$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft File: GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json) Hash identifier: OYkgVs7PkfXk3LjiVZVj09WEHXuUK3fZeA2bPOnn0Zw= Subject key identifier: 33:2B:BB:E0:74:19:7B:5F:8B:35:18:8E:EB:3A:2B:86:47:87:CD:97 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft Manifest number: B8 Signing time: Sun 15 Jun 2025 05:02:45 +0000 Manifest this update: Sun 15 Jun 2025 05:02:44 +0000 Manifest next update: Sun 22 Jun 2025 05:02:44 +0000 Files and hashes: 1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: nDQLauq7B+etFLPrF0ODPsI+Bt1f6CjdPfMqYQQb3JA=) 2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: 6k5p/IoEaHlPBZxEG5I/1TmRBsboDJLoq3IRABT/4wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jun 15 05:02:44 2025 GMT Not After : Jun 22 05:02:44 2025 GMT Subject: CN=684e53f4-6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:1e:b7:23:75:a1:e4:a5:36:05:83:63:e9: 05:3e:70:51:ae:5f:12:1a:f2:9f:b2:86:99:7d:88: 5c:e6:41:8a:96:cc:93:32:09:03:40:5f:f5:73:6e: ae:6b:c9:b2:0c:4f:cf:8f:a4:e3:7a:9e:a6:f3:a9: 6d:76:a3:ec:a1:33:fd:5f:0e:be:0b:07:5b:95:a9: 40:d1:84:71:aa:ef:f1:b4:9e:07:2d:ae:cf:27:81: 2d:cf:ac:3c:30:84:3f:01:81:9a:88:36:7d:c5:d3: 32:42:7c:e0:ea:20:87:50:33:a8:1f:dd:c6:d3:b7: 6b:11:12:80:8b:5a:d3:73:86:fe:05:04:1e:63:d9: a1:a7:e1:f5:ce:a9:e5:54:29:3e:22:eb:ec:62:8e: f7:9d:c8:38:d6:f1:b2:4b:77:95:cd:df:e6:09:d5: bf:a5:c0:2a:f3:89:27:ab:07:b8:be:83:17:a8:3d: ee:69:58:7e:17:bb:9d:c5:a9:7a:e6:e2:72:1d:1c: 72:67:cd:73:ef:72:3b:dd:41:59:dc:24:b2:5f:fa: e9:db:80:e3:a2:77:a3:af:88:3d:d8:6d:51:f2:39: 6c:c0:30:2d:50:c2:88:cf:5a:a7:10:14:3f:e1:61: c8:d6:b3:27:bc:89:c8:97:d2:53:40:c5:2e:b8:5a: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2B:BB:E0:74:19:7B:5F:8B:35:18:8E:EB:3A:2B:86:47:87:CD:97 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2c:b2:e0:a6:05:0f:51:b0:3b:d1:68:8c:c6:1b:e1:70:d1: b1:c4:1b:a2:62:56:2e:73:34:94:08:eb:e3:51:0a:0e:fe:d9: dc:be:02:18:5c:1e:4f:38:ee:07:a6:a8:30:a3:00:83:45:00: 33:2e:a9:34:9e:11:75:37:76:ef:a3:36:18:2f:87:1a:42:76: 33:95:4d:e9:63:30:36:50:09:40:23:f0:37:14:65:5a:6e:61: a7:92:9b:8b:60:1e:64:bd:bc:66:cb:16:ea:bb:7e:55:ab:a2: ac:c2:9e:21:d2:58:8c:d2:0f:6f:03:6c:ac:89:86:65:7b:26: 24:42:3c:2a:b8:f8:37:9b:93:6a:55:d9:30:59:39:43:d9:a0: f9:18:db:ce:8a:3c:5b:5a:88:6d:13:39:ea:d5:ad:f6:36:ca: 94:1a:c0:0b:0c:ad:e6:ae:ed:42:3b:64:73:7a:b7:ba:a0:c0: ff:b5:73:59:44:c3:92:f9:33:b1:b5:94:11:2e:61:d7:99:29: 5f:21:c0:74:e6:db:29:05:dd:d4:15:88:a5:6a:3b:8e:6e:8a: de:87:a6:33:6b:f7:f6:c0:ab:3d:a1:3b:1a:0c:c8:b0:9c:4d: 62:ef:3b:06:a8:ca:ed:80:80:7c:a8:79:5b:e1:68:b3:77:51: e7:9d:55:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwNjE1MDUwMjQ0WhcNMjUwNjIyMDUwMjQ0WjAYMRYwFAYD VQQDEw02ODRlNTNmNC02MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WQetyN1oeSlNgWDY+kFPnBRrl8SGvKfsoaZfYhc5kGKlsyTMgkDQF/1c26u a8myDE/Pj6Tjep6m86ltdqPsoTP9Xw6+CwdblalA0YRxqu/xtJ4HLa7PJ4Etz6w8 MIQ/AYGaiDZ9xdMyQnzg6iCHUDOoH93G07drERKAi1rTc4b+BQQeY9mhp+H1zqnl VCk+IuvsYo73ncg41vGyS3eVzd/mCdW/pcAq84knqwe4voMXqD3uaVh+F7udxal6 5uJyHRxyZ81z73I73UFZ3CSyX/rp24Djonejr4g92G1R8jlswDAtUMKIz1qnEBQ/ 4WHI1rMnvInIl9JTQMUuuFr7gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMru+B0 GXtfizUYjus6K4ZHh82XMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKLLLgpgUPUbA70WiMxhvhcNGxxBuiYlYuczSUCOvjUQoO/tncvgIY XB5POO4HpqgwowCDRQAzLqk0nhF1N3bvozYYL4caQnYzlU3pYzA2UAlAI/A3FGVa bmGnkpuLYB5kvbxmyxbqu35Vq6Kswp4h0liM0g9vA2ysiYZleyYkQjwquPg3m5Nq VdkwWTlD2aD5GNvOijxbWohtEznq1a32NsqUGsALDK3mru1CO2Rzere6oMD/tXNZ RMOS+TOxtZQRLmHXmSlfIcB05tspBd3UFYilajuOboreh6Yza/f2wKs9oTsaDMiw nE1i7zsGqMrtgIB8qHlb4Wizd1HnnVV6 -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:12 2025 by rpki-client