$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: UF7kIw8i/4lhTrgI1/TS2+IjwLlrttb2nj47UmCTBDw= Subject key identifier: CF:41:AB:20:55:A0:C3:77:10:6E:2C:3A:6C:4E:44:8A:89:A3:74:8E Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 03F7 Signing time: Tue 17 Jun 2025 00:10:25 +0000 Manifest this update: Tue 17 Jun 2025 00:10:25 +0000 Manifest next update: Tue 24 Jun 2025 00:10:25 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: pOiTfB0wi56Xtf8l4MGxzDkX7ZUudjKnPkt62WRiOeM=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Jun 17 00:10:25 2025 GMT Not After : Jun 24 00:10:25 2025 GMT Subject: CN=6850b271-3c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:6c:3b:7f:3e:81:c6:9a:08:c0:fa:c1:19: b6:0d:be:4d:be:56:e6:e6:d9:6f:f5:9b:e3:38:37: 67:17:28:b1:6b:a9:c1:69:09:01:eb:19:89:cf:f4: a6:54:fc:af:8e:e6:f5:aa:22:90:38:e9:f2:c3:24: 83:d6:01:37:88:b2:3d:2b:23:0e:d8:df:cf:1c:f4: 1f:e5:8b:c5:1e:46:4c:b4:11:fe:68:9b:b1:a2:92: de:f1:f6:18:e7:17:84:e5:1a:e2:e5:61:16:7a:9d: 6a:99:f5:b2:7a:e2:6a:85:d3:94:ca:ac:76:6f:de: 10:c6:fb:b8:de:ef:31:a4:66:52:95:da:eb:4d:22: 3b:da:57:8c:41:b2:29:6d:ef:5e:b1:76:eb:b7:75: 11:5f:fd:41:f6:9e:a8:50:e3:ff:73:e9:cd:f6:c5: 26:4b:8c:72:e9:05:d6:b0:33:ea:f0:2f:d7:7c:ba: ba:06:84:3d:71:81:eb:07:0c:08:1b:5e:e3:8d:ce: 2d:68:9e:94:fc:b1:2a:ef:b7:f4:e2:54:56:a0:96: aa:c2:fd:42:ef:19:9f:cb:6a:ca:23:bf:c4:04:51: f5:19:e6:e2:3d:b6:45:1e:c7:10:38:cb:3f:28:ca: f0:99:e6:54:2c:97:a0:b9:7d:a9:32:1e:84:4a:fd: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:AB:20:55:A0:C3:77:10:6E:2C:3A:6C:4E:44:8A:89:A3:74:8E X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:45:5b:96:30:6d:ad:7b:21:ac:c0:40:ec:de:cc:88:d2: 01:a6:81:8a:9b:f0:ae:8a:89:b0:16:18:bb:2b:3d:ab:34:c4: f2:7b:6e:42:56:51:3c:0a:77:8b:40:c1:f3:05:f1:05:b3:49: fa:05:ca:26:1a:45:85:36:26:1c:1c:e2:f9:68:15:3d:b7:86: ce:bb:c8:c2:f4:f8:8d:81:e1:3e:16:2b:fb:13:59:8a:d9:2f: 0c:1f:b9:c4:4b:c9:9a:9c:22:02:76:60:a5:75:d7:ae:87:d6: 74:ea:5a:20:80:4e:68:2a:46:1d:dd:3e:57:bd:fc:bb:84:d1: be:36:94:01:11:95:89:f3:ca:ef:9d:a8:78:fd:c7:31:3a:db: 10:99:dc:0f:8f:49:32:d3:20:7e:5b:fb:bd:ca:4b:aa:44:e0: 29:2b:2e:56:5c:e1:d5:ce:ac:f2:e8:22:2e:96:e2:77:b9:f3: 9e:84:88:e4:9a:f4:51:40:f5:3c:0e:b9:2d:36:9a:61:5c:08: da:a7:08:fb:8c:c2:92:33:e2:61:a9:77:7a:84:e5:06:3d:34: d9:b6:7f:d6:bd:1a:f0:7f:15:b9:0a:f8:41:43:cd:01:a6:46: e4:c6:21:34:b1:8d:d6:75:68:03:65:04:0b:d5:62:bf:7b:0d: 0e:1c:e2:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwNjE3MDAxMDI1WhcNMjUwNjI0MDAxMDI1WjAYMRYwFAYD VQQDEw02ODUwYjI3MS0zYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eFsO38+gcaaCMD6wRm2Db5Nvlbm5tlv9ZvjODdnFyixa6nBaQkB6xmJz/Sm VPyvjub1qiKQOOnywySD1gE3iLI9KyMO2N/PHPQf5YvFHkZMtBH+aJuxopLe8fYY 5xeE5Rri5WEWep1qmfWyeuJqhdOUyqx2b94Qxvu43u8xpGZSldrrTSI72leMQbIp be9esXbrt3URX/1B9p6oUOP/c+nN9sUmS4xy6QXWsDPq8C/XfLq6BoQ9cYHrBwwI G17jjc4taJ6U/LEq77f04lRWoJaqwv1C7xmfy2rKI7/EBFH1GebiPbZFHscQOMs/ KMrwmeZULJeguX2pMh6ESv0+wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9BqyBV oMN3EG4sOmxORIqJo3SOMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK70VbljBtrXshrMBA7N7MiNIBpoGKm/CuiomwFhi7Kz2rNMTye25C VlE8CneLQMHzBfEFs0n6BcomGkWFNiYcHOL5aBU9t4bOu8jC9PiNgeE+Fiv7E1mK 2S8MH7nES8manCICdmClddeuh9Z06loggE5oKkYd3T5Xvfy7hNG+NpQBEZWJ88rv nah4/ccxOtsQmdwPj0ky0yB+W/u9ykuqROApKy5WXOHVzqzy6CIuluJ3ufOehIjk mvRRQPU8DrktNpphXAjapwj7jMKSM+JhqXd6hOUGPTTZtn/WvRrwfxW5CvhBQ80B pkbkxiE0sY3WdWgDZQQL1WK/ew0OHOLy -----END CERTIFICATE-----Generated at Tue Jun 17 18:50:18 2025 by rpki-client