$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: NWQeSCUjqEg8pW+DsIATwDTzt91p4ffe0044M8pVb54= Subject key identifier: 7D:9C:1C:36:86:88:11:DA:71:79:FD:9C:9D:A2:8A:B1:9D:B2:D9:07 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 0549 Signing time: Thu 12 Jun 2025 23:02:29 +0000 Manifest this update: Thu 12 Jun 2025 23:02:28 +0000 Manifest next update: Thu 19 Jun 2025 23:02:28 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: dRPwvq0BnAwqKlTgOtoOqgS0cW8B3ETfTr/FWJeVxIg=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Jun 12 23:02:28 2025 GMT Not After : Jun 19 23:02:28 2025 GMT Subject: CN=684b5c84-a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:db:1c:95:0f:f2:cb:9e:7f:8b:dc:80:81: 49:72:9a:d9:1a:66:6d:ee:b8:8e:23:f8:b8:34:5e: 81:82:f2:b4:1c:23:00:10:fe:8a:07:4b:97:95:8c: bf:81:64:74:fe:8d:f4:7e:e1:de:35:f0:48:23:8a: 77:fc:4d:cf:35:ac:48:7b:a6:b2:06:35:d7:e1:c5: 0b:1b:19:d5:7d:a9:d8:20:46:c4:26:9d:bc:07:e0: fc:0b:4c:72:22:f6:26:f8:ea:c3:ae:71:e1:b7:ff: 43:bf:1f:8e:79:37:48:5e:f5:3b:b4:af:fb:0a:86: 3a:07:02:1f:b4:5f:00:4f:d7:f7:f6:82:68:39:36: b6:81:ce:4a:2b:c1:3f:27:3b:d9:41:43:ad:a0:bd: 50:a7:26:8d:49:8c:ff:4d:14:4c:71:49:06:60:5e: 89:51:8b:88:c2:06:83:70:4e:53:ac:88:6a:b9:47: 7a:7f:8b:dd:83:54:b2:8e:ec:a0:0b:7d:6d:2e:b2: e9:fc:74:9e:7f:06:5d:8e:d5:70:c2:b2:1e:66:39: f5:3c:a5:9f:25:37:bb:58:7c:4e:d6:6c:d6:c1:a0: c3:ee:32:c2:a4:75:01:95:8e:c0:b9:13:58:b3:1a: fd:a0:b7:92:02:11:9b:db:5b:10:67:12:a1:53:51: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9C:1C:36:86:88:11:DA:71:79:FD:9C:9D:A2:8A:B1:9D:B2:D9:07 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e4:53:7e:10:62:00:70:15:eb:d6:66:ff:6a:67:11:09:34: 77:69:19:50:dd:5f:41:ec:8d:23:76:0b:86:53:36:ff:c7:e5: 02:2f:69:98:2a:1d:70:16:c9:69:1e:0d:4d:07:da:e5:ba:87: d4:43:89:de:a9:12:ce:07:14:15:64:bd:0d:91:1d:09:68:c5: d9:97:9d:d6:ab:5a:d9:b7:21:0a:1c:fc:90:e2:69:8b:d2:fd: 9e:73:29:de:91:47:d3:72:57:17:7d:74:f6:e4:94:ae:9e:19: a6:60:84:bd:fd:cd:aa:1b:e0:39:78:10:52:5b:90:5d:f4:74: 1d:89:5c:28:3d:0b:04:83:20:98:40:85:6a:9e:eb:1f:eb:68: e2:cb:53:70:68:b9:61:57:cc:85:4f:77:b7:3e:4a:b5:af:7e: da:40:88:18:93:ae:99:f2:57:e9:91:b8:2d:fb:5b:ff:fc:49: d9:88:b7:89:37:6f:af:0e:e2:11:db:ce:59:b8:27:5c:35:7b: e7:61:7a:8c:46:ec:2c:1d:78:71:93:89:2d:bf:3c:44:14:31: bf:59:51:0f:7e:5c:8f:05:ea:ae:d2:73:c2:f9:d2:74:46:36: 77:a7:2f:84:0a:f4:3c:ce:e4:1b:be:37:20:2a:72:a5:63:e6: 91:5b:4e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUwNjEyMjMwMjI4WhcNMjUwNjE5MjMwMjI4WjAYMRYwFAYD VQQDEw02ODRiNWM4NC1hNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4LbHJUP8suef4vcgIFJcprZGmZt7riOI/i4NF6BgvK0HCMAEP6KB0uXlYy/ gWR0/o30fuHeNfBII4p3/E3PNaxIe6ayBjXX4cULGxnVfanYIEbEJp28B+D8C0xy IvYm+OrDrnHht/9Dvx+OeTdIXvU7tK/7CoY6BwIftF8AT9f39oJoOTa2gc5KK8E/ JzvZQUOtoL1QpyaNSYz/TRRMcUkGYF6JUYuIwgaDcE5TrIhquUd6f4vdg1Syjuyg C31tLrLp/HSefwZdjtVwwrIeZjn1PKWfJTe7WHxO1mzWwaDD7jLCpHUBlY7AuRNY sxr9oLeSAhGb21sQZxKhU1GNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2cHDaG iBHacXn9nJ2iirGdstkHMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA75FN+EGIAcBXr1mb/amcRCTR3aRlQ3V9B7I0jdguGUzb/x+UCL2mY Kh1wFslpHg1NB9rluofUQ4neqRLOBxQVZL0NkR0JaMXZl53Wq1rZtyEKHPyQ4mmL 0v2ecynekUfTclcXfXT25JSunhmmYIS9/c2qG+A5eBBSW5Bd9HQdiVwoPQsEgyCY QIVqnusf62jiy1NwaLlhV8yFT3e3Pkq1r37aQIgYk66Z8lfpkbgt+1v//EnZiLeJ N2+vDuIR285ZuCdcNXvnYXqMRuwsHXhxk4ktvzxEFDG/WVEPflyPBequ0nPC+dJ0 RjZ3py+ECvQ8zuQbvjcgKnKlY+aRW04x -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:54 2025 by rpki-client