$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: gtFBrWr3lPnC7yUyvUn0YD3L4/k2NyJkLeWhoNUBdD0= Subject key identifier: D0:06:BB:82:51:18:C7:FD:CF:88:5F:3A:C5:25:E1:76:56:D0:7A:9A Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 0196 Signing time: Fri 13 Jun 2025 02:28:22 +0000 Manifest this update: Fri 13 Jun 2025 02:28:21 +0000 Manifest next update: Fri 20 Jun 2025 02:28:21 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: F52VmDy/WJQsDzGmrBhHNvZpOJm5GkY8WYPG5xPex6o=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Jun 13 02:28:21 2025 GMT Not After : Jun 20 02:28:21 2025 GMT Subject: CN=684b8cc6-4e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:95:6b:c2:f3:ae:15:7a:1b:44:14:1e:5b: f6:d6:f0:66:51:b8:23:ba:48:a4:4b:c2:dd:44:de: fb:d2:99:d0:b1:f0:89:51:3b:ac:df:6a:5e:33:34: e2:04:a4:c0:2e:87:3d:9a:8c:4a:9d:81:30:52:1f: c8:1c:cb:5d:c8:e7:20:8a:e3:bd:f8:0b:84:f4:b9: 8e:85:30:2e:cb:d2:5e:14:49:81:da:b1:8a:ac:19: fd:af:4e:41:3f:ce:91:de:4e:35:3a:e3:b9:ec:da: 45:69:4a:57:62:a5:da:ca:f8:46:fe:ae:e8:c3:fb: 19:64:f7:c6:81:66:d4:ca:23:0f:72:cb:d1:72:9a: b8:51:4c:6e:b8:1d:91:4d:66:a2:95:44:d3:99:a4: 36:1b:83:88:52:0a:91:27:5d:52:6f:96:ca:c5:3f: d3:04:b9:c5:3e:c0:06:f3:45:42:56:61:0e:df:06: d8:3e:12:6f:c7:d5:ce:5e:5e:6f:b8:c1:e7:29:2b: be:12:81:be:cb:aa:80:d9:02:ab:be:1c:22:01:43: 50:2a:5f:5d:9b:ae:35:5d:b7:b0:42:20:98:8a:6c: a7:f9:82:66:2f:05:3a:ed:5c:82:50:03:33:73:39: 85:72:9a:b2:56:11:03:36:72:c7:61:89:df:b6:f6: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:06:BB:82:51:18:C7:FD:CF:88:5F:3A:C5:25:E1:76:56:D0:7A:9A X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4b:e2:16:b3:f0:83:04:36:d5:e3:b0:87:fb:5f:a9:ed:25: f0:a6:1f:fb:99:e5:35:50:9d:37:5b:0b:ce:d4:6c:16:a4:5b: a5:c9:1c:80:06:86:cd:9b:98:34:dc:55:92:1f:af:d6:bc:1f: 06:a3:1d:3a:fe:5a:a3:87:8c:bd:80:18:40:2a:11:73:a0:48: 1f:73:6d:66:e8:a5:85:a9:e8:e9:7c:13:6d:75:1f:6c:33:3d: 48:21:b5:d9:c3:bf:ba:ff:a5:6e:18:75:11:12:0f:d0:a9:9f: ac:37:c5:42:ee:31:75:8b:4d:87:27:67:e7:7b:5f:c2:6d:49: 60:3d:77:b2:f3:13:2b:7d:05:4f:d8:3e:98:46:81:21:9c:94: cb:d3:2f:e9:1e:cd:54:53:3c:6d:01:c7:f2:06:6a:fd:f8:e0: ba:6e:71:56:e1:d6:47:d2:24:a5:f1:c2:93:16:ee:6a:b6:d0: 9f:27:d0:4a:3d:3b:2c:65:11:7a:1c:ec:94:2d:ac:f1:a0:c0: 6f:6b:4b:da:19:07:65:0f:7a:37:10:cb:ef:01:a9:cd:4f:96: 04:5b:5b:14:1f:fa:87:68:2f:85:69:c4:e0:59:36:3d:0c:32: fe:bc:a9:d9:ee:67:5e:f3:8d:00:b5:af:b7:fc:4c:e8:57:c8: 9f:3f:c8:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUwNjEzMDIyODIxWhcNMjUwNjIwMDIyODIxWjAYMRYwFAYD VQQDEw02ODRiOGNjNi00ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHaVa8LzrhV6G0QUHlv21vBmUbgjukikS8LdRN770pnQsfCJUTus32peMzTi BKTALoc9moxKnYEwUh/IHMtdyOcgiuO9+AuE9LmOhTAuy9JeFEmB2rGKrBn9r05B P86R3k41OuO57NpFaUpXYqXayvhG/q7ow/sZZPfGgWbUyiMPcsvRcpq4UUxuuB2R TWailUTTmaQ2G4OIUgqRJ11Sb5bKxT/TBLnFPsAG80VCVmEO3wbYPhJvx9XOXl5v uMHnKSu+EoG+y6qA2QKrvhwiAUNQKl9dm641XbewQiCYimyn+YJmLwU67VyCUAMz czmFcpqyVhEDNnLHYYnftvbnUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAGu4JR GMf9z4hfOsUl4XZW0HqaMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpS+IWs/CDBDbV47CH+1+p7SXwph/7meU1UJ03WwvO1GwWpFulyRyA BobNm5g03FWSH6/WvB8Gox06/lqjh4y9gBhAKhFzoEgfc21m6KWFqejpfBNtdR9s Mz1IIbXZw7+6/6VuGHUREg/QqZ+sN8VC7jF1i02HJ2fne1/CbUlgPXey8xMrfQVP 2D6YRoEhnJTL0y/pHs1UUzxtAcfyBmr9+OC6bnFW4dZH0iSl8cKTFu5qttCfJ9BK PTssZRF6HOyULazxoMBva0vaGQdlD3o3EMvvAanNT5YEW1sUH/qHaC+FacTgWTY9 DDL+vKnZ7mde840Ata+3/EzoV8ifP8gq -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:19 2025 by rpki-client