$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft File: g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json) Hash identifier: Pu7Xczx+R9Y4KtkuPNJi3PyZELuyrOLXP/xwu4FRxxs= Subject key identifier: C2:DF:1E:39:2A:0D:03:4B:FC:7D:FB:1B:6E:BC:5B:86:9C:29:EF:8B Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft Manifest number: 043A Signing time: Thu 12 Jun 2025 23:55:46 +0000 Manifest this update: Thu 12 Jun 2025 23:55:45 +0000 Manifest next update: Thu 19 Jun 2025 23:55:45 +0000 Files and hashes: 1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: Z+fbw7djOt64lcQ+JZwQb3vYRnRJkUHHaUqj2AFgTAU=) 2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: bFGAY7gHkrvRuSHehHQRzFx9uBqTtWyMVWm0D4E7juI=) 3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2 Validity Not Before: Jun 12 23:55:45 2025 GMT Not After : Jun 19 23:55:45 2025 GMT Subject: CN=684b6901-7aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:99:84:51:df:08:7d:6d:74:5f:99:38:28: 10:68:b6:4f:f6:2e:cc:16:06:3c:67:18:f9:be:b0: ca:df:36:d6:f0:cd:57:34:7b:f0:a0:b6:02:34:fb: 88:33:51:b2:53:f7:1e:26:65:b5:2f:2f:2c:25:cf: e3:d2:ca:30:32:d6:f8:27:9c:3b:55:3b:e6:da:d2: 4e:8f:c6:84:0b:e2:2d:93:8c:53:f8:55:84:da:24: 08:3d:ea:5b:9f:a4:98:d0:61:a7:14:27:a4:4f:c9: 66:7e:0a:56:8e:52:bd:eb:87:43:3c:cf:11:b1:7b: 10:96:eb:d1:4d:68:0f:37:dd:38:57:d6:69:49:14: 03:db:67:49:aa:fe:2e:cc:88:6f:ae:a4:d2:68:fd: c5:fa:e3:d0:7d:12:a6:c2:1c:5b:e1:8b:07:0a:08: 10:f3:40:fe:47:36:a6:e6:4e:da:89:3e:a8:28:fe: 5f:92:48:9d:50:d3:f0:db:bc:45:73:3d:f8:f5:2c: 35:f7:06:24:cf:68:db:19:ac:0b:70:14:b5:2b:13: 48:f8:54:d6:eb:9e:a0:ae:cd:c2:aa:10:25:18:c7: 9c:4b:37:59:b5:1e:8b:4f:8a:bd:86:c7:4b:75:56: 76:37:37:ba:b8:a0:1b:81:fb:88:81:dc:83:d0:86: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:1E:39:2A:0D:03:4B:FC:7D:FB:1B:6E:BC:5B:86:9C:29:EF:8B X509v3 Authority Key Identifier: keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:31:0e:dc:79:84:c4:57:c0:ac:2e:95:04:4b:4b:5c:cd:fd: 4b:cb:00:c7:53:5c:96:94:cc:53:a2:be:a1:0d:4d:ea:4a:c2: 6d:68:57:fd:22:3a:df:cc:32:ff:b5:5f:6d:bc:22:89:ec:4f: bf:b1:9f:4b:b7:f8:cc:a3:ca:b2:08:66:0f:f6:25:25:f6:68: 13:f5:66:da:85:20:12:e1:cf:ac:26:7d:a5:46:70:46:cf:29: 54:18:e1:ba:ca:69:38:1c:64:fe:22:ef:f7:78:e9:24:b5:64: 61:4d:7e:fd:a3:26:43:8f:3f:e4:2b:d2:c1:86:69:81:c3:00: 87:c1:c1:36:09:1d:99:4f:e0:2b:6c:bd:70:76:60:02:27:04: b0:7a:11:f0:c4:57:1f:9e:cf:29:72:b7:08:a9:84:21:05:72: 1f:83:2c:55:fb:09:3f:6f:86:26:74:97:a5:ae:e4:e8:f8:78: 92:71:86:ec:e8:58:e2:ba:5e:56:09:e8:7e:d2:76:d7:12:58: 4b:7b:17:c7:92:a2:8d:96:93:df:f4:c7:35:12:6d:85:66:a5: 6d:fa:37:31:de:17:29:5a:e0:79:59:c7:65:ce:29:23:c1:3e: 92:c7:b1:11:1b:be:23:27:27:83:23:89:3a:b8:57:0b:0b:05: 60:75:b1:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2 NTQyRTgyRTIwHhcNMjUwNjEyMjM1NTQ1WhcNMjUwNjE5MjM1NTQ1WjAYMRYwFAYD VQQDEw02ODRiNjkwMS03YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb+ZhFHfCH1tdF+ZOCgQaLZP9i7MFgY8Zxj5vrDK3zbW8M1XNHvwoLYCNPuI M1GyU/ceJmW1Ly8sJc/j0sowMtb4J5w7VTvm2tJOj8aEC+Itk4xT+FWE2iQIPepb n6SY0GGnFCekT8lmfgpWjlK964dDPM8RsXsQluvRTWgPN904V9ZpSRQD22dJqv4u zIhvrqTSaP3F+uPQfRKmwhxb4YsHCggQ80D+Rzam5k7aiT6oKP5fkkidUNPw27xF cz349Sw19wYkz2jbGawLcBS1KxNI+FTW656grs3CqhAlGMecSzdZtR6LT4q9hsdL dVZ2Nze6uKAbgfuIgdyD0IaemQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLfHjkq DQNL/H37G268W4acKe+LMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QzRC8yMzNDMEI0NjYzQkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBI UW1wWENnS1FINDVsUXVndUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3MQ7ceYTEV8CsLpUES0tczf1LywDHU1yWlMxTor6hDU3qSsJtaFf9 IjrfzDL/tV9tvCKJ7E+/sZ9Lt/jMo8qyCGYP9iUl9mgT9WbahSAS4c+sJn2lRnBG zylUGOG6ymk4HGT+Iu/3eOkktWRhTX79oyZDjz/kK9LBhmmBwwCHwcE2CR2ZT+Ar bL1wdmACJwSwehHwxFcfns8pcrcIqYQhBXIfgyxV+wk/b4YmdJelruTo+HiScYbs 6Fjiul5WCeh+0nbXElhLexfHkqKNlpPf9Mc1Em2FZqVt+jcx3hcpWuB5Wcdlzikj wT6Sx7ERG74jJyeDI4k6uFcLCwVgdbGc -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:28 2025 by rpki-client