$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: 9pka/d3FCLSCJMlUMqaEqVy6ps4rRhBc2vJvQCDOGwc= Subject key identifier: 93:FA:49:35:51:AB:96:3A:99:5B:84:90:68:22:30:65:19:A4:48:B3 Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 15 Signing time: Thu 19 Jun 2025 07:20:49 +0000 Manifest this update: Thu 19 Jun 2025 07:20:48 +0000 Manifest next update: Thu 26 Jun 2025 07:20:48 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: OPcIj611jGCUE511Dwef+GFbwIA4zZqu+EA0kAqvlgY=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: Jun 19 07:20:48 2025 GMT Not After : Jun 26 07:20:48 2025 GMT Subject: CN=6853ba51-c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:da:f1:93:fe:70:26:b0:f6:d4:84:f6:78: 0c:2a:da:c2:dc:e2:78:62:3c:54:f4:28:17:7f:b9: b7:02:df:36:e5:5c:68:8d:09:d0:af:bd:c6:02:09: 70:f2:e1:4a:58:44:41:5c:5c:5c:68:0a:43:f8:9e: 27:da:15:9d:8c:80:f5:28:ca:d6:b3:33:c9:4b:44: 37:31:18:dd:74:1d:d1:9a:c9:da:6e:38:30:20:8b: 25:27:d5:5e:52:fc:ab:1f:4e:1c:f6:ce:ff:b6:75: 0f:8e:91:58:1b:df:15:ab:f0:3a:00:da:81:b3:68: 0c:78:b6:17:c9:50:aa:65:d1:b6:a7:76:1c:ef:b4: f3:23:c1:d5:87:59:e0:fa:81:e6:78:88:31:bf:dd: 31:04:29:19:72:e5:cf:9d:51:66:dc:9c:d9:0e:83: fd:74:05:84:af:7b:c2:13:8a:52:3c:20:34:56:f6: 31:7d:8f:18:71:e6:cd:72:c8:29:b7:56:cd:52:06: 78:b5:be:74:b1:61:8c:78:02:25:7b:1d:48:e1:0e: 37:8b:93:aa:83:22:35:57:6d:f3:2d:ba:25:d0:39: 48:85:6e:b4:14:d2:8f:4b:3e:09:6d:b0:3d:15:fe: 09:b0:20:f6:b5:47:32:10:eb:ca:09:ce:82:94:61: dd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:49:35:51:AB:96:3A:99:5B:84:90:68:22:30:65:19:A4:48:B3 X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:d4:b2:17:06:92:fa:e6:7e:36:23:3c:23:be:31:45:b0: b7:62:9a:ab:44:45:68:07:00:f8:9e:ac:37:fb:45:3b:65:81: a3:7e:b5:98:20:b8:db:38:80:69:26:17:06:23:a8:fb:cb:3a: a2:e8:07:cd:be:ed:9e:44:6b:5f:ef:a4:a5:32:bb:97:43:60: bf:c8:dc:a3:6f:cf:d7:33:55:16:9b:f2:cc:3d:30:25:a7:d5: 79:ca:63:5a:06:43:54:4a:27:8c:f9:71:88:ad:08:2d:7f:71: 0d:20:0a:c6:bc:81:72:78:8d:5a:d2:a5:9e:a6:32:96:b6:c9: 0f:dc:30:d6:08:8a:f4:3d:c4:91:01:cf:fd:49:6e:aa:29:10: 2d:98:3d:b8:c0:9f:70:72:17:4c:11:00:87:82:68:f7:e0:8a: bc:a3:f9:a0:1f:ad:67:bb:b3:b2:e8:e5:3f:e3:e0:9d:e8:c1: 30:f1:06:16:a8:ee:52:e0:d1:fe:66:54:0e:c3:79:27:a1:72: bd:22:0c:27:1d:b5:b4:14:9a:b6:db:e4:8d:ae:07:9b:69:b4: 18:12:61:86:c7:c4:e8:8e:4e:97:00:a1:a6:8c:31:a0:a6:41: e2:90:36:e2:18:d3:77:76:84:9b:13:5b:6a:49:f5:9a:70:3f: df:dd:41:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA2MTkwNzIwNDhaFw0yNTA2MjYwNzIwNDhaMBgxFjAUBgNV BAMTDTY4NTNiYTUxLWM0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzYdrxk/5wJrD21IT2eAwq2sLc4nhiPFT0KBd/ubcC3zblXGiNCdCvvcYCCXDy 4UpYREFcXFxoCkP4nifaFZ2MgPUoytazM8lLRDcxGN10HdGaydpuODAgiyUn1V5S /KsfThz2zv+2dQ+OkVgb3xWr8DoA2oGzaAx4thfJUKpl0bandhzvtPMjwdWHWeD6 geZ4iDG/3TEEKRly5c+dUWbcnNkOg/10BYSve8ITilI8IDRW9jF9jxhx5s1yyCm3 Vs1SBni1vnSxYYx4AiV7HUjhDjeLk6qDIjVXbfMtuiXQOUiFbrQU0o9LPgltsD0V /gmwIPa1RzIQ68oJzoKUYd1bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk/pJNVGr ljqZW4SQaCIwZRmkSLMwHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlU1LIXBpL65n42IzwjvjFFsLdimqtERWgHAPierDf7RTtlgaN+tZgg uNs4gGkmFwYjqPvLOqLoB82+7Z5Ea1/vpKUyu5dDYL/I3KNvz9czVRab8sw9MCWn 1XnKY1oGQ1RKJ4z5cYitCC1/cQ0gCsa8gXJ4jVrSpZ6mMpa2yQ/cMNYIivQ9xJEB z/1JbqopEC2YPbjAn3ByF0wRAIeCaPfgiryj+aAfrWe7s7Lo5T/j4J3owTDxBhao 7lLg0f5mVA7DeSehcr0iDCcdtbQUmrbb5I2uB5tptBgSYYbHxOiOTpcAoaaMMaCm QeKQNuIY03d2hJsTW2pJ9ZpwP9/dQYM= -----END CERTIFICATE-----Generated at Sat Jun 21 03:04:01 2025 by rpki-client