$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: f7fUC4VXNGoDJfMPssJJwkkjr27KmZqPJXIywv5xuBw= Subject key identifier: 76:46:6B:02:76:FF:56:B2:B7:75:96:FC:98:C5:85:4C:E6:A5:A4:4B Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 0531 Signing time: Thu 24 Apr 2025 23:17:31 +0000 Manifest this update: Thu 24 Apr 2025 23:17:30 +0000 Manifest next update: Thu 01 May 2025 23:17:30 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: 9WV+k+0aHDN14d5vksH1cuv3OJlcdoUiLKYfyE8mHyg=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Apr 24 23:17:30 2025 GMT Not After : May 1 23:17:30 2025 GMT Subject: CN=680ac68a-d89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:b3:97:37:7d:78:82:dd:a2:76:ff:f2:a4: e3:8f:2a:f0:1f:96:1a:96:12:a4:0d:2b:ce:d1:d8: eb:33:c0:b7:dd:3d:91:a6:58:87:4d:fb:8d:45:45: 89:2d:41:96:b8:76:bc:30:2e:a7:1b:f9:ca:32:c0: df:bd:59:ca:a3:3f:41:64:38:bf:b7:79:c6:b3:56: 9d:53:a4:08:7a:df:94:8e:9c:cf:fb:26:af:8d:e1: 65:52:a1:e1:2a:51:d5:50:ee:c7:f3:fc:1f:a8:a3: c4:15:cf:e1:9a:1c:c8:f1:80:bb:8e:0c:24:8f:5e: 88:0b:1e:db:c8:1d:fe:7e:86:ae:ec:74:e7:07:ab: ed:d1:57:52:1a:d7:31:8b:c3:61:0d:37:e4:67:e2: 99:1b:64:9e:cf:68:5c:4c:04:19:40:2c:70:85:cf: d0:68:d5:27:e2:26:2f:c1:a0:49:a7:e6:e8:3b:e9: c3:6e:9b:c7:fd:c5:f8:28:13:85:db:cc:4b:1d:9f: cb:57:22:f7:40:2f:c2:cb:c3:3a:54:b3:f2:77:44: b9:ab:5f:ef:d4:11:c0:46:fa:57:51:ea:37:83:9e: ca:d7:a6:c2:f7:12:91:da:6f:4f:5f:6c:b3:91:f5: 2e:71:a7:27:0b:0d:4e:44:19:e1:c9:12:c0:b6:87: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:6B:02:76:FF:56:B2:B7:75:96:FC:98:C5:85:4C:E6:A5:A4:4B X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:50:c6:d3:98:ac:85:a3:c5:6f:d0:34:19:2b:23:2c:12:5d: 08:b4:19:0b:9d:f3:e7:8b:c2:08:44:8a:5e:60:d6:81:8b:28: 90:6c:ee:99:31:79:8a:09:3f:91:fe:af:ce:49:b0:1d:ee:a4: 40:41:39:2b:dd:b5:40:bc:c3:9e:65:3f:81:26:84:6c:95:b6: b3:d2:d8:06:3b:9a:13:ef:d5:28:6b:8e:b8:5b:40:4c:6e:e9: 85:ee:c8:fa:5a:3f:f0:77:90:9f:46:3b:e8:6b:ab:f5:9c:fb: e9:c5:e6:dd:e7:20:78:7f:3c:4e:6a:6b:de:1c:3d:49:2d:9b: 97:10:f2:59:0b:d5:93:45:cd:bc:2a:37:23:36:dc:e5:c9:c8: 95:5d:ae:87:ac:d5:bc:75:5b:a0:e7:6f:a2:4c:2e:fb:91:f0: ba:34:6a:ce:8d:7e:ad:c4:2e:d7:35:2f:30:6a:09:83:82:43: 4e:51:02:bf:36:b1:98:39:5e:68:8c:be:a1:4f:b6:2f:fb:c9: 26:53:9e:77:65:1a:36:65:4d:69:11:47:e1:b7:76:b5:e5:9d: 46:83:e8:07:f8:49:32:00:1a:4f:ba:82:38:e4:cf:10:f8:ab: bd:71:13:da:fe:f2:23:85:8c:a0:2d:0a:35:f7:eb:0d:17:55: dc:01:a4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUwNDI0MjMxNzMwWhcNMjUwNTAxMjMxNzMwWjAYMRYwFAYD VQQDEw02ODBhYzY4YS1kODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJGzlzd9eILdonb/8qTjjyrwH5YalhKkDSvO0djrM8C33T2RpliHTfuNRUWJ LUGWuHa8MC6nG/nKMsDfvVnKoz9BZDi/t3nGs1adU6QIet+UjpzP+yavjeFlUqHh KlHVUO7H8/wfqKPEFc/hmhzI8YC7jgwkj16ICx7byB3+foau7HTnB6vt0VdSGtcx i8NhDTfkZ+KZG2Sez2hcTAQZQCxwhc/QaNUn4iYvwaBJp+boO+nDbpvH/cX4KBOF 28xLHZ/LVyL3QC/Cy8M6VLPyd0S5q1/v1BHARvpXUeo3g57K16bC9xKR2m9PX2yz kfUucacnCw1ORBnhyRLAtofE9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZGawJ2 /1ayt3WW/JjFhUzmpaRLMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2UMbTmKyFo8Vv0DQZKyMsEl0ItBkLnfPni8IIRIpeYNaBiyiQbO6Z MXmKCT+R/q/OSbAd7qRAQTkr3bVAvMOeZT+BJoRslbaz0tgGO5oT79Uoa464W0BM bumF7sj6Wj/wd5CfRjvoa6v1nPvpxebd5yB4fzxOamveHD1JLZuXEPJZC9WTRc28 KjcjNtzlyciVXa6HrNW8dVug52+iTC77kfC6NGrOjX6txC7XNS8wagmDgkNOUQK/ NrGYOV5ojL6hT7Yv+8kmU553ZRo2ZU1pEUfht3a15Z1Gg+gH+EkyABpPuoI45M8Q +Ku9cRPa/vIjhYygLQo19+sNF1XcAaTg -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:35 2025 by rpki-client