$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft File: gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json) Hash identifier: qU1dQmDCTWXim2UbFziP/tDRz4VEfQbf+rCEwx8lRS0= Subject key identifier: 31:A9:45:53:D3:9F:B2:1A:1F:0B:17:FC:8E:97:04:A3:5A:B6:59:5C Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft Manifest number: 05 Signing time: Thu 15 May 2025 07:28:49 +0000 Manifest this update: Thu 15 May 2025 07:28:49 +0000 Manifest next update: Thu 22 May 2025 07:28:49 +0000 Files and hashes: 1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: RwOC5B20aFZpxJyJJ/67ZytUUnvgYef5IIZAF6ODifA=) 2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: May 15 07:28:49 2025 GMT Not After : May 22 07:28:49 2025 GMT Subject: CN=682597b1-186f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:58:ae:5b:5d:31:ad:31:86:8b:c6:4d:ab: 6b:ed:d5:08:4e:16:21:91:ee:c4:46:f7:b1:15:75: 0c:9d:20:24:65:f4:4f:cd:30:7f:ba:74:54:b9:8b: 52:2a:37:bb:0b:78:65:40:90:08:aa:a2:11:5d:4c: dd:22:d9:21:f1:3f:91:f7:31:93:ef:22:cd:86:86: b7:bd:9f:7b:27:d9:0e:10:a3:83:5e:cc:5f:15:e5: 23:41:12:df:69:74:e1:cc:1a:f1:d1:6f:2a:7f:a0: 54:04:f7:05:a6:eb:6d:68:5d:cb:1d:0d:39:d4:21: ef:59:64:7d:e6:07:c6:41:31:ce:57:bf:2b:f0:52: e3:be:87:d7:1c:87:f0:77:a8:14:f4:0e:2b:c7:6b: 07:c0:27:f1:b3:58:02:92:17:fc:99:c3:27:29:f8: f0:81:41:c2:6a:78:ae:7d:1a:8c:6a:25:6e:6f:02: 5e:4b:55:dc:b4:6f:11:1a:95:f9:d6:8b:e8:4e:07: ee:83:dc:6e:de:79:61:b4:44:2b:ad:f7:e1:ee:c3: 1d:c1:f1:77:8c:71:6d:f0:87:da:d5:40:de:d2:85: d7:bd:19:0e:c0:7e:ec:aa:74:09:b3:f9:c5:68:93: 7d:88:cd:8c:a8:61:d9:84:db:82:1b:6e:52:e2:36: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:45:53:D3:9F:B2:1A:1F:0B:17:FC:8E:97:04:A3:5A:B6:59:5C X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:98:15:62:81:8e:3c:65:c2:fd:28:5d:c7:cb:01:22:3c:e5: 0e:c4:52:4c:21:d9:c2:2a:60:ba:3c:4a:cd:d4:fb:2b:33:77: 5b:8f:7a:ee:f7:63:09:79:af:76:91:53:46:83:45:2d:f7:56: 70:b6:53:3f:65:4f:35:92:6d:c2:ee:0c:70:8f:c8:fc:21:80: dc:7f:d4:19:c9:41:d2:be:2a:6c:6b:b0:02:c7:78:39:ee:3f: 5f:2a:59:3d:27:cf:19:bb:5e:a3:94:69:db:43:67:a3:68:b4: 7d:0b:4c:78:ac:63:14:9e:06:ba:99:c1:03:95:c8:00:8a:0d: ca:cc:d2:45:e1:db:8f:92:9b:8e:2e:cf:90:d7:6c:a9:f9:e0: 0b:64:c1:18:ec:55:49:a5:b7:ee:fb:c9:56:fd:1e:a1:8e:b7: a3:f1:aa:3d:8f:0e:a1:3e:d0:55:3b:8d:56:2e:ee:a5:a5:c9: 14:70:41:eb:62:63:d1:a2:76:ad:1c:7c:be:61:84:27:9f:da: 66:e1:31:a3:5b:c3:60:0d:3f:0e:40:8f:ca:8b:1b:a0:e8:c3: df:1b:b5:c3:8d:fd:31:bc:c0:e2:ec:a9:d6:c6:0b:ab:ee:09: 7c:7c:45:99:66:35:cd:e3:1f:31:ad:f8:f9:86:fb:08:94:e4: 2b:52:3f:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA1MTUwNzI4NDlaFw0yNTA1MjIwNzI4NDlaMBgxFjAUBgNV BAMTDTY4MjU5N2IxLTE4NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1ViuW10xrTGGi8ZNq2vt1QhOFiGR7sRG97EVdQydICRl9E/NMH+6dFS5i1Iq N7sLeGVAkAiqohFdTN0i2SHxP5H3MZPvIs2Ghre9n3sn2Q4Qo4NezF8V5SNBEt9p dOHMGvHRbyp/oFQE9wWm621oXcsdDTnUIe9ZZH3mB8ZBMc5XvyvwUuO+h9cch/B3 qBT0DivHawfAJ/GzWAKSF/yZwycp+PCBQcJqeK59GoxqJW5vAl5LVdy0bxEalfnW i+hOB+6D3G7eeWG0RCut9+Huwx3B8XeMcW3wh9rVQN7Shde9GQ7AfuyqdAmz+cVo k32IzYyoYdmE24IbblLiNmN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMalFU9Of shofCxf8jpcEo1q2WVwwHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCYFWKBjjxlwv0oXcfLASI85Q7EUkwh2cIqYLo8Ss3U+yszd1uPeu73 Ywl5r3aRU0aDRS33VnC2Uz9lTzWSbcLuDHCPyPwhgNx/1BnJQdK+KmxrsALHeDnu P18qWT0nzxm7XqOUadtDZ6NotH0LTHisYxSeBrqZwQOVyACKDcrM0kXh24+Sm44u z5DXbKn54AtkwRjsVUmlt+77yVb9HqGOt6Pxqj2PDqE+0FU7jVYu7qWlyRRwQeti Y9Gidq0cfL5hhCef2mbhMaNbw2ANPw5Aj8qLG6Dow98btcON/TG8wOLsqdbGC6vu CXx8RZlmNc3jHzGt+PmG+wiU5CtSP1o= -----END CERTIFICATE-----Generated at Fri May 16 20:55:32 2025 by rpki-client