$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: gX1FAANLYjGb2Xg3vLPCTtF33Q8ikTyOUYWwYq3iXHc= Subject key identifier: 78:41:D6:F4:27:7D:F5:8C:E9:4A:9B:22:90:04:48:A0:FA:82:6E:1A Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 102E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1024 Signing time: Sat 14 Jun 2025 17:21:50 +0000 Manifest this update: Sat 14 Jun 2025 17:21:50 +0000 Manifest next update: Sat 21 Jun 2025 17:21:50 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: 3KuELRPo4zTWGU8a3T2eg6o55fykNPWGro18EptNnVY=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: Ksnt24EsyPmiy/Gyqmmcb01Su1qcDddDH/I7fUARzPI=) 3: D38E10ACDEA311EE901DD072C4F9AE02.roa (hash: NbpmBB1gIIGV5sc1Y6a1vNgV2IiOYxP9cMlh7LY3b+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4142 (0x102e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Jun 14 17:21:50 2025 GMT Not After : Jun 21 17:21:50 2025 GMT Subject: CN=684dafae-cad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:5b:93:72:48:a6:db:98:ce:89:4a:a8:62: d8:a2:b1:be:05:31:b8:3f:de:21:76:67:c1:8b:e5: 54:af:09:54:4a:a2:88:66:31:bb:1e:97:c2:a2:c1: 35:11:33:cd:ab:81:03:43:fe:b2:f3:92:ac:79:12: 29:a8:b6:f2:5d:a5:67:2a:8a:1f:3f:69:b7:08:2c: a3:98:11:e2:9e:8c:30:0a:c2:41:d5:a0:e3:15:ad: 2e:19:27:bf:e0:82:dd:0e:31:23:82:d9:d1:f4:21: 26:f2:48:da:5d:8a:39:ef:f6:51:ba:be:52:26:0e: db:81:2b:95:2b:5e:72:81:75:71:bc:c7:88:12:8d: bf:93:95:07:b6:15:39:c0:2a:78:1c:fc:18:20:ec: 30:e5:8d:f2:af:a5:c9:b0:75:b5:fd:ef:a5:11:48: 65:db:6d:8b:fe:04:13:53:54:48:fe:b4:86:9e:5e: 5e:6e:42:d2:86:39:e7:be:cf:d9:41:c8:1a:0b:b0: 8a:65:2d:b0:1f:1c:15:da:64:0b:7e:3c:0c:3c:ab: 96:8e:a6:c5:23:be:dd:39:f0:e4:39:6d:80:d7:3d: 9c:7f:e7:ac:7f:ad:87:b7:97:c6:c0:28:d0:16:a3: 36:98:a2:01:d3:90:08:80:b7:c1:a3:8b:88:8d:e6: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:D6:F4:27:7D:F5:8C:E9:4A:9B:22:90:04:48:A0:FA:82:6E:1A X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:9d:c0:1b:57:48:ee:41:18:3d:3a:5b:01:38:f1:09:2a:4d: aa:11:f2:81:b1:27:73:c6:e6:62:51:2b:72:b1:08:96:4f:23: c0:2b:61:94:99:ee:86:56:88:9e:b7:ca:3e:bf:24:cd:91:f0: 8e:6f:88:0f:fa:19:9e:0a:37:a9:7a:41:bf:3a:1e:27:3b:e0: ff:cb:22:35:d2:f4:31:51:c1:49:fe:68:7b:b4:b2:2f:73:b8: 04:0d:25:77:e1:b4:ab:36:68:ea:b7:c0:94:b6:ed:73:b1:f0: dd:80:99:88:a9:9e:b4:ce:c4:f9:5f:74:07:03:78:59:39:16: ac:49:2f:44:70:be:d6:90:1c:ac:e2:cc:f0:30:99:61:4d:95: 39:a6:56:a3:6a:c7:c2:fd:54:42:d9:20:95:aa:6a:5a:69:25: 01:87:ca:1c:88:0b:99:24:66:4a:71:49:0a:d3:9d:eb:28:f9: 43:33:a4:7c:fd:54:41:45:8d:96:18:c7:a6:dc:41:ab:35:0b: 96:46:1e:af:27:be:21:4a:7d:2f:ea:ef:b5:93:9d:6e:60:b5: 7a:5d:a1:50:ca:6b:c7:72:58:1c:1e:44:c8:58:da:52:3e:1f: 20:05:ef:35:0e:92:f2:5c:62:90:e4:98:52:9f:43:d1:b4:44: 04:16:2c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUwNjE0MTcyMTUwWhcNMjUwNjIxMTcyMTUwWjAYMRYwFAYD VQQDEw02ODRkYWZhZS1jYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdBbk3JIptuYzolKqGLYorG+BTG4P94hdmfBi+VUrwlUSqKIZjG7HpfCosE1 ETPNq4EDQ/6y85KseRIpqLbyXaVnKoofP2m3CCyjmBHinowwCsJB1aDjFa0uGSe/ 4ILdDjEjgtnR9CEm8kjaXYo57/ZRur5SJg7bgSuVK15ygXVxvMeIEo2/k5UHthU5 wCp4HPwYIOww5Y3yr6XJsHW1/e+lEUhl222L/gQTU1RI/rSGnl5ebkLShjnnvs/Z QcgaC7CKZS2wHxwV2mQLfjwMPKuWjqbFI77dOfDkOW2A1z2cf+esf62Ht5fGwCjQ FqM2mKIB05AIgLfBo4uIjebrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhB1vQn ffWM6UqbIpAESKD6gm4aMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvncAbV0juQRg9OlsBOPEJKk2qEfKBsSdzxuZiUStysQiWTyPAK2GU me6GVoiet8o+vyTNkfCOb4gP+hmeCjepekG/Oh4nO+D/yyI10vQxUcFJ/mh7tLIv c7gEDSV34bSrNmjqt8CUtu1zsfDdgJmIqZ60zsT5X3QHA3hZORasSS9EcL7WkBys 4szwMJlhTZU5plajasfC/VRC2SCVqmpaaSUBh8ociAuZJGZKcUkK053rKPlDM6R8 /VRBRY2WGMem3EGrNQuWRh6vJ74hSn0v6u+1k51uYLV6XaFQymvHclgcHkTIWNpS Ph8gBe81DpLyXGKQ5JhSn0PRtEQEFiwR -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:58 2025 by rpki-client