$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: 7UbDRo3hzQcXji6fB5jTeUeutsrEssqSbdS+XwG1f4M= Subject key identifier: F2:3B:7A:91:F6:B3:D2:DD:83:D7:BA:77:A1:D6:44:C3:5E:9D:2E:6F Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B0C Signing time: Thu 24 Apr 2025 19:09:56 +0000 Manifest this update: Thu 24 Apr 2025 19:09:55 +0000 Manifest next update: Thu 01 May 2025 19:09:55 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: 99KxzjjL4mqFAeXS6xpCcMbmvBudONGl9dSoD0aygew=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Apr 24 19:09:55 2025 GMT Not After : May 1 19:09:55 2025 GMT Subject: CN=680a8c84-828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:62:5a:23:0a:e6:d5:81:99:d9:43:c5:13: d1:af:1a:d3:76:ce:ee:d2:bf:b0:e4:41:f6:cf:a6: 5c:ba:da:59:f2:8b:15:5e:a3:9e:a2:a4:64:03:06: 62:e8:6f:ca:62:1f:ac:2c:2a:23:80:dc:55:b6:d2: 88:31:df:88:dd:21:0f:fa:2d:08:08:4f:19:79:70: 58:db:99:ce:13:7c:02:1a:82:17:20:51:12:5d:05: dd:6d:8f:86:f4:cc:f3:2d:3e:a4:a4:a3:2a:ea:30: a7:f7:ee:8d:cf:e7:3e:20:03:ef:78:cc:ab:df:de: 80:f0:16:68:53:3f:85:43:e8:cc:ef:78:07:ee:a2: 8b:37:08:5d:e6:da:1a:b4:d6:17:4a:fc:23:5e:d2: 90:8a:23:f7:d1:0c:0c:d0:58:a5:5b:31:64:12:1a: 71:0c:1b:1e:62:5c:7f:32:08:6b:6d:0a:26:19:66: a9:5f:02:73:c0:64:54:a2:6c:5a:18:bc:8e:27:18: b1:67:bf:4a:11:54:71:ad:89:c0:e8:fa:75:82:cc: 60:3e:0a:7a:46:e3:f2:2d:a4:45:6c:6f:3a:1e:cf: ac:92:b8:08:d0:dc:aa:bb:fb:29:4d:56:f1:2c:6c: 5c:c4:24:0a:ac:41:d7:6a:84:d5:38:d7:e1:25:7c: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:7A:91:F6:B3:D2:DD:83:D7:BA:77:A1:D6:44:C3:5E:9D:2E:6F X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ec:29:c0:7a:80:fe:e6:dc:91:9d:c4:cd:93:f8:4f:48:86: b3:f1:19:2e:ba:35:ae:fe:01:8d:1c:08:f4:20:17:00:94:57: f3:24:9c:3b:3f:98:5e:28:3c:a3:c8:66:f4:09:fc:f8:05:c7: 59:70:4d:72:9b:1f:ed:7a:80:d1:97:bc:f5:b8:cb:27:1c:b7: a9:69:a1:f9:6d:63:87:70:00:24:d6:de:c2:c8:94:8a:76:f6: f6:6f:2a:d1:cb:d6:6d:6f:b2:c0:43:c5:8b:09:b3:c5:fc:08: 11:0e:30:bc:7f:76:19:20:df:09:53:79:75:16:4f:4a:db:54: d4:a5:96:87:51:68:ad:3e:b5:e5:e1:8f:a1:64:e8:c9:87:7e: e2:cd:a0:d6:0f:5f:17:6a:7b:41:95:83:46:d1:67:9e:95:65: 30:fd:d4:27:46:5a:81:05:4c:f8:21:a8:5c:d0:80:ca:60:ca: 59:6c:4d:9a:67:69:f8:39:ae:4c:81:43:9c:51:f9:f6:9b:f8: 22:3b:7c:67:ee:37:d6:3a:8e:55:92:7c:73:2d:fa:d1:8d:f0: 18:dd:29:e8:40:03:33:15:af:83:cd:ac:f2:69:8c:3d:25:d4: a7:00:a9:3b:af:89:21:59:ec:d4:a6:73:98:53:01:f1:fe:ad: 70:41:88:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwNDI0MTkwOTU1WhcNMjUwNTAxMTkwOTU1WjAYMRYwFAYD VQQDEw02ODBhOGM4NC04MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOFiWiMK5tWBmdlDxRPRrxrTds7u0r+w5EH2z6ZcutpZ8osVXqOeoqRkAwZi 6G/KYh+sLCojgNxVttKIMd+I3SEP+i0ICE8ZeXBY25nOE3wCGoIXIFESXQXdbY+G 9MzzLT6kpKMq6jCn9+6Nz+c+IAPveMyr396A8BZoUz+FQ+jM73gH7qKLNwhd5toa tNYXSvwjXtKQiiP30QwM0FilWzFkEhpxDBseYlx/MghrbQomGWapXwJzwGRUomxa GLyOJxixZ79KEVRxrYnA6Pp1gsxgPgp6RuPyLaRFbG86Hs+skrgI0Nyqu/spTVbx LGxcxCQKrEHXaoTVONfhJXxXowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI7epH2 s9Ldg9e6d6HWRMNenS5vMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs7CnAeoD+5tyRncTNk/hPSIaz8RkuujWu/gGNHAj0IBcAlFfzJJw7 P5heKDyjyGb0Cfz4BcdZcE1ymx/teoDRl7z1uMsnHLepaaH5bWOHcAAk1t7CyJSK dvb2byrRy9Ztb7LAQ8WLCbPF/AgRDjC8f3YZIN8JU3l1Fk9K21TUpZaHUWitPrXl 4Y+hZOjJh37izaDWD18XantBlYNG0WeelWUw/dQnRlqBBUz4Iahc0IDKYMpZbE2a Z2n4Oa5MgUOcUfn2m/giO3xn7jfWOo5VknxzLfrRjfAY3SnoQAMzFa+DzazyaYw9 JdSnAKk7r4khWezUpnOYUwHx/q1wQYgi -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:28 2025 by rpki-client