$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: I1VUK2I8c/1dX67nf/AlU1LZyoTQLPBKSY+YPA18mJE= Subject key identifier: DA:F1:6F:C0:27:04:84:0D:8A:1E:DA:44:AC:7E:7B:8F:E9:7E:A7:BB Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 1A Signing time: Fri 13 Jun 2025 06:49:20 +0000 Manifest this update: Fri 13 Jun 2025 06:49:20 +0000 Manifest next update: Fri 20 Jun 2025 06:49:20 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: ZVpvIQu0oquRZlqMrA1pXDa2+CXQ8I9ITfWHEiMk1VQ=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Jun 13 06:49:20 2025 GMT Not After : Jun 20 06:49:20 2025 GMT Subject: CN=684bc9f0-f9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:31:14:0a:71:64:ce:18:72:d8:70:79:f6: 8f:b6:4a:86:42:52:7a:de:ca:b9:a2:1b:9d:55:f7: 19:66:2b:43:b5:cb:66:32:b7:84:df:5c:72:3a:ab: 59:f6:09:4a:65:c0:ec:f2:cf:de:15:f1:01:86:3a: c6:84:bc:86:b9:82:95:97:06:7d:f1:93:c0:98:8f: 5e:a8:ad:54:33:99:75:c6:51:1e:93:52:cf:20:fe: 2c:3d:5b:40:d8:49:97:3c:80:91:69:76:6b:62:43: 44:59:ec:d6:4e:26:bc:96:84:47:e6:ad:b7:49:af: 6a:25:e1:e3:6a:ba:59:14:7f:3f:3d:71:11:3b:ff: 7a:b9:8a:0c:e3:d3:0b:bf:a2:bd:ee:79:2a:52:2c: d2:d7:29:c6:c8:a1:72:5a:2c:d4:67:0e:c3:a7:88: 49:66:7f:b6:2e:6d:9e:c1:01:3a:ec:e4:ab:7b:92: 9c:03:96:79:44:01:24:96:a5:21:2f:04:c0:27:80: 85:48:50:53:dc:82:73:30:97:1f:a8:2c:ed:2b:78: 0a:ff:37:cd:6a:a2:01:12:fc:da:85:65:ac:d1:14: e5:88:90:cd:dc:c9:dd:3e:a8:a5:23:4f:f7:6b:8e: 9c:de:3f:d9:ac:f0:e9:6e:43:e1:02:8f:a0:4d:c7: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F1:6F:C0:27:04:84:0D:8A:1E:DA:44:AC:7E:7B:8F:E9:7E:A7:BB X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:09:13:70:87:2a:5e:d5:8c:bf:41:2d:cd:c0:6a:88:2b: 75:83:c4:34:8e:81:7c:6a:62:d0:93:85:34:22:bd:ef:d1:3a: 99:15:37:f7:05:f8:25:f5:dd:e4:d2:ce:3b:1a:be:a2:b8:54: fa:ba:f1:85:79:ba:0b:7f:ad:72:08:c0:89:84:42:ee:23:5c: b3:f9:32:9e:14:fd:d6:bf:88:07:a4:46:ca:b8:2b:ac:00:23: 4e:81:c1:8c:1b:66:63:7f:63:10:8a:a1:36:a4:c8:0a:40:76: da:ac:9b:6d:f4:9d:9c:1b:d1:16:77:03:fb:21:ca:48:71:35: 1c:f5:25:2d:63:db:f1:69:28:19:4d:90:a3:f3:db:81:66:05: 09:8b:e0:44:b2:8d:1a:c2:4d:41:fb:c5:f7:95:b1:7b:47:27: e1:7b:e9:f2:0c:32:9d:7a:15:70:66:90:f6:1e:b9:23:a4:5a: 3b:86:27:f1:a1:c2:45:57:e8:48:24:bd:cb:1c:a2:90:e8:8a: 73:d1:da:c2:a9:3f:f1:40:1a:50:57:18:bd:84:75:a9:82:b6: a7:43:af:c8:66:74:a1:b5:10:44:21:83:09:fb:39:0d:c8:f2: 90:23:76:36:f9:95:96:2a:ac:23:0f:35:6e:bf:d3:95:1d:90: cf:7c:b9:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTA2MTMwNjQ5MjBaFw0yNTA2MjAwNjQ5MjBaMBgxFjAUBgNV BAMTDTY4NGJjOWYwLWY5Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2aTEUCnFkzhhy2HB59o+2SoZCUnreyrmiG51V9xlmK0O1y2Yyt4TfXHI6q1n2 CUplwOzyz94V8QGGOsaEvIa5gpWXBn3xk8CYj16orVQzmXXGUR6TUs8g/iw9W0DY SZc8gJFpdmtiQ0RZ7NZOJryWhEfmrbdJr2ol4eNqulkUfz89cRE7/3q5igzj0wu/ or3ueSpSLNLXKcbIoXJaLNRnDsOniElmf7YubZ7BATrs5Kt7kpwDlnlEASSWpSEv BMAngIVIUFPcgnMwlx+oLO0reAr/N81qogES/NqFZazRFOWIkM3cyd0+qKUjT/dr jpzeP9ms8OluQ+ECj6BNx7RFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2vFvwCcE hA2KHtpErH57j+l+p7swHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADq6CRNwhype1Yy/QS3NwGqIK3WDxDSOgXxqYtCThTQive/ROpkVN/cF +CX13eTSzjsavqK4VPq68YV5ugt/rXIIwImEQu4jXLP5Mp4U/da/iAekRsq4K6wA I06BwYwbZmN/YxCKoTakyApAdtqsm230nZwb0RZ3A/shykhxNRz1JS1j2/FpKBlN kKPz24FmBQmL4ESyjRrCTUH7xfeVsXtHJ+F76fIMMp16FXBmkPYeuSOkWjuGJ/Gh wkVX6EgkvcscopDoinPR2sKpP/FAGlBXGL2EdamCtqdDr8hmdKG1EEQhgwn7OQ3I 8pAjdjb5lZYqrCMPNW6/05UdkM98uf4= -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:43 2025 by rpki-client