$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: NZWnM5K63GO48PcvYuQ/E6liXTdIagFPOl0Q15F0H80= Subject key identifier: 9F:66:41:9E:3E:D5:14:4A:E0:45:00:AB:5D:D3:92:38:41:61:D1:6E Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 01D6 Signing time: Fri 13 Jun 2025 01:52:00 +0000 Manifest this update: Fri 13 Jun 2025 01:52:00 +0000 Manifest next update: Fri 20 Jun 2025 01:52:00 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: 0ogRpsXlmlC7Hyf4mIil+WamSPWabeJ9WpPbIv+8mJU=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Jun 13 01:52:00 2025 GMT Not After : Jun 20 01:52:00 2025 GMT Subject: CN=684b8440-6952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:e2:cf:38:45:94:cf:4e:6a:5e:90:fb:e1: cc:96:38:b1:56:1b:38:2b:76:37:45:67:de:80:75: bd:c5:27:6f:92:93:e7:40:6e:6b:99:6d:62:6d:88: f3:c8:7f:ef:04:fa:53:74:6d:92:16:53:19:37:b8: a9:51:54:3c:02:a3:4e:28:46:b7:5d:d8:2b:68:27: 7f:2e:73:32:9a:1e:23:7d:eb:f9:1b:8e:40:08:ac: 60:15:b9:51:f2:f0:4f:16:7a:19:42:88:f9:79:0d: 5d:00:4d:a1:96:4e:12:5c:66:76:17:26:27:8d:4f: 95:ff:60:3b:98:38:dd:00:59:29:91:e8:87:cf:82: e3:6a:02:c7:e7:ab:34:60:7c:78:fd:b5:44:ea:24: 12:c8:15:ba:0e:fa:b4:c2:a7:a3:f7:48:b2:9f:4f: 42:9a:b5:8e:39:ab:e1:02:45:ba:bb:0a:00:5d:17: 3a:82:af:5b:ae:df:7b:7b:2f:7e:a2:28:ab:b7:07: 75:58:58:8e:4a:8f:ab:cf:ab:b3:31:d7:a9:06:6f: 23:3e:2d:71:86:b0:ae:0f:95:5a:55:5e:6f:d4:ba: 7d:a8:3c:97:80:3e:3a:ed:0f:75:d2:d9:97:52:ab: 3a:d1:f8:87:c3:83:6b:3f:21:2b:8e:60:84:76:49: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:66:41:9E:3E:D5:14:4A:E0:45:00:AB:5D:D3:92:38:41:61:D1:6E X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0b:c3:0a:b7:ba:4e:27:87:fa:db:04:c2:5b:7c:62:1a:27: a2:a0:d3:4c:62:9c:db:6b:91:d1:c8:b6:97:df:0d:c9:d9:4b: d7:de:6d:b4:ac:8e:4e:12:a4:5e:c5:ba:4a:a1:e7:5c:43:e8: e7:f2:11:3d:6a:a1:ad:d6:cf:29:b7:19:e6:48:09:98:81:bb: 4d:52:6d:1a:1e:36:ac:ca:86:ff:44:79:81:96:89:36:ba:14: d5:75:26:2f:60:04:75:43:04:de:28:78:00:48:90:10:42:69: 57:16:59:ba:ef:aa:99:cc:9d:7e:2d:16:10:56:b8:bc:f2:1b: 9b:e0:db:5c:80:aa:71:d7:55:bd:9a:dd:97:51:42:f2:6c:0b: 27:fd:bc:da:9e:fd:be:02:8a:bf:5a:2b:9f:ea:4b:bc:7c:4f: ba:ea:40:6e:f6:b7:5c:3e:e9:f7:db:c1:25:7b:0e:13:f2:08: 23:a7:71:b9:9d:ed:75:3b:11:6b:c7:dd:7c:39:b2:56:de:d5: 35:65:5b:89:d2:66:99:c6:1c:c4:33:95:21:78:6d:6f:5d:87: bd:1d:54:fa:3e:01:79:39:ed:fa:71:20:3c:fa:b7:27:da:f2: 7e:ca:d6:e6:69:1a:cc:5f:f4:a4:38:ce:5d:52:46:f0:67:0d: b0:35:ce:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUwNjEzMDE1MjAwWhcNMjUwNjIwMDE1MjAwWjAYMRYwFAYD VQQDEw02ODRiODQ0MC02OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse3izzhFlM9Oal6Q++HMljixVhs4K3Y3RWfegHW9xSdvkpPnQG5rmW1ibYjz yH/vBPpTdG2SFlMZN7ipUVQ8AqNOKEa3XdgraCd/LnMymh4jfev5G45ACKxgFblR 8vBPFnoZQoj5eQ1dAE2hlk4SXGZ2FyYnjU+V/2A7mDjdAFkpkeiHz4LjagLH56s0 YHx4/bVE6iQSyBW6Dvq0wqej90iyn09CmrWOOavhAkW6uwoAXRc6gq9brt97ey9+ oiirtwd1WFiOSo+rz6uzMdepBm8jPi1xhrCuD5VaVV5v1Lp9qDyXgD467Q910tmX Uqs60fiHw4NrPyErjmCEdkmbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9mQZ4+ 1RRK4EUAq13TkjhBYdFuMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeC8MKt7pOJ4f62wTCW3xiGieioNNMYpzba5HRyLaX3w3J2UvX3m20 rI5OEqRexbpKoedcQ+jn8hE9aqGt1s8ptxnmSAmYgbtNUm0aHjasyob/RHmBlok2 uhTVdSYvYAR1QwTeKHgASJAQQmlXFlm676qZzJ1+LRYQVri88hub4NtcgKpx11W9 mt2XUULybAsn/bzanv2+Aoq/Wiuf6ku8fE+66kBu9rdcPun328Elew4T8ggjp3G5 ne11OxFrx918ObJW3tU1ZVuJ0maZxhzEM5UheG1vXYe9HVT6PgF5Oe36cSA8+rcn 2vJ+ytbmaRrMX/SkOM5dUkbwZw2wNc6f -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:39 2025 by rpki-client