$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: fl74G/MIGCIj90Abx7lnc0DQ4RwvLGTWVk5+SMkETN8= Subject key identifier: 5C:B5:F0:2B:A3:82:5B:A3:53:D3:FA:1F:01:E1:DA:51:25:67:C9:E7 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 034A Signing time: Thu 03 Jul 2025 01:23:01 +0000 Manifest this update: Thu 03 Jul 2025 01:23:01 +0000 Manifest next update: Thu 10 Jul 2025 01:23:01 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: wH+Y/UCqq66U9Vvdg+tUeWzyi4IlCiM6CVUuHElghuo=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Jul 3 01:23:01 2025 GMT Not After : Jul 10 01:23:01 2025 GMT Subject: CN=6865db75-3dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:43:5b:94:8e:d3:3d:ee:af:6d:c7:9d:4d:0a: 53:91:8e:f3:e5:41:fc:72:3e:79:e9:91:f5:5f:d2: 4b:0a:12:58:a0:30:a4:d2:0a:49:f1:2c:16:f8:00: 0e:59:31:c0:bf:51:89:30:e0:b6:7d:1a:8f:64:ac: 22:ef:1f:d5:d1:84:4d:32:c9:ab:13:fb:d7:78:5d: 2b:61:30:7b:bf:8e:4a:5c:cd:14:e9:88:8a:8c:08: 62:7f:5f:b6:3e:11:ce:19:5e:06:24:1a:04:a9:82: 1e:51:7c:0d:5c:48:ee:58:6f:50:38:35:a3:38:43: 0e:b3:d0:d5:40:cb:c9:a7:f4:33:96:eb:90:37:2f: cc:50:8b:1d:cf:16:e2:f9:9a:97:d7:5b:fe:24:44: c5:78:dd:e3:0a:d1:f8:44:8a:51:73:91:34:75:8c: 67:9e:b1:3c:33:a7:43:ef:82:43:5f:e7:d9:e4:4d: 5f:61:82:70:1b:3f:95:1b:a2:01:2c:c5:fc:6c:20: fa:2c:89:ef:9d:2d:be:6f:a9:30:6c:f5:e5:5e:ff: c5:46:14:f5:3c:a3:94:d2:2d:2c:54:79:66:ca:37: aa:00:d4:2c:61:13:bb:7c:63:bf:b9:b9:49:43:a7: ee:4c:55:53:bd:3d:36:b2:83:9b:9c:e4:c3:4c:c8: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:F0:2B:A3:82:5B:A3:53:D3:FA:1F:01:E1:DA:51:25:67:C9:E7 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:95:ae:aa:f1:7c:a1:25:21:3d:01:66:ac:3d:18:04:69:4d: 12:5e:70:90:a5:91:03:b1:3d:de:84:ff:bf:59:8f:a9:3c:63: 5e:2c:52:85:55:17:33:c4:f7:02:ea:45:45:66:04:95:92:81: dc:56:5a:c2:30:d8:aa:de:0b:b4:e4:c4:4d:bf:8c:bd:8d:19: 7a:5d:a0:4e:f3:1e:82:6d:ca:9f:8d:5e:42:83:74:f3:e8:dc: 55:70:a6:68:8d:d8:4f:8d:fb:c9:bd:af:80:7b:39:ff:50:b5: f9:9c:e0:d1:ee:74:a7:9a:1f:15:e7:23:4e:dd:fa:4d:e1:3f: 35:c4:14:8b:b2:f9:7d:00:7c:2e:38:f6:8d:aa:17:ee:07:36: a4:a3:1c:68:d6:07:b3:d8:1f:11:22:a2:98:e4:a9:95:59:4b: 6b:14:7d:eb:43:31:db:0f:d3:2a:9d:2f:fb:0c:1a:5a:09:bf: b9:ee:4b:a5:28:19:7e:a5:f1:59:9d:62:50:c6:e9:73:9a:0a: b0:33:e7:5a:12:e1:43:1b:e3:68:ce:6e:ba:8c:d6:ce:cc:b0: e7:d0:33:d4:ce:e4:47:de:6d:a0:87:0f:a1:a1:53:05:b0:a9: b1:e0:77:12:04:0c:30:c9:5a:85:c7:d0:7c:d6:fb:6a:cc:3d: 27:ee:38:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNzAzMDEyMzAxWhcNMjUwNzEwMDEyMzAxWjAYMRYwFAYD VQQDEw02ODY1ZGI3NS0zZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ENblI7TPe6vbcedTQpTkY7z5UH8cj556ZH1X9JLChJYoDCk0gpJ8SwW+AAO WTHAv1GJMOC2fRqPZKwi7x/V0YRNMsmrE/vXeF0rYTB7v45KXM0U6YiKjAhif1+2 PhHOGV4GJBoEqYIeUXwNXEjuWG9QODWjOEMOs9DVQMvJp/QzluuQNy/MUIsdzxbi +ZqX11v+JETFeN3jCtH4RIpRc5E0dYxnnrE8M6dD74JDX+fZ5E1fYYJwGz+VG6IB LMX8bCD6LInvnS2+b6kwbPXlXv/FRhT1PKOU0i0sVHlmyjeqANQsYRO7fGO/ublJ Q6fuTFVTvT02soObnOTDTMiSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy18Cuj glujU9P6HwHh2lElZ8nnMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKla6q8XyhJSE9AWasPRgEaU0SXnCQpZEDsT3ehP+/WY+pPGNeLFKF VRczxPcC6kVFZgSVkoHcVlrCMNiq3gu05MRNv4y9jRl6XaBO8x6CbcqfjV5Cg3Tz 6NxVcKZojdhPjfvJva+Aezn/ULX5nODR7nSnmh8V5yNO3fpN4T81xBSLsvl9AHwu OPaNqhfuBzakoxxo1gez2B8RIqKY5KmVWUtrFH3rQzHbD9MqnS/7DBpaCb+57kul KBl+pfFZnWJQxulzmgqwM+daEuFDG+Nozm66jNbOzLDn0DPUzuRH3m2ghw+hoVMF sKmx4HcSBAwwyVqFx9B81vtqzD0n7jgp -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:21 2025 by rpki-client