$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: K4fmsAxbwcIIc0pc1vr+knbrzLPy9BUbTcQanvmD2+Q= Subject key identifier: BC:3E:AC:50:A4:89:4A:B5:53:29:82:7C:5E:A7:60:0A:81:38:C4:C2 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 16 Signing time: Fri 13 Jun 2025 06:51:53 +0000 Manifest this update: Fri 13 Jun 2025 06:51:52 +0000 Manifest next update: Fri 20 Jun 2025 06:51:52 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: 99lNaNXwB9YMHxHyj2wOQiiKd/UE+xYb5WvKUrdddcc=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: Jun 13 06:51:52 2025 GMT Not After : Jun 20 06:51:52 2025 GMT Subject: CN=684bca89-5e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5c:5a:ae:e3:02:3c:d0:d4:64:22:78:53:ce: d7:42:99:bc:1c:dc:c8:0f:76:64:74:f4:9f:34:07: 33:5a:1e:ed:05:62:53:c6:59:f8:3c:72:d0:93:b6: f5:8c:1d:4e:55:4d:c6:4d:08:c2:29:e6:2e:7e:3d: 05:f3:91:dc:a9:6f:df:d6:8e:ff:de:51:7e:75:df: da:3e:c2:bc:a5:0f:c8:1a:49:f1:70:07:1a:0a:da: 30:66:6d:0b:2b:1e:9d:f7:89:19:4d:1e:1b:d1:58: 26:ce:68:7c:e9:89:e0:bc:82:27:a8:09:ef:06:91: 70:01:87:e1:a6:7d:c2:dc:9a:94:af:7c:73:d4:5c: 78:40:37:24:28:8a:3f:20:b8:30:f7:a9:24:01:97: 84:b0:09:86:13:95:4a:24:83:a0:23:57:a8:5c:c0: 7d:27:e2:7d:d3:4c:86:02:21:c8:41:63:31:8a:23: 5e:65:07:3b:7e:a6:74:f3:2f:8d:e8:a7:aa:bc:5d: ac:23:1c:24:0f:ea:8c:24:9c:79:7f:d0:1d:a2:c9: 8c:bf:34:ce:fa:e3:99:ba:12:73:a1:40:9f:f1:3f: f1:a9:ea:ef:ce:1f:36:d6:2d:bf:7b:5c:06:6d:1e: d8:81:65:c0:51:d1:13:99:b4:8b:b0:75:b5:be:00: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:AC:50:A4:89:4A:B5:53:29:82:7C:5E:A7:60:0A:81:38:C4:C2 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3b:d4:be:f1:bc:c1:fd:59:f3:be:af:dc:c2:e8:b8:a2:a4: e1:6d:cb:c3:e2:aa:f1:fd:27:96:da:60:4e:c7:57:ed:3f:2b: 78:a3:37:53:50:71:0b:7c:96:db:1b:cb:14:74:e4:23:b8:38: 45:fb:04:06:96:1b:93:63:4f:aa:08:54:ac:ff:86:c1:8f:17: d1:cb:f7:80:9a:a5:f7:81:9e:63:75:9b:96:23:dc:37:ae:03: 6b:98:fc:59:27:0d:e6:b3:0c:ef:ce:b2:06:1b:35:46:89:a0: e7:10:f0:9f:23:0f:8c:aa:fa:d9:c0:94:23:7f:f3:30:48:b9: 6b:5c:ff:ab:c3:c1:e9:51:1e:c6:03:33:00:2c:5f:3a:86:70: 72:c2:1f:a9:d6:f1:75:0a:a1:12:20:0f:d3:10:0a:ce:9b:7f: f9:0f:92:ee:94:07:01:30:3d:7e:25:12:43:51:13:bd:23:1b: c0:33:12:99:90:8d:02:67:95:5f:cf:c1:c0:b7:23:b6:70:29: 2c:8a:9f:ae:e3:dd:f4:69:cc:83:f6:69:c4:3a:8e:35:45:49: a7:81:15:dc:94:81:2d:51:34:51:36:9b:79:34:11:c1:39:5a: 6a:4a:f7:3b:b5:7c:d7:4a:eb:c2:0e:2c:9a:5b:66:5d:b7:a3: 81:ad:88:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA2MTMwNjUxNTJaFw0yNTA2MjAwNjUxNTJaMBgxFjAUBgNV BAMTDTY4NGJjYTg5LTVlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1XFqu4wI80NRkInhTztdCmbwc3MgPdmR09J80BzNaHu0FYlPGWfg8ctCTtvWM HU5VTcZNCMIp5i5+PQXzkdypb9/Wjv/eUX5139o+wrylD8gaSfFwBxoK2jBmbQsr Hp33iRlNHhvRWCbOaHzpieC8gieoCe8GkXABh+GmfcLcmpSvfHPUXHhANyQoij8g uDD3qSQBl4SwCYYTlUokg6AjV6hcwH0n4n3TTIYCIchBYzGKI15lBzt+pnTzL43o p6q8XawjHCQP6owknHl/0B2iyYy/NM7645m6EnOhQJ/xP/Gp6u/OHzbWLb97XAZt HtiBZcBR0ROZtIuwdbW+ACnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvD6sUKSJ SrVTKYJ8XqdgCoE4xMIwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFo71L7xvMH9WfO+r9zC6LiipOFty8PiqvH9J5baYE7HV+0/K3ijN1NQ cQt8ltsbyxR05CO4OEX7BAaWG5NjT6oIVKz/hsGPF9HL94CapfeBnmN1m5Yj3Deu A2uY/FknDeazDO/OsgYbNUaJoOcQ8J8jD4yq+tnAlCN/8zBIuWtc/6vDwelRHsYD MwAsXzqGcHLCH6nW8XUKoRIgD9MQCs6bf/kPku6UBwEwPX4lEkNRE70jG8AzEpmQ jQJnlV/PwcC3I7ZwKSyKn67j3fRpzIP2acQ6jjVFSaeBFdyUgS1RNFE2m3k0EcE5 WmpK9zu1fNdK68IOLJpbZl23o4GtiP8= -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:20 2025 by rpki-client