$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: Tdf+5fi87/1MEjuVNh6Jl9wYZGeGJkPiBNn7eBL5PbI= Subject key identifier: C1:28:88:3F:95:A6:FB:91:84:D1:1A:10:CD:A6:9A:27:73:C4:E3:29 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 113D Signing time: Thu 12 Jun 2025 17:11:12 +0000 Manifest this update: Thu 12 Jun 2025 17:11:12 +0000 Manifest next update: Thu 19 Jun 2025 17:11:12 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 1K4hab+78xjMeTfjAI9HTqqRjYjPIwc3YHUX9WRSryA=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Jun 12 17:11:12 2025 GMT Not After : Jun 19 17:11:12 2025 GMT Subject: CN=684b0a30-92fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:71:b0:5b:a0:ad:4f:2e:ed:4c:5b:b1:3b: 2d:e9:f4:2f:bf:db:24:27:10:a4:21:10:e2:01:57: 13:39:0b:de:cf:f1:78:e2:c6:7c:1c:49:2c:02:52: 2a:38:c6:bf:12:07:28:22:70:c8:14:04:3c:de:21: 9d:ef:32:dd:3a:53:e1:16:ad:c9:d6:f2:a4:29:0e: f2:69:1e:40:b1:9e:ff:2d:96:6d:4a:0b:b0:03:2c: 92:23:b5:26:3c:5a:e3:7a:12:78:a0:94:a3:15:1a: 0a:fa:75:03:3e:23:ab:a4:67:37:ab:83:b7:20:3f: 70:ab:30:f0:1f:71:09:f2:89:5b:9a:a7:3d:18:4a: 9c:1b:73:d9:18:49:78:8a:f9:df:91:f3:1e:3e:f1: 0a:9a:df:0a:b1:02:dc:fe:02:53:5c:64:f0:d2:20: 38:3b:06:cf:aa:93:bd:7d:d8:b7:cb:ca:7a:5b:8b: a9:40:f8:6a:fa:df:09:28:60:99:5d:77:f7:40:8f: 63:77:25:14:45:00:90:b2:a6:92:24:3a:56:c1:0d: 6f:ee:ab:b7:70:14:8a:75:94:a9:a8:30:4d:2b:fb: a7:9b:12:f9:7a:c3:c3:d0:ed:23:e1:28:5f:de:00: 4d:07:55:a9:8c:ba:c2:db:6d:80:49:24:9d:5e:c3: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:88:3F:95:A6:FB:91:84:D1:1A:10:CD:A6:9A:27:73:C4:E3:29 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f7:65:27:da:41:67:be:8c:55:e6:2d:79:af:83:f0:7e:d1: 0c:74:3c:a2:83:99:96:9c:1c:d1:d8:29:9e:d9:2d:c6:b1:fc: 12:19:cb:68:f1:4e:30:b6:da:36:2f:a7:28:ca:2d:d0:7a:12: 0a:c0:79:74:4d:1b:47:a1:6f:af:3c:e9:5c:76:af:31:1d:ed: 66:95:d6:ec:40:81:c4:48:f7:bd:1b:a3:30:ad:62:99:6e:eb: bc:48:aa:fd:4c:96:b7:8d:bd:d9:8c:a4:9b:ac:b6:56:13:02: d0:07:b0:e7:e8:84:e3:26:2a:2b:7a:ff:55:6a:d3:b7:c9:1f: ba:24:44:88:3d:31:3d:52:b3:6e:b5:e1:11:f9:20:74:e1:76: 47:97:89:ab:a7:5f:1c:71:b1:ff:7a:a4:a0:84:f5:40:7c:a1: c9:3d:f2:9c:5d:ba:36:f6:7b:ce:37:2d:fd:ba:81:92:48:ca: 99:25:59:97:9e:1d:8d:17:ef:f5:f0:76:43:09:6d:a9:1b:26: e0:f7:ab:cb:f6:60:dc:50:2a:df:1b:51:c1:c2:b0:98:dc:d1: 7c:c5:f7:6d:8e:0c:5e:f0:d8:d0:72:50:cd:04:33:14:43:0f: 12:60:b5:54:1c:6d:5c:2c:e6:74:89:9b:4f:11:a7:51:cb:33: 08:17:df:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUwNjEyMTcxMTEyWhcNMjUwNjE5MTcxMTEyWjAYMRYwFAYD VQQDEw02ODRiMGEzMC05MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRRxsFugrU8u7UxbsTst6fQvv9skJxCkIRDiAVcTOQvez/F44sZ8HEksAlIq OMa/EgcoInDIFAQ83iGd7zLdOlPhFq3J1vKkKQ7yaR5AsZ7/LZZtSguwAyySI7Um PFrjehJ4oJSjFRoK+nUDPiOrpGc3q4O3ID9wqzDwH3EJ8olbmqc9GEqcG3PZGEl4 ivnfkfMePvEKmt8KsQLc/gJTXGTw0iA4OwbPqpO9fdi3y8p6W4upQPhq+t8JKGCZ XXf3QI9jdyUURQCQsqaSJDpWwQ1v7qu3cBSKdZSpqDBNK/unmxL5esPD0O0j4Shf 3gBNB1WpjLrC222ASSSdXsNQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEoiD+V pvuRhNEaEM2mmidzxOMpMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA592Un2kFnvoxV5i15r4PwftEMdDyig5mWnBzR2Cme2S3GsfwSGcto 8U4wtto2L6coyi3QehIKwHl0TRtHoW+vPOlcdq8xHe1mldbsQIHESPe9G6MwrWKZ buu8SKr9TJa3jb3ZjKSbrLZWEwLQB7Dn6ITjJiorev9VatO3yR+6JESIPTE9UrNu teER+SB04XZHl4mrp18ccbH/eqSghPVAfKHJPfKcXbo29nvONy39uoGSSMqZJVmX nh2NF+/18HZDCW2pGybg96vL9mDcUCrfG1HBwrCY3NF8xfdtjgxe8NjQclDNBDMU Qw8SYLVUHG1cLOZ0iZtPEadRyzMIF9+d -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:22 2025 by rpki-client