$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: fxAfSi68NqhAr2aSAcKRJyqPVvIkUfuAgbzQzPMPOlM= Subject key identifier: A4:63:DA:23:65:47:DB:8D:F5:44:04:67:EC:41:B5:D8:0B:CC:79:B2 Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 04C0 Signing time: Wed 18 Jun 2025 23:42:05 +0000 Manifest this update: Wed 18 Jun 2025 23:42:04 +0000 Manifest next update: Wed 25 Jun 2025 23:42:04 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: QAfS7APop1ih8iWaDLrLgNeshlI/qZS8+TQYN5a0EZc=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: mu1mKwNxbL7+Qz6oyXzuFah+meolf6goLYumQsj+R3w=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: piiG9QvMfLvduFL/aWOQ0VapC6DoQwecA1GtDw7CHzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Jun 18 23:42:04 2025 GMT Not After : Jun 25 23:42:04 2025 GMT Subject: CN=68534ecc-cd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:76:43:d9:10:e5:b9:3c:3b:ba:5d:81:69: c3:ee:e4:4a:82:09:2d:d6:9e:c0:5c:2a:8e:01:2d: 17:e5:74:01:29:eb:c7:a8:f8:b6:c3:6b:94:84:51: 21:88:a7:b9:6d:8b:79:80:4f:3b:14:53:82:3d:5b: 7f:fd:fa:fc:c7:79:dd:e2:ab:af:cf:c0:67:c3:1a: 27:94:86:d6:a7:93:ba:2f:c0:2f:ee:62:82:1e:53: 61:19:1b:04:cd:24:c5:36:17:95:b8:de:e7:7b:04: 96:30:0e:15:40:a6:e3:46:a4:c9:89:b0:ad:21:b7: 86:17:95:b0:22:f1:77:15:36:3e:21:96:2b:d9:ca: 6b:e5:e0:18:e5:30:58:f1:1b:ca:d3:92:45:b1:4b: 26:85:69:a8:fb:22:a3:a2:00:7f:ed:d9:ad:f9:39: c3:7c:0d:74:33:79:86:b4:55:85:46:0b:60:fc:3f: 09:b9:9e:0b:b1:f2:dc:88:18:31:7c:59:99:4b:a7: b8:77:a6:85:4d:b5:74:06:b0:4f:bb:62:e2:fa:4e: 32:b0:23:3b:ff:82:06:e9:43:49:ab:c8:c7:d1:df: 9b:90:07:4e:4b:69:33:5e:24:5c:2f:8c:aa:39:11: d2:1a:89:48:6e:63:42:cb:45:af:a9:0a:c2:7a:f7: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:63:DA:23:65:47:DB:8D:F5:44:04:67:EC:41:B5:D8:0B:CC:79:B2 X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:62:b4:64:66:21:f3:08:51:2d:ab:00:f3:e2:54:be:8d:aa: 6d:42:ee:8e:3c:b1:3e:3f:e3:8b:3a:ef:16:4a:b9:a9:20:e4: d6:1d:34:a6:e7:6d:5a:ac:b1:34:88:8c:b9:ca:72:f9:59:59: 5d:9e:f0:73:08:31:9f:7c:bf:a5:a9:3b:4e:8b:39:67:b8:64: 3b:f2:b6:87:26:46:3c:4b:62:69:db:87:26:eb:be:33:7e:b9: 95:6e:f8:19:12:2e:d4:70:e7:58:a1:b4:08:22:8f:8d:8f:e6: fe:9f:2e:7c:bd:86:28:7e:56:ea:5f:8b:01:8f:44:91:3d:f3: e0:f7:42:d5:57:36:65:75:b0:ff:16:bf:8d:13:63:0c:18:aa: 26:69:69:5f:b7:76:c7:24:55:93:65:af:28:14:2b:ee:47:e9: a5:f4:24:c4:28:7a:a3:41:cb:39:ce:97:3b:b1:55:70:61:ab: 42:41:c9:5f:29:8a:70:0a:c0:f9:b3:62:2d:fa:42:88:24:8c: 78:36:22:94:b9:21:fe:78:8c:be:40:1c:a2:9b:bb:4c:e0:d9: 1c:e7:d1:f3:79:51:ab:f2:2f:bb:12:86:46:93:05:43:11:4c: b3:85:30:06:94:4c:47:ee:52:ed:38:b5:c7:43:19:1e:22:ac: 95:c1:0d:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjUwNjE4MjM0MjA0WhcNMjUwNjI1MjM0MjA0WjAYMRYwFAYD VQQDEw02ODUzNGVjYy1jZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDN2Q9kQ5bk8O7pdgWnD7uRKggkt1p7AXCqOAS0X5XQBKevHqPi2w2uUhFEh iKe5bYt5gE87FFOCPVt//fr8x3nd4quvz8BnwxonlIbWp5O6L8Av7mKCHlNhGRsE zSTFNheVuN7newSWMA4VQKbjRqTJibCtIbeGF5WwIvF3FTY+IZYr2cpr5eAY5TBY 8RvK05JFsUsmhWmo+yKjogB/7dmt+TnDfA10M3mGtFWFRgtg/D8JuZ4LsfLciBgx fFmZS6e4d6aFTbV0BrBPu2Li+k4ysCM7/4IG6UNJq8jH0d+bkAdOS2kzXiRcL4yq ORHSGolIbmNCy0WvqQrCevfa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRj2iNl R9uN9UQEZ+xBtdgLzHmyMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBYrRkZiHzCFEtqwDz4lS+japtQu6OPLE+P+OLOu8WSrmpIOTWHTSm 521arLE0iIy5ynL5WVldnvBzCDGffL+lqTtOizlnuGQ78raHJkY8S2Jp24cm674z frmVbvgZEi7UcOdYobQIIo+Nj+b+ny58vYYoflbqX4sBj0SRPfPg90LVVzZldbD/ Fr+NE2MMGKomaWlft3bHJFWTZa8oFCvuR+ml9CTEKHqjQcs5zpc7sVVwYatCQclf KYpwCsD5s2It+kKIJIx4NiKUuSH+eIy+QByim7tM4Nkc59HzeVGr8i+7EoZGkwVD EUyzhTAGlExH7lLtOLXHQxkeIqyVwQ3e -----END CERTIFICATE-----Generated at Fri Jun 20 12:14:53 2025 by rpki-client