$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: aa5fNbaMachwrGCKXGOj76O8kGPM6Hah3jSp2AZrLtw= Subject key identifier: 27:2B:82:2B:0F:13:16:5E:03:2A:C4:7D:7F:9B:03:F6:D5:D3:7C:8D Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 08F0 Signing time: Wed 18 Jun 2025 20:14:28 +0000 Manifest this update: Wed 18 Jun 2025 20:14:28 +0000 Manifest next update: Wed 25 Jun 2025 20:14:28 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: ror8xXf3Ss0L2zSNq9GxqtBzEuo0JflJWY6ynSqvhEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Jun 18 20:14:28 2025 GMT Not After : Jun 25 20:14:28 2025 GMT Subject: CN=68531e24-c2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:76:09:d7:e2:40:88:67:f9:66:02:be:81: b8:60:f3:d9:2e:d5:dc:6b:f2:36:42:8f:99:fe:db: 3b:c2:d1:c9:30:c5:a6:5c:ca:95:56:af:a7:b5:00: bd:fc:c0:7a:dd:51:ce:f5:f4:5b:21:2c:88:02:e7: d7:21:aa:52:e3:42:8c:42:98:d3:44:02:63:37:e9: ed:1d:d9:2a:ec:ca:72:79:e9:2a:a9:2a:c1:7b:4a: 39:1a:22:e8:b1:e6:38:11:ed:65:d6:1f:35:a6:3b: 56:a0:32:49:6a:3f:fa:54:4a:82:5e:f7:6d:22:99: df:5f:e4:b2:67:fe:35:ca:30:9e:2e:d4:b7:8b:ca: 94:24:8c:57:2b:04:b8:3f:ac:28:12:04:fa:63:9d: 4d:d8:23:de:39:31:5e:e7:fc:d3:b8:88:84:45:2d: 78:ce:57:25:4b:50:30:0f:bc:67:70:3c:f2:84:01: 9c:7d:da:3a:00:05:d9:bd:a3:b2:aa:53:71:a0:d9: 89:85:a0:b9:13:14:a3:c1:db:1c:d7:df:7a:1a:b9: f6:06:b1:d7:cd:4b:10:8d:a6:5a:ef:c1:7a:88:e8: ab:23:fa:14:e4:f9:12:dd:68:b7:fe:9a:ec:b5:bd: 9b:47:4d:c3:99:c3:f0:32:b0:11:01:e5:27:c5:83: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:82:2B:0F:13:16:5E:03:2A:C4:7D:7F:9B:03:F6:D5:D3:7C:8D X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0f:9c:63:7b:05:75:98:e1:7b:41:db:8a:82:9c:09:d8:7a: b2:bf:b3:0b:d8:58:27:e3:ad:5b:d5:eb:56:0e:b4:84:c0:e9: 26:bf:01:12:05:9a:48:af:8c:a0:60:2a:f5:b6:1e:83:48:2c: fc:59:1c:e4:5c:e8:66:81:3a:66:6c:e1:61:f9:c2:2d:90:ea: 5d:16:4d:22:80:66:c5:a1:3a:bc:7f:ee:d3:d9:79:5d:9f:40: 39:98:b8:bd:0d:44:f5:b9:fb:03:8c:c1:97:0b:1c:70:40:99: 48:c9:f6:8b:44:6c:8e:bb:35:bf:3c:7c:89:0c:51:87:16:da: 1c:0a:d0:75:50:91:71:8b:3b:b1:e5:b9:e0:38:72:98:67:25: 14:c3:74:65:1f:84:4b:32:f0:ab:ff:43:23:27:6c:ab:b6:05: fd:3a:06:1e:5b:03:39:20:be:fb:fe:7f:f3:10:a6:ca:b3:fc: eb:36:2e:ad:49:a4:ae:b7:5f:ea:e4:9a:31:64:60:ab:cc:4d: b7:52:c2:8d:a9:c4:5b:34:b5:bb:bf:7d:96:81:97:e3:8c:65: 2b:39:9a:5a:b9:3e:78:47:25:fd:2f:b7:8e:bf:11:e0:00:fb: f9:3d:fd:7a:e4:e2:9a:2b:65:54:4f:34:5a:e1:4b:b4:a0:cb: 11:22:9c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjUwNjE4MjAxNDI4WhcNMjUwNjI1MjAxNDI4WjAYMRYwFAYD VQQDEw02ODUzMWUyNC1jMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCZ2CdfiQIhn+WYCvoG4YPPZLtXca/I2Qo+Z/ts7wtHJMMWmXMqVVq+ntQC9 /MB63VHO9fRbISyIAufXIapS40KMQpjTRAJjN+ntHdkq7MpyeekqqSrBe0o5GiLo seY4Ee1l1h81pjtWoDJJaj/6VEqCXvdtIpnfX+SyZ/41yjCeLtS3i8qUJIxXKwS4 P6woEgT6Y51N2CPeOTFe5/zTuIiERS14zlclS1AwD7xncDzyhAGcfdo6AAXZvaOy qlNxoNmJhaC5ExSjwdsc1996Grn2BrHXzUsQjaZa78F6iOirI/oU5PkS3Wi3/prs tb2bR03DmcPwMrARAeUnxYOyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcrgisP ExZeAyrEfX+bA/bV03yNMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4D5xjewV1mOF7QduKgpwJ2Hqyv7ML2Fgn461b1etWDrSEwOkmvwES BZpIr4ygYCr1th6DSCz8WRzkXOhmgTpmbOFh+cItkOpdFk0igGbFoTq8f+7T2Xld n0A5mLi9DUT1ufsDjMGXCxxwQJlIyfaLRGyOuzW/PHyJDFGHFtocCtB1UJFxizux 5bngOHKYZyUUw3RlH4RLMvCr/0MjJ2yrtgX9OgYeWwM5IL77/n/zEKbKs/zrNi6t SaSut1/q5JoxZGCrzE23UsKNqcRbNLW7v32WgZfjjGUrOZpauT54RyX9L7eOvxHg APv5Pf165OKaK2VUTzRa4Uu0oMsRIpxU -----END CERTIFICATE-----Generated at Fri Jun 20 21:26:21 2025 by rpki-client