$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: IlCWwt/gUd8gGMUbjmuzp9XMncuh795iv5DeD87KjTg= Subject key identifier: A3:EE:B8:51:2E:37:61:73:C5:90:EB:32:84:C8:C0:7C:91:AB:3E:4C Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 0634 Signing time: Mon 16 Jun 2025 22:22:00 +0000 Manifest this update: Mon 16 Jun 2025 22:22:00 +0000 Manifest next update: Mon 23 Jun 2025 22:22:00 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: wgpYWkAGEhPfZNwycFfTyX1hz3zXZHVQVTzC4Nl1GyI=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: Jun 16 22:22:00 2025 GMT Not After : Jun 23 22:22:00 2025 GMT Subject: CN=68509908-5fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:a4:e5:db:e2:31:85:2d:b2:5c:eb:3c:67: 6e:b5:2d:5d:b7:da:68:6e:d0:0a:ff:de:ad:74:88: d4:ea:00:7c:9a:f7:9c:d0:bb:3c:19:63:5b:3a:fe: f4:be:bd:dc:1f:08:b1:a4:a0:60:be:72:8b:f2:a8: 50:16:8b:17:c5:dc:61:ed:14:89:14:a9:f3:07:60: b8:3c:1b:a3:4c:59:40:78:2b:b8:21:38:c7:35:43: b6:e2:d4:21:7c:dd:f4:5d:40:77:0e:c4:f5:c5:f5: 09:34:45:1b:10:19:00:44:61:25:95:55:dc:c3:bc: 84:87:06:37:ff:cc:fb:2b:3b:6e:83:69:27:13:02: 87:36:84:19:78:41:60:83:87:18:e2:82:bb:09:96: b6:85:33:53:af:7f:25:4f:7d:0c:16:84:ad:6b:35: ca:64:d8:fc:53:5b:c1:46:e4:fe:f8:fe:d5:c8:c9: f2:51:24:be:b0:2b:e2:57:78:fa:bf:02:c0:df:9e: c4:eb:26:9c:46:cf:a0:2f:d2:d7:87:c1:89:9e:5a: c3:65:f8:9b:51:12:4e:7c:3b:f0:6e:52:5b:77:98: dd:62:09:54:35:da:b7:3f:ab:9a:a4:3e:e8:0a:ef: 73:1f:a0:e2:2c:82:89:9a:4b:cb:1e:4d:04:4b:51: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EE:B8:51:2E:37:61:73:C5:90:EB:32:84:C8:C0:7C:91:AB:3E:4C X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:71:1f:bd:a8:da:91:60:72:d7:0e:a4:34:32:ba:f6:af:86: d0:78:e5:b1:ba:32:e4:10:54:d4:26:e2:95:0f:57:41:a2:d4: fb:3e:2f:84:2f:c0:a7:f0:37:88:46:6b:bd:76:65:f4:36:d3: 0c:bb:74:96:dd:62:00:3e:bc:42:eb:41:43:0b:81:9f:4a:14: 2a:6c:f7:9e:d8:f4:d0:5d:cc:8d:5a:be:02:54:1a:63:4f:7e: b4:19:d5:35:34:31:22:59:14:66:19:39:69:56:2d:92:60:6a: c8:69:12:24:58:62:79:67:4b:51:84:c4:4e:33:2b:66:c6:0c: 35:da:18:00:fc:16:d3:ba:36:0c:e6:0b:c5:0b:47:ef:88:f8: ca:5a:60:fc:0f:4a:fd:fc:80:a9:17:05:b7:a7:54:30:f9:e2: bf:42:01:29:a6:11:60:19:b1:f3:57:3d:eb:62:5e:de:97:87: 53:93:31:6f:4b:0e:e3:96:99:32:92:a2:58:e4:98:19:d8:c9: 38:4e:3b:48:b5:a0:27:6f:d6:8b:18:b5:6b:81:d6:a0:0d:61: e2:76:0c:8a:e3:41:9c:6d:ab:eb:1d:ec:99:2c:81:09:f3:da: 99:6c:ef:2e:e6:d6:2f:ba:31:7b:fb:07:9d:c9:b4:ba:ac:f2: af:bd:8b:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUwNjE2MjIyMjAwWhcNMjUwNjIzMjIyMjAwWjAYMRYwFAYD VQQDEw02ODUwOTkwOC01ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17Kk5dviMYUtslzrPGdutS1dt9pobtAK/96tdIjU6gB8mvec0Ls8GWNbOv70 vr3cHwixpKBgvnKL8qhQFosXxdxh7RSJFKnzB2C4PBujTFlAeCu4ITjHNUO24tQh fN30XUB3DsT1xfUJNEUbEBkARGEllVXcw7yEhwY3/8z7Kztug2knEwKHNoQZeEFg g4cY4oK7CZa2hTNTr38lT30MFoStazXKZNj8U1vBRuT++P7VyMnyUSS+sCviV3j6 vwLA357E6yacRs+gL9LXh8GJnlrDZfibURJOfDvwblJbd5jdYglUNdq3P6uapD7o Cu9zH6DiLIKJmkvLHk0ES1EwCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPuuFEu N2FzxZDrMoTIwHyRqz5MMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpcR+9qNqRYHLXDqQ0Mrr2r4bQeOWxujLkEFTUJuKVD1dBotT7Pi+E L8Cn8DeIRmu9dmX0NtMMu3SW3WIAPrxC60FDC4GfShQqbPee2PTQXcyNWr4CVBpj T360GdU1NDEiWRRmGTlpVi2SYGrIaRIkWGJ5Z0tRhMROMytmxgw12hgA/BbTujYM 5gvFC0fviPjKWmD8D0r9/ICpFwW3p1Qw+eK/QgEpphFgGbHzVz3rYl7el4dTkzFv Sw7jlpkykqJY5JgZ2Mk4TjtItaAnb9aLGLVrgdagDWHidgyK40GcbavrHeyZLIEJ 89qZbO8u5tYvujF7+wedybS6rPKvvYuc -----END CERTIFICATE-----Generated at Wed Jun 18 02:27:39 2025 by rpki-client