$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: L9rplVM8vLCFvhVIeXHM9oTWAgdRms2tA8D3bDl2AoU= Subject key identifier: 9C:8C:89:24:5A:35:52:EE:96:96:DB:C3:48:29:88:CC:42:7F:9F:ED Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0CFF Signing time: Wed 14 May 2025 18:12:31 +0000 Manifest this update: Wed 14 May 2025 18:12:30 +0000 Manifest next update: Wed 21 May 2025 18:12:30 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: aD1XXNKjMsGEEtYqqrpHR1op7x7lExLtUufBXKCsuBU=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: A3euC+JMbFaWVx5aIIYMhJy2o8x3eQCdnzPijIO/OPI=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: /lCYyr/ggNz4m2hSHph8iFrUwvAmVOifZgcsV4MIeXY=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: dYlMryTZgDYlMwbzeqzaAmjgFNBL4klqki3/QbfzqsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: May 14 18:12:30 2025 GMT Not After : May 21 18:12:30 2025 GMT Subject: CN=6824dd0e-0a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:ae:cb:ab:a0:ae:a7:dc:5b:13:9c:2c:c2: a7:bc:c6:e2:5d:d6:25:26:7b:5b:07:5a:8c:9e:33: 9b:0b:fb:df:06:ed:d7:1f:35:c5:36:00:39:27:a5: b3:0b:91:dd:11:5c:a9:ba:37:41:08:be:90:af:f5: 93:5b:9c:fb:91:68:21:22:3f:8b:bd:b2:51:d6:e6: 76:3c:16:84:e8:a8:ba:49:5b:8a:30:25:f2:1a:b1: 7c:69:80:d5:47:3d:b7:ac:42:c2:02:0d:0e:0a:39: f1:6a:20:1b:fa:90:0f:12:cd:af:11:ae:72:2d:7d: 04:56:e3:14:d3:50:94:ed:20:d6:d2:68:9b:07:7c: 7f:d6:3e:47:d0:2c:fe:df:ba:e4:e6:a9:0e:2b:fd: dd:b9:59:18:26:3a:6e:c0:78:6e:88:ac:f0:f2:f2: 73:39:d2:de:54:c2:54:be:c6:e3:23:12:16:fc:52: 6e:c1:c6:82:72:ae:40:9c:22:d8:d1:22:36:4b:04: 45:f8:5f:96:2c:56:1e:08:aa:16:8d:eb:c3:da:48: a6:aa:8c:8e:2e:eb:90:f8:72:3f:22:2c:69:f9:49: e5:2b:ef:23:2c:7d:1c:f0:e1:92:e0:09:19:aa:74: d8:3f:aa:38:de:e9:3b:ee:6b:89:e1:2f:47:2c:ba: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:89:24:5A:35:52:EE:96:96:DB:C3:48:29:88:CC:42:7F:9F:ED X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2d:61:4d:fe:b8:ee:28:0b:aa:97:97:7e:8a:23:77:1e:16: 27:2f:96:e8:1e:f4:af:34:06:a4:ab:b3:2b:e9:1a:91:8f:da: ce:55:e5:6b:d0:56:4b:cd:c4:63:4d:fa:e1:73:97:ee:1a:ff: 38:d2:67:a1:54:ac:c5:26:ab:b3:48:b2:b6:7d:88:c0:f1:9d: 1b:2b:07:b8:e7:bf:c4:39:a8:37:43:d9:03:8b:49:f0:b8:56: 73:d8:8b:b8:7f:79:cc:35:06:02:47:b6:c8:a1:36:e8:07:d7: c6:dd:d3:e6:d7:cd:0a:d7:b2:44:be:48:ef:db:7d:ac:f0:b6: a3:7f:ec:c2:eb:4b:5b:fb:01:3e:56:b1:f1:d0:98:4c:07:1d: 85:e9:3a:13:f1:3d:a1:02:80:81:f2:8e:8d:b4:48:f9:56:4b: f9:21:a7:bc:b9:52:e2:b0:7d:5d:2e:ae:70:f5:af:cd:f6:93: 56:ce:43:03:7b:eb:b8:60:7e:64:31:1b:1d:43:9e:67:69:3d: 3f:02:05:55:6e:d2:03:46:79:ad:fe:71:76:a2:d0:58:8e:85: e4:00:3b:e8:39:d8:2e:c7:e3:00:bd:46:f2:32:2b:d0:38:49: 95:cb:0a:6f:28:4f:da:a1:9d:c7:74:1a:e0:10:08:ec:29:79: 22:d6:99:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNTE0MTgxMjMwWhcNMjUwNTIxMTgxMjMwWjAYMRYwFAYD VQQDEw02ODI0ZGQwZS0wYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6iuy6ugrqfcWxOcLMKnvMbiXdYlJntbB1qMnjObC/vfBu3XHzXFNgA5J6Wz C5HdEVypujdBCL6Qr/WTW5z7kWghIj+LvbJR1uZ2PBaE6Ki6SVuKMCXyGrF8aYDV Rz23rELCAg0OCjnxaiAb+pAPEs2vEa5yLX0EVuMU01CU7SDW0mibB3x/1j5H0Cz+ 37rk5qkOK/3duVkYJjpuwHhuiKzw8vJzOdLeVMJUvsbjIxIW/FJuwcaCcq5AnCLY 0SI2SwRF+F+WLFYeCKoWjevD2kimqoyOLuuQ+HI/Iixp+UnlK+8jLH0c8OGS4AkZ qnTYP6o43uk77muJ4S9HLLoEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyMiSRa NVLulpbbw0gpiMxCf5/tMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LWFN/rjuKAuql5d+iiN3HhYnL5boHvSvNAakq7Mr6RqRj9rOVeVr 0FZLzcRjTfrhc5fuGv840mehVKzFJquzSLK2fYjA8Z0bKwe457/EOag3Q9kDi0nw uFZz2Iu4f3nMNQYCR7bIoTboB9fG3dPm180K17JEvkjv232s8Lajf+zC60tb+wE+ VrHx0JhMBx2F6ToT8T2hAoCB8o6NtEj5Vkv5Iae8uVLisH1dLq5w9a/N9pNWzkMD e+u4YH5kMRsdQ55naT0/AgVVbtIDRnmt/nF2otBYjoXkADvoOdgux+MAvUbyMivQ OEmVywpvKE/aoZ3HdBrgEAjsKXki1pkZ -----END CERTIFICATE-----Generated at Fri May 16 12:01:09 2025 by rpki-client