$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: oxSiVVoWGlM2aUg+6WeZEbqq9AwcUKgyMVjMzwBVQ2w= Subject key identifier: 26:25:B1:BD:D6:42:05:0E:7A:E6:1A:BE:58:05:B7:BE:FC:1B:E0:B3 Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0BBB Signing time: Sun 04 May 2025 18:46:08 +0000 Manifest this update: Sun 04 May 2025 18:46:08 +0000 Manifest next update: Sun 11 May 2025 18:46:08 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: 3+a12Ud+kjSB3y0rHgmx8V8fDGZDgIKmPdrxPCPDbdw=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: May 4 18:46:08 2025 GMT Not After : May 11 18:46:08 2025 GMT Subject: CN=6817b5f0-6257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:c4:21:67:1e:77:8c:a4:8d:a9:7e:a0:f8: 8e:25:20:d4:92:95:30:39:6d:62:b3:90:bd:5d:2d: f9:17:2e:66:a1:9d:f9:73:22:b3:aa:6a:fd:1e:c8: 6e:1f:18:41:10:46:0d:59:4f:b0:8f:04:e7:47:46: e9:59:ee:30:08:eb:df:22:2d:2e:ab:6f:64:0b:c7: 19:0e:5d:34:30:7b:42:8a:8f:6d:1e:e9:7c:78:8c: d3:97:2d:b9:c6:31:95:d7:1d:3f:8f:9a:b7:d5:93: cb:3e:f2:ec:a3:7f:89:62:20:f8:09:c9:0b:bf:77: 94:52:ac:f5:0e:be:7e:60:49:f3:46:e7:35:fb:5b: e7:38:14:4f:44:14:26:45:d0:62:b1:ce:e7:55:29: c6:3d:7a:1c:38:1e:97:73:ca:d8:c8:65:28:be:78: 37:ad:ec:cf:db:18:01:dc:9a:61:06:c2:35:33:0b: 02:71:56:12:57:de:4a:44:43:39:d8:4b:02:27:a7: d6:82:8b:ef:4a:5b:96:28:70:9d:1f:8d:33:bc:7b: 01:9a:40:d0:83:8e:14:dd:6c:0f:83:76:6e:62:f6: f8:69:4a:99:08:52:e9:f3:68:87:04:9c:b0:af:51: e2:a9:51:75:a8:fb:e9:64:c1:43:4f:6c:42:8b:43: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:B1:BD:D6:42:05:0E:7A:E6:1A:BE:58:05:B7:BE:FC:1B:E0:B3 X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:75:c2:b1:fe:41:dd:d7:c2:77:b2:ff:98:81:13:af:98: 2a:40:8c:3f:fe:c0:2d:f3:b8:fd:0f:07:b6:7b:9b:f1:44:79: 53:fb:7a:63:4c:3c:45:19:64:a6:5e:46:4d:16:ec:57:8c:a6: e2:5a:2f:38:dd:be:79:ab:fd:9d:84:48:7c:16:5d:79:98:f0: d6:0a:c3:29:33:5b:17:a8:3f:4b:eb:a1:6c:73:4b:d9:bb:ec: 28:19:f9:0f:ce:c1:d1:57:14:1b:34:ef:fc:4d:e0:74:45:d7: 99:f4:bd:66:c6:11:64:23:62:a8:43:ea:5a:ae:4a:71:4d:2e: 78:36:67:4e:38:70:8b:34:43:55:d7:a9:b9:fd:41:bb:90:3a: 0c:09:ee:dd:09:f8:13:1a:af:c1:6a:7f:b1:33:37:32:7f:32: 29:f6:14:c3:06:2a:69:ba:60:54:42:d1:65:15:ca:ee:f9:67: 80:2a:bc:41:45:e3:6a:fd:63:04:1c:9d:b9:45:7a:da:f3:43: 04:9a:55:39:e3:f8:f2:b0:8b:7b:6c:27:6a:b4:4f:6a:37:e3: b9:2f:1d:a2:ea:47:d8:c2:3d:a1:0b:82:52:1d:51:e0:2f:9b: af:cb:6b:9f:7a:38:44:60:e0:61:29:9e:52:d9:c0:3d:9e:57: a7:d7:b8:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjUwNTA0MTg0NjA4WhcNMjUwNTExMTg0NjA4WjAYMRYwFAYD VQQDEw02ODE3YjVmMC02MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYLEIWced4ykjal+oPiOJSDUkpUwOW1is5C9XS35Fy5moZ35cyKzqmr9Hshu HxhBEEYNWU+wjwTnR0bpWe4wCOvfIi0uq29kC8cZDl00MHtCio9tHul8eIzTly25 xjGV1x0/j5q31ZPLPvLso3+JYiD4CckLv3eUUqz1Dr5+YEnzRuc1+1vnOBRPRBQm RdBisc7nVSnGPXocOB6Xc8rYyGUovng3rezP2xgB3JphBsI1MwsCcVYSV95KREM5 2EsCJ6fWgovvSluWKHCdH40zvHsBmkDQg44U3WwPg3ZuYvb4aUqZCFLp82iHBJyw r1HiqVF1qPvpZMFDT2xCi0Mp/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYlsb3W QgUOeuYavlgFt778G+CzMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXXXCsf5B3dfCd7L/mIETr5gqQIw//sAt87j9Dwe2e5vxRHlT+3pj TDxFGWSmXkZNFuxXjKbiWi843b55q/2dhEh8Fl15mPDWCsMpM1sXqD9L66Fsc0vZ u+woGfkPzsHRVxQbNO/8TeB0RdeZ9L1mxhFkI2KoQ+parkpxTS54NmdOOHCLNENV 16m5/UG7kDoMCe7dCfgTGq/Ban+xMzcyfzIp9hTDBippumBUQtFlFcru+WeAKrxB ReNq/WMEHJ25RXra80MEmlU54/jysIt7bCdqtE9qN+O5Lx2i6kfYwj2hC4JSHVHg L5uvy2ufejhEYOBhKZ5S2cA9nlen17im -----END CERTIFICATE-----Generated at Mon May 5 12:34:23 2025 by rpki-client