CN=68504784-07ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:de:02:4f:0f:2d:87:df:4e:0d:0b:39:4f: 82:7b:9e:a4:a4:23:bb:8c:4e:af:35:b3:08:be:dc: 2f:16:c9:57:b4:51:da:31:7b:50:77:6f:ec:9c:5d: 9e:60:04:5d:1a:ff:10:c8:ed:4a:68:76:3a:4b:c7: cb:77:5e:f7:03:0a:bb:43:2a:28:6f:a9:6a:df:d7: 9d:28:a4:a8:3c:cb:93:4c:06:00:6e:5f:0b:6d:58: 3f:d6:6b:68:a0:1c:74:f8:ac:ac:00:6a:83:50:c6: 64:0f:d0:56:44:2e:7b:0e:7a:32:53:d0:dd:df:a4: 8a:8f:d9:3d:d8:8b:56:cd:96:d0:c5:92:d4:5c:49: 40:6f:05:11:d7:e1:cb:6a:32:8e:9c:95:2b:70:1b: 8d:63:6c:5f:7b:32:51:8b:50:20:eb:de:23:34:03: be:27:76:b8:73:e4:42:d5:16:fd:d9:fd:b9:1e:8e: 66:19:54:72:b7:dc:ab:07:72:3d:1e:9b:32:80:5b: ff:87:c4:81:ba:3d:86:c5:f6:03:2a:f3:19:01:ed: cc:08:e3:43:89:73:49:31:b1:91:a3:0e:85:0f:62: 95:c2:6c:11:83:2d:61:69:56:8e:7e:87:e9:bd:6d: 3a:9d:84:7c:a1:25:99:83:16:dd:90:71:17:20:7c: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CE:DE:78:18:93:09:B6:1E:69:EF:AA:13:0C:84:A1:5F:F5:FC:1E X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d4:89:3b:1e:b1:f8:63:c9:92:d4:df:c2:88:84:fa:59:16: ff:09:bc:21:03:66:5d:49:f9:a8:81:e4:5c:3f:81:78:41:80: b4:01:ee:60:9d:cd:67:f5:4d:3a:b9:d4:d2:67:59:2a:02:d5: 23:e1:fc:f6:84:76:12:15:b0:53:d8:9e:b1:7e:f8:c6:ec:cc: d1:c0:bd:fc:79:70:98:af:0c:ea:6c:65:d3:12:9c:21:2b:c5: 61:ca:04:6e:10:68:90:ed:90:53:02:90:aa:de:b5:b0:bc:82: b5:1b:b8:17:f6:41:15:10:a6:5c:d3:33:8d:7a:ad:f2:c0:25: 09:d5:05:61:88:4d:01:f1:2a:c6:89:0a:7f:1d:3c:00:05:00: e1:ab:95:fe:43:47:15:74:25:76:e2:0c:37:24:d3:e3:b8:b2: 48:78:5e:6a:94:90:fc:21:ec:89:e5:a3:2b:76:38:71:1d:f9: 21:93:93:c4:1a:00:cc:ed:d9:7f:eb:9f:fc:6f:e3:6e:b6:3d: 4c:86:84:a6:f2:22:cc:75:5b:9c:e7:48:4e:77:4c:c0:9c:93: 57:f2:ea:93:01:21:92:c3:fe:95:9f:12:a0:9f:ed:99:ba:a2: 93:8e:90:19:55:4f:81:15:90:d8:d6:dd:b5:35:f1:fd:82:31: 3c:15:3a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNjE2MTYzNDEyWhcNMjUwNjIzMTYzNDEyWjAYMRYwFAYD VQQDEw02ODUwNDc4NC0wN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlm7eAk8PLYffTg0LOU+Ce56kpCO7jE6vNbMIvtwvFslXtFHaMXtQd2/snF2e YARdGv8QyO1KaHY6S8fLd173Awq7Qyoob6lq39edKKSoPMuTTAYAbl8LbVg/1mto oBx0+KysAGqDUMZkD9BWRC57DnoyU9Dd36SKj9k92ItWzZbQxZLUXElAbwUR1+HL ajKOnJUrcBuNY2xfezJRi1Ag694jNAO+J3a4c+RC1Rb92f25Ho5mGVRyt9yrB3I9 HpsygFv/h8SBuj2GxfYDKvMZAe3MCONDiXNJMbGRow6FD2KVwmwRgy1haVaOfofp vW06nYR8oSWZgxbdkHEXIHwYcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzO3ngY kwm2HmnvqhMMhKFf9fweMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO1Ik7HrH4Y8mS1N/CiIT6WRb/CbwhA2ZdSfmogeRcP4F4QYC0Ae5g nc1n9U06udTSZ1kqAtUj4fz2hHYSFbBT2J6xfvjG7MzRwL38eXCYrwzqbGXTEpwh K8VhygRuEGiQ7ZBTApCq3rWwvIK1G7gX9kEVEKZc0zONeq3ywCUJ1QVhiE0B8SrG iQp/HTwABQDhq5X+Q0cVdCV24gw3JNPjuLJIeF5qlJD8IeyJ5aMrdjhxHfkhk5PE GgDM7dl/65/8b+Nutj1MhoSm8iLMdVuc50hOd0zAnJNX8uqTASGSw/6VnxKgn+2Z uqKTjpAZVU+BFZDY1t21NfH9gjE8FTrg -----END CERTIFICATE-----Generated at Wed Jun 18 18:18:29 2025 by rpki-client