$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: 8klXEZLwn3dy0XjIukkur4ITsAVEXp1eW0kcV3AlagU= Subject key identifier: 5C:58:E4:F7:B0:62:EE:D2:F2:BC:93:F5:0A:AB:DE:9D:5A:FA:8E:58 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1836 Signing time: Mon 12 May 2025 16:27:11 +0000 Manifest this update: Mon 12 May 2025 16:27:10 +0000 Manifest next update: Mon 19 May 2025 16:27:10 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: IC2Lq3Za7a0TfjTydsp39OCbXTg8oG9NHBPSyc6EYlM=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6224 (0x1850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: May 12 16:27:10 2025 GMT Not After : May 19 16:27:10 2025 GMT Subject: CN=6822215e-2f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:f7:5f:24:ec:cc:21:ce:75:36:4f:a8:0e: 4f:48:4a:1d:92:87:d7:5d:eb:2b:e5:76:89:eb:17: f7:d4:42:20:9e:d8:f4:34:f7:f2:0a:ea:6c:11:c7: d9:2f:82:01:8a:36:da:1a:88:c6:e6:ca:c3:35:6d: 8c:72:c3:22:98:96:2b:10:39:04:0b:a9:39:67:ce: c8:4d:07:11:15:56:1c:23:1d:2a:24:7c:3d:c9:37: f1:b2:78:47:52:36:b0:8c:eb:02:85:aa:8d:d0:28: e2:f7:b3:a1:77:37:15:bb:7c:c9:21:8d:b8:6e:8a: 8f:48:48:f0:57:b4:33:28:6a:1f:b9:dc:b8:f3:54: 3f:e4:8f:47:74:d1:14:f3:70:06:e2:08:98:81:87: 24:9d:11:84:51:41:07:cf:d3:0c:96:84:38:12:64: 15:36:f5:94:0c:74:7f:a7:8f:1b:03:18:2a:a0:ed: c2:6f:be:af:06:a2:e1:3f:95:15:af:6d:87:c6:e3: 6c:09:06:55:a5:47:04:54:b3:9d:27:b8:2f:53:80: 3e:b8:05:4a:b8:f3:fe:a4:3e:4c:ee:1c:da:6b:f2: ee:c3:87:a0:c3:8c:85:bc:97:c8:78:d1:1d:35:28: ba:7c:5d:28:85:4b:5d:5b:23:fd:c2:bd:cf:9f:55: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:58:E4:F7:B0:62:EE:D2:F2:BC:93:F5:0A:AB:DE:9D:5A:FA:8E:58 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:73:18:dd:80:fb:b3:22:b8:23:28:d9:45:8e:7e:6e:95:7e: 03:e1:66:19:cb:c9:38:55:81:14:1d:a8:73:f9:e5:9b:c9:56: 67:46:86:be:a8:c6:2d:60:61:20:8a:3d:16:f5:76:c4:55:6c: ff:eb:d5:a1:a2:1b:be:dc:f6:e9:05:70:cc:44:57:89:26:91: 73:77:25:aa:50:c6:4f:89:9b:cd:62:72:f3:ab:dd:74:08:41: be:81:bb:5f:45:b5:bd:1a:7c:2a:42:2a:b4:3d:ab:b1:76:22: f4:a7:f5:be:f6:18:a7:a3:2f:59:db:e2:2d:c7:bd:0b:67:9e: aa:86:cb:dc:7f:51:14:83:30:b2:64:bc:47:4a:e9:7f:a9:87: 77:a5:96:52:22:4a:a6:9b:d0:49:3f:e4:7b:42:1c:ac:f6:c6: 8b:4c:57:c1:e8:58:d5:87:54:b8:b8:b6:8b:1d:31:6d:7f:a9: b7:b5:98:ea:2c:27:cd:7d:ea:8a:b1:fa:bf:77:e8:c9:d4:69: a4:14:fc:cd:95:52:4a:0b:d7:91:c0:db:68:bd:ef:b1:6a:45: a2:61:b2:06:fe:5a:96:8b:27:8a:60:9f:ab:69:b1:26:6b:bc: ce:25:fa:0b:89:87:12:75:61:40:cf:7e:d9:cd:09:d6:5c:9d: 5f:b3:16:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUwNTEyMTYyNzEwWhcNMjUwNTE5MTYyNzEwWjAYMRYwFAYD VQQDEw02ODIyMjE1ZS0yZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzb3XyTszCHOdTZPqA5PSEodkofXXesr5XaJ6xf31EIgntj0NPfyCupsEcfZ L4IBijbaGojG5srDNW2McsMimJYrEDkEC6k5Z87ITQcRFVYcIx0qJHw9yTfxsnhH UjawjOsChaqN0Cji97OhdzcVu3zJIY24boqPSEjwV7QzKGofudy481Q/5I9HdNEU 83AG4giYgYcknRGEUUEHz9MMloQ4EmQVNvWUDHR/p48bAxgqoO3Cb76vBqLhP5UV r22HxuNsCQZVpUcEVLOdJ7gvU4A+uAVKuPP+pD5M7hzaa/Luw4egw4yFvJfIeNEd NSi6fF0ohUtdWyP9wr3Pn1UtewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxY5Pew Yu7S8ryT9Qqr3p1a+o5YMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEcxjdgPuzIrgjKNlFjn5ulX4D4WYZy8k4VYEUHahz+eWbyVZnRoa+ qMYtYGEgij0W9XbEVWz/69Whohu+3PbpBXDMRFeJJpFzdyWqUMZPiZvNYnLzq910 CEG+gbtfRbW9GnwqQiq0PauxdiL0p/W+9hinoy9Z2+Itx70LZ56qhsvcf1EUgzCy ZLxHSul/qYd3pZZSIkqmm9BJP+R7Qhys9saLTFfB6FjVh1S4uLaLHTFtf6m3tZjq LCfNfeqKsfq/d+jJ1GmkFPzNlVJKC9eRwNtove+xakWiYbIG/lqWiyeKYJ+rabEm a7zOJfoLiYcSdWFAz37ZzQnWXJ1fsxZs -----END CERTIFICATE-----Generated at Wed May 14 16:02:44 2025 by rpki-client