$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: WAwKMj7NpDSzRorKIFZWqdCbFtjri2CstwUC9MkX+k0= Subject key identifier: 5D:9E:4E:4F:BD:0A:4F:B3:43:76:70:9C:F5:CA:B6:D8:C3:CB:20:F7 Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 0B Signing time: Sun 11 May 2025 06:50:34 +0000 Manifest this update: Sun 11 May 2025 06:50:34 +0000 Manifest next update: Sun 18 May 2025 06:50:34 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: kd0wzcAAEHNSQ5m++n2jwAoMrvortPv6FiACVaitP98=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: May 11 06:50:34 2025 GMT Not After : May 18 06:50:34 2025 GMT Subject: CN=682048ba-029f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:b7:32:11:a5:3a:ca:22:49:a0:9f:06:be: 96:80:9b:85:ce:0f:15:b1:e5:01:bf:33:7a:d0:94: e3:e8:d4:c7:aa:e5:e1:57:77:79:cf:94:43:a1:d5: 1c:3a:9d:1b:6a:a4:0b:c0:6b:ce:56:19:d9:0c:34: 3a:ff:ad:72:ee:09:23:e6:d9:61:77:83:dd:b6:97: 44:14:c5:d9:3f:d0:99:c1:35:39:77:a0:19:b0:18: 88:67:d5:2c:9d:25:49:cb:a2:88:60:57:17:88:e3: 61:97:8e:a6:28:4b:bf:95:98:a2:96:e6:82:94:03: 71:1f:21:01:15:4c:b9:5f:68:c3:a2:a0:ce:61:db: 0d:25:08:22:cb:e2:b6:a2:d4:9d:b9:e6:2b:3f:1c: b4:c1:ac:1e:de:a4:3d:05:96:d9:ca:a1:9c:2c:13: 87:5c:38:b2:e6:3f:39:62:c6:d1:9a:e1:e1:4b:84: 0c:30:ed:a4:55:b2:10:85:23:87:18:2a:26:9b:03: 80:67:3f:13:3c:e4:d3:11:54:b8:a7:4e:12:52:4c: a2:cc:04:3a:c0:02:95:e5:30:04:5d:c2:f3:72:9c: 90:e2:3c:23:53:cc:dc:4e:0a:41:75:8f:b6:ba:0b: a2:45:c4:c2:a5:18:5c:9c:7a:d9:19:48:3f:62:33: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9E:4E:4F:BD:0A:4F:B3:43:76:70:9C:F5:CA:B6:D8:C3:CB:20:F7 X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:40:87:60:be:1c:2b:f9:7d:eb:d7:91:2d:15:c4:7c:c2: 44:89:1d:c9:ba:85:33:c3:68:49:3d:eb:13:7a:cd:d5:77:d7: fb:17:c6:37:50:2c:74:8b:98:a3:b3:d4:e0:e1:46:ac:54:46: 74:fd:74:7d:08:90:c8:75:8e:92:49:af:65:39:e0:c6:5c:22: ba:eb:f9:89:66:3c:59:84:f4:75:c3:97:2f:49:e8:3a:6b:7a: 9f:44:e4:a0:6a:68:16:b6:7a:ef:23:c1:23:34:18:89:6a:08: 1c:bc:6d:8c:6a:9e:5e:df:fa:87:e4:3a:6e:de:f0:60:a5:37: 5a:9e:18:07:d4:3c:6a:b5:eb:15:27:a0:b7:81:0a:7d:89:40: 0a:70:9e:b3:ab:ac:85:28:59:c8:73:06:7d:a7:3b:b9:e4:28: 8a:2e:3b:d5:c8:68:c7:20:33:6f:a0:fe:9d:57:14:3f:41:71: c8:8f:77:85:d8:bb:f6:81:b6:1a:52:ff:96:4e:fa:b1:e1:0a: f4:8b:08:83:37:09:3d:45:f8:0f:e7:f2:cb:cf:1b:33:fe:5d: bd:ca:c3:c2:11:ea:b3:9f:0d:46:35:b8:d8:05:90:56:04:7d: 4b:99:68:cd:0d:07:30:8e:1e:bd:de:e9:93:12:21:53:16:c4: ea:6f:01:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTA1MTEwNjUwMzRaFw0yNTA1MTgwNjUwMzRaMBgxFjAUBgNV BAMTDTY4MjA0OGJhLTAyOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCubrcyEaU6yiJJoJ8GvpaAm4XODxWx5QG/M3rQlOPo1Meq5eFXd3nPlEOh1Rw6 nRtqpAvAa85WGdkMNDr/rXLuCSPm2WF3g922l0QUxdk/0JnBNTl3oBmwGIhn1Syd JUnLoohgVxeI42GXjqYoS7+VmKKW5oKUA3EfIQEVTLlfaMOioM5h2w0lCCLL4rai 1J255is/HLTBrB7epD0FltnKoZwsE4dcOLLmPzlixtGa4eFLhAww7aRVshCFI4cY KiabA4BnPxM85NMRVLinThJSTKLMBDrAApXlMARdwvNynJDiPCNTzNxOCkF1j7a6 C6JFxMKlGFycetkZSD9iM7n1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXZ5OT70K T7NDdnCc9cq22MPLIPcwHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGl/QIdgvhwr+X3r15EtFcR8wkSJHcm6hTPDaEk96xN6zdV31/sXxjdQ LHSLmKOz1ODhRqxURnT9dH0IkMh1jpJJr2U54MZcIrrr+YlmPFmE9HXDly9J6Dpr ep9E5KBqaBa2eu8jwSM0GIlqCBy8bYxqnl7f+ofkOm7e8GClN1qeGAfUPGq16xUn oLeBCn2JQApwnrOrrIUoWchzBn2nO7nkKIouO9XIaMcgM2+g/p1XFD9BcciPd4XY u/aBthpS/5ZO+rHhCvSLCIM3CT1F+A/n8svPGzP+Xb3Kw8IR6rOfDUY1uNgFkFYE fUuZaM0NBzCOHr3e6ZMSIVMWxOpvAfQ= -----END CERTIFICATE-----Generated at Mon May 12 19:55:57 2025 by rpki-client