$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: DrvVVGIhemeo6bcNYYdTic+zptEXH21VW/7742b8gng= Subject key identifier: 4D:37:5E:DB:13:12:79:1F:C4:12:94:B1:DB:56:29:B3:75:45:37:44 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 51 Signing time: Tue 17 Jun 2025 06:09:41 +0000 Manifest this update: Tue 17 Jun 2025 06:09:41 +0000 Manifest next update: Tue 24 Jun 2025 06:09:41 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: 7S6iQ8yKVy9EZpJPkNnWmTbsx8yCSH+2u01fRFki7Ks=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Jun 17 06:09:41 2025 GMT Not After : Jun 24 06:09:41 2025 GMT Subject: CN=685106a5-1744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:05:3c:cf:34:ed:c0:f5:74:b5:99:c4:98: d7:e6:e4:0c:74:b3:2a:b5:8a:bd:f1:47:0d:6b:fe: a3:f9:e2:f3:9f:5b:7c:22:5b:b4:b8:4d:26:fb:cb: c9:96:3f:26:6e:a4:88:40:91:4b:db:e4:81:24:7b: dc:b7:22:f7:4b:e5:6a:a5:52:00:5c:88:57:c3:c1: 86:a7:5c:c7:a5:aa:40:76:e5:7d:98:02:20:7a:29: 75:75:43:60:ca:b8:53:0d:a6:a7:88:87:42:24:d4: da:95:e1:54:85:a1:52:6e:de:30:3f:fe:bd:fd:8f: 35:aa:24:8d:81:00:ba:f5:7e:a2:c3:b0:e4:be:e3: 51:b6:42:92:ac:2e:20:8d:43:b2:4d:80:9e:07:f0: a9:03:aa:e2:15:e4:45:f7:56:44:e1:41:a9:e4:46: 9d:82:6c:2e:12:13:eb:c1:6e:e8:e5:fc:10:b8:37: b2:51:f5:4f:c2:41:c8:9c:08:aa:50:3a:51:f4:19: 97:ec:08:59:4c:b0:f5:e8:90:1d:20:f2:14:77:9e: 83:d5:54:8a:28:47:a1:c3:43:2a:05:0c:53:5a:84: e3:8c:ec:0c:97:1b:59:3b:0d:b7:5a:12:03:6e:aa: 13:0c:73:71:d6:d4:c3:81:c0:b3:63:32:a3:29:be: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:5E:DB:13:12:79:1F:C4:12:94:B1:DB:56:29:B3:75:45:37:44 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9f:9d:69:27:a4:c3:61:85:40:61:b2:9e:7e:fa:10:75:24: 40:ff:12:6e:0b:7a:64:a8:a2:fe:f3:ed:34:92:f1:8f:50:9f: 3e:55:0c:46:5b:d1:71:20:23:99:0c:5e:82:91:c0:ce:d9:b9: 8b:ec:61:85:46:71:8b:d3:d5:12:95:eb:1f:5b:65:42:f1:4c: da:cf:53:df:ee:58:f6:3d:f3:ba:68:a7:be:40:7e:a2:a0:d6: 8f:4f:05:0b:38:33:f4:59:18:ad:c4:64:89:87:ac:97:73:ac: f9:2e:36:2b:c6:e8:c4:ec:76:bc:bf:94:fa:8c:e8:4e:ad:76: 7c:dd:8b:e5:b7:00:9c:8e:ef:e9:9a:cb:81:f0:2a:6e:65:44: 5b:1f:7d:1d:7a:58:d8:94:54:07:af:77:cc:68:bd:0b:39:fe: 26:e2:2d:f4:23:14:1e:f8:46:f3:76:2c:66:48:9b:c4:42:4c: 10:7c:17:4d:79:c5:1e:66:af:a4:6d:91:6d:74:d3:77:6c:c6: db:4a:f3:b2:c0:a2:d7:c5:8c:5d:53:70:c2:46:86:7d:9c:7a: ab:e8:03:e0:b6:f5:01:ce:72:aa:fa:bd:d5:35:37:8e:f9:24: d3:13:85:bc:d3:69:12:3f:38:09:dd:e3:87:21:73:8b:ff:46: d0:9d:93:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTA2MTcwNjA5NDFaFw0yNTA2MjQwNjA5NDFaMBgxFjAUBgNV BAMTDTY4NTEwNmE1LTE3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtPQU8zzTtwPV0tZnEmNfm5Ax0syq1ir3xRw1r/qP54vOfW3wiW7S4TSb7y8mW PyZupIhAkUvb5IEke9y3IvdL5WqlUgBciFfDwYanXMelqkB25X2YAiB6KXV1Q2DK uFMNpqeIh0Ik1NqV4VSFoVJu3jA//r39jzWqJI2BALr1fqLDsOS+41G2QpKsLiCN Q7JNgJ4H8KkDquIV5EX3VkThQankRp2CbC4SE+vBbujl/BC4N7JR9U/CQcicCKpQ OlH0GZfsCFlMsPXokB0g8hR3noPVVIooR6HDQyoFDFNahOOM7AyXG1k7DbdaEgNu qhMMc3HW1MOBwLNjMqMpvtuVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTTde2xMS eR/EEpSx21Yps3VFN0QwHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2fnWknpMNhhUBhsp5++hB1JED/Em4LemSoov7z7TSS8Y9Qnz5VDEZb 0XEgI5kMXoKRwM7ZuYvsYYVGcYvT1RKV6x9bZULxTNrPU9/uWPY987pop75AfqKg 1o9PBQs4M/RZGK3EZImHrJdzrPkuNivG6MTsdry/lPqM6E6tdnzdi+W3AJyO7+ma y4HwKm5lRFsffR16WNiUVAevd8xovQs5/ibiLfQjFB74RvN2LGZIm8RCTBB8F015 xR5mr6RtkW1003dsxttK87LAotfFjF1TcMJGhn2ceqvoA+C29QHOcqr6vdU1N475 JNMThbzTaRI/OAnd44chc4v/RtCdk/o= -----END CERTIFICATE-----Generated at Wed Jun 18 09:36:37 2025 by rpki-client