$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: QNeMkU++Epp298ROcYzbmhSGyzDIp9F6RcuvvzIURWU= Subject key identifier: BE:89:52:74:3C:FE:71:57:BA:51:A9:B5:1E:DF:40:80:E1:93:20:E3 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 07 Signing time: Sun 11 May 2025 06:53:08 +0000 Manifest this update: Sun 11 May 2025 06:53:08 +0000 Manifest next update: Sun 18 May 2025 06:53:08 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: gLo0COg/8lEV5JY9HGB1CtOSHYw1oHUY4n9dD9P1d0g=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: May 11 06:53:08 2025 GMT Not After : May 18 06:53:08 2025 GMT Subject: CN=68204954-5d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:04:2a:7a:b8:af:9d:f8:0a:44:e5:d0:da: f9:d4:de:ec:b7:9c:d5:43:be:b9:c6:42:5e:87:71: 1b:b7:b0:00:75:f2:01:3f:6c:d9:f8:03:05:f9:4a: 96:45:5e:ba:7f:7b:2d:59:4d:0e:4d:55:a3:ce:33: 47:3d:3e:b7:41:b5:a6:65:b2:61:df:2c:1c:5d:d3: 7a:8f:a4:aa:3e:87:e1:56:7c:c0:46:06:a7:47:00: ce:13:da:0a:33:7e:e9:53:5c:15:46:9d:28:2e:70: 90:c3:b6:c2:f4:3c:b8:ea:43:6f:d6:a4:70:3a:34: 98:20:7b:a4:ad:51:c1:f2:d6:cf:2b:34:05:c5:5f: 05:a4:1d:fd:2c:e3:4a:a9:f9:61:6a:2d:74:5d:2e: f6:1b:18:af:0c:2a:74:d4:ea:95:e6:db:fe:fb:79: f2:34:07:a0:70:3f:ea:1e:05:cd:75:bc:c3:a9:8e: cc:72:41:e6:d6:5c:1f:7c:ca:0a:f6:f1:f3:2e:9b: be:aa:25:da:7e:c9:ea:60:fc:a8:16:d0:c0:24:cc: 7f:f7:4f:64:59:eb:39:15:5c:e8:b3:2b:b1:13:d9: c2:13:25:1a:22:ec:bc:22:4a:93:55:df:83:c2:66: 5d:46:91:18:14:5c:8a:86:0c:20:96:b4:8f:ac:f5: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:89:52:74:3C:FE:71:57:BA:51:A9:B5:1E:DF:40:80:E1:93:20:E3 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:bb:ac:98:19:78:76:61:66:3b:ed:da:b3:b1:07:20:09: 34:87:52:c2:66:a9:7b:79:5a:a7:27:9c:d0:c9:e2:51:31:45: 67:e3:4b:d1:38:98:35:78:ac:0c:a9:83:85:83:2f:7e:4f:3b: a2:fc:d7:00:32:10:91:ff:dd:fa:dd:7c:53:45:41:03:e7:32: 87:11:db:71:a5:fb:6f:56:13:4c:91:72:59:1c:84:b9:75:e1: 5e:c0:ce:6d:a5:e5:02:3e:30:68:e2:4a:8c:c8:ba:0f:2b:39: da:53:48:1b:4d:1a:e4:97:86:06:f5:04:27:98:8c:61:be:21: 80:94:ea:06:e0:4b:1d:9e:25:75:1b:07:a2:77:e0:fa:b9:5a: e7:75:9a:f9:3d:c7:5f:ed:96:dd:cf:d5:c1:55:62:f3:ac:8d: 71:9e:0f:67:14:1f:9b:b0:50:b8:73:25:b1:ff:56:c0:7b:e2: 25:12:7a:55:d6:6b:18:ac:99:42:d2:81:f4:dd:b8:f6:07:c8: 73:75:07:3f:a9:fb:e9:ae:7e:31:b3:76:05:eb:0d:84:56:ff: c7:44:fa:14:00:94:de:3b:e8:fb:a1:7f:34:15:f0:28:97:c8: 7a:5c:73:91:d6:ae:9d:c2:44:12:7a:66:00:f7:52:52:29:d7: e8:7a:91:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA1MTEwNjUzMDhaFw0yNTA1MTgwNjUzMDhaMBgxFjAUBgNV BAMTDTY4MjA0OTU0LTVkMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCXgQqerivnfgKROXQ2vnU3uy3nNVDvrnGQl6HcRu3sAB18gE/bNn4AwX5SpZF Xrp/ey1ZTQ5NVaPOM0c9PrdBtaZlsmHfLBxd03qPpKo+h+FWfMBGBqdHAM4T2goz fulTXBVGnSgucJDDtsL0PLjqQ2/WpHA6NJgge6StUcHy1s8rNAXFXwWkHf0s40qp +WFqLXRdLvYbGK8MKnTU6pXm2/77efI0B6BwP+oeBc11vMOpjsxyQebWXB98ygr2 8fMum76qJdp+yepg/KgW0MAkzH/3T2RZ6zkVXOizK7ET2cITJRoi7LwiSpNV34PC Zl1GkRgUXIqGDCCWtI+s9bfFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvolSdDz+ cVe6Uam1Ht9AgOGTIOMwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3qu6yYGXh2YWY77dqzsQcgCTSHUsJmqXt5WqcnnNDJ4lExRWfjS9E4 mDV4rAypg4WDL35PO6L81wAyEJH/3frdfFNFQQPnMocR23Gl+29WE0yRclkchLl1 4V7Azm2l5QI+MGjiSozIug8rOdpTSBtNGuSXhgb1BCeYjGG+IYCU6gbgSx2eJXUb B6J34Pq5Wud1mvk9x1/tlt3P1cFVYvOsjXGeD2cUH5uwULhzJbH/VsB74iUSelXW axismULSgfTduPYHyHN1Bz+p++mufjGzdgXrDYRW/8dE+hQAlN476PuhfzQV8CiX yHpcc5HWrp3CRBJ6ZgD3UlIp1+h6kUI= -----END CERTIFICATE-----Generated at Tue May 13 02:29:34 2025 by rpki-client