$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: DQLRT1GhSBEwsY80vfozdWmIkCkVm/wpBnQrHX0tEBs= Subject key identifier: F6:44:8F:37:7D:4A:65:5A:A7:6D:AC:25:2E:AC:5D:D9:F1:8B:6C:BC Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 07FD Signing time: Thu 12 Jun 2025 20:41:53 +0000 Manifest this update: Thu 12 Jun 2025 20:41:53 +0000 Manifest next update: Thu 19 Jun 2025 20:41:53 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: rLRbbSp/Tz66rg2g5WaXh/vk1Q5dGsSev5/pKD5Pk2I=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Jun 12 20:41:53 2025 GMT Not After : Jun 19 20:41:53 2025 GMT Subject: CN=684b3b91-02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:c0:a9:0a:d1:60:cc:ca:47:12:7f:13:78: 98:60:2d:46:b1:ac:97:d8:bd:f1:65:6c:b9:6f:1f: 1c:5b:ef:37:a1:b1:9e:ee:16:f0:49:7e:43:92:1c: de:85:34:b8:02:df:15:49:3e:1e:fd:0d:ae:33:9a: c1:d1:2b:ac:ba:f3:57:fe:ad:8f:c2:4c:05:e8:f0: 7b:e6:08:71:a9:a1:c4:83:ee:89:9a:43:67:af:af: 7e:bf:24:7b:55:82:64:dd:53:78:b6:19:e1:b0:d1: 96:08:fb:a8:77:c0:64:5e:08:76:f2:62:9d:79:52: d6:57:a8:f4:ac:c7:47:03:e0:95:e3:f5:78:af:bd: a0:3d:7b:49:7e:42:b6:99:d4:46:7d:b4:cc:29:1a: 30:d0:81:b9:fd:23:ec:ed:b0:20:5d:3f:8c:aa:a3: a6:4b:51:4a:a0:23:66:68:8d:94:f2:c4:d4:9c:14: 9e:22:a8:35:26:e8:d7:13:28:1a:cb:d2:db:b7:c6: 53:bd:23:df:75:51:62:ba:6f:2b:a9:e5:11:6d:12: f1:a0:9f:86:fb:94:ae:57:15:e3:e5:f1:47:1d:79: 78:9a:b8:f4:23:10:ce:48:ca:98:7b:d9:75:48:de: e9:36:8e:97:a7:69:c3:86:f3:b9:86:d2:35:8e:de: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:44:8F:37:7D:4A:65:5A:A7:6D:AC:25:2E:AC:5D:D9:F1:8B:6C:BC X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:f2:8f:04:4f:48:e8:43:e2:96:0b:e0:da:1f:85:23:20: 87:ae:f7:81:35:84:7a:06:4a:3b:ac:be:74:cb:c6:a9:6a:5c: 95:ce:ea:20:b1:7e:75:9f:5a:80:bf:a5:3f:09:f7:56:a4:e0: 40:43:5d:b4:3b:94:21:ac:1b:56:73:b9:33:bb:78:a3:a5:de: 31:26:1c:c4:8c:3b:cd:19:64:2b:3a:b2:26:8a:42:50:50:35: 0e:08:43:01:de:77:cd:d2:79:90:6b:0c:00:9e:0e:79:53:fc: dc:d2:7f:f1:52:4e:48:3c:a1:ae:83:af:ac:5e:61:2a:e0:a5: 95:c6:ca:4c:1b:3b:7d:d3:20:f9:22:d9:b9:4a:ae:81:e1:51: b2:8c:20:23:a9:b2:bf:05:82:58:8f:4c:0d:66:33:61:84:f5: ee:8a:42:85:74:04:b2:a0:b7:90:3a:83:56:ab:11:e7:07:67: ab:c4:8b:2e:c0:d8:7b:90:0f:87:75:09:fb:0c:1d:9b:4c:b6: 08:5f:02:79:b6:7c:27:27:cc:c5:9a:67:8c:61:f7:27:90:06: 33:73:d7:42:86:30:26:a5:dc:83:ec:4d:54:2e:b0:b6:ac:3a: 1a:89:c3:47:a6:96:a4:67:ee:b4:bf:0d:d2:bb:90:78:3c:65: fe:36:91:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNjEyMjA0MTUzWhcNMjUwNjE5MjA0MTUzWjAYMRYwFAYD VQQDEw02ODRiM2I5MS0wMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2zAqQrRYMzKRxJ/E3iYYC1GsayX2L3xZWy5bx8cW+83obGe7hbwSX5Dkhze hTS4At8VST4e/Q2uM5rB0SusuvNX/q2PwkwF6PB75ghxqaHEg+6JmkNnr69+vyR7 VYJk3VN4thnhsNGWCPuod8BkXgh28mKdeVLWV6j0rMdHA+CV4/V4r72gPXtJfkK2 mdRGfbTMKRow0IG5/SPs7bAgXT+MqqOmS1FKoCNmaI2U8sTUnBSeIqg1JujXEyga y9Lbt8ZTvSPfdVFium8rqeURbRLxoJ+G+5SuVxXj5fFHHXl4mrj0IxDOSMqYe9l1 SN7pNo6Xp2nDhvO5htI1jt6SBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZEjzd9 SmVap22sJS6sXdnxi2y8MB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4r/KPBE9I6EPilgvg2h+FIyCHrveBNYR6Bko7rL50y8apalyVzuog sX51n1qAv6U/CfdWpOBAQ120O5QhrBtWc7kzu3ijpd4xJhzEjDvNGWQrOrImikJQ UDUOCEMB3nfN0nmQawwAng55U/zc0n/xUk5IPKGug6+sXmEq4KWVxspMGzt90yD5 Itm5Sq6B4VGyjCAjqbK/BYJYj0wNZjNhhPXuikKFdASyoLeQOoNWqxHnB2erxIsu wNh7kA+HdQn7DB2bTLYIXwJ5tnwnJ8zFmmeMYfcnkAYzc9dChjAmpdyD7E1ULrC2 rDoaicNHppakZ+60vw3Su5B4PGX+NpFf -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:47 2025 by rpki-client