$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft File: gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json) Hash identifier: JtBFUBMOv2Yh/vejEd1rRQyAdhqxwpXcDo/4GQdcJT0= Subject key identifier: 2E:21:D6:BD:CA:42:F0:ED:F0:D3:3E:88:32:F8:6F:5E:F4:02:7D:57 Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft Manifest number: 019F Signing time: Sun 11 May 2025 02:16:03 +0000 Manifest this update: Sun 11 May 2025 02:16:03 +0000 Manifest next update: Sun 18 May 2025 02:16:03 +0000 Files and hashes: 1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: d8YodgCC0k95EfXimLqzBSpC4BuLU8lyDKfJKTHEyfc=) 2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: vlOK1RJCHtSR0rcREKWIrzl7luUJenVcTiEDALCfBP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: May 11 02:16:03 2025 GMT Not After : May 18 02:16:03 2025 GMT Subject: CN=68200863-7cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:30:50:00:2b:10:82:30:d1:35:85:b9:ce: 06:15:20:3c:1c:52:6f:b2:db:0b:bb:bf:61:6d:64: a0:e9:09:31:c7:a3:9a:75:fb:bf:67:d2:cb:70:f6: af:70:99:65:41:d7:1b:02:68:9e:61:d4:47:be:5e: 5c:07:a0:da:c5:62:45:2e:7e:f0:b3:78:cd:1c:cf: 0a:2c:41:fb:78:52:e5:b7:a5:10:99:1e:98:90:c1: 15:be:b4:0e:2b:c5:97:0d:56:a1:19:40:56:b5:c0: b2:8e:e8:54:a7:c6:af:38:1c:ef:0e:5d:2f:7b:d1: 4a:f5:d4:70:2f:14:2a:b1:5f:51:d0:10:db:b9:f6: db:c2:d7:2c:79:16:6d:d9:17:b3:4f:cd:8c:df:67: 2b:a8:d7:ef:f7:2f:d7:06:10:a4:e8:0a:55:a8:5f: 66:95:5b:ec:48:3c:bb:be:8b:18:f7:10:0b:c7:48: 82:1c:05:8c:38:49:5d:60:78:f2:f5:9f:a2:a2:94: b9:7c:45:e2:5b:ec:cf:ba:3d:29:16:37:4d:b0:8f: f0:58:df:5e:44:0f:6b:67:cb:ef:7f:cb:d2:bd:55: 5b:34:46:83:45:ba:a0:e3:21:6b:d2:b4:14:31:3f: c4:2d:7f:92:9b:80:05:2e:71:39:c0:65:aa:9b:e0: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:D6:BD:CA:42:F0:ED:F0:D3:3E:88:32:F8:6F:5E:F4:02:7D:57 X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:35:6c:09:ed:c5:51:7b:47:01:3b:be:a9:ea:93:8d:b1:91: d8:18:1e:8b:c9:c6:c8:1e:23:78:f3:92:76:ac:23:e6:82:26: 56:80:f7:71:90:0c:df:23:66:44:f1:d6:53:33:5b:cf:53:3b: fd:32:00:2e:9c:39:3f:b9:7c:ea:9f:b2:eb:ed:1b:db:70:7d: 02:53:76:a0:6c:e2:5e:53:f7:f1:12:06:c3:af:17:1e:1c:aa: e4:0e:60:00:1b:75:63:10:db:cb:5c:27:2c:6e:4c:e4:5f:6b: 8c:73:a7:26:7f:cc:a5:ad:a3:80:b6:11:73:e9:e0:61:6b:3c: 44:2d:d6:e5:ce:dd:c9:af:eb:c1:47:07:7b:c7:7d:4c:b0:63: 61:67:09:3b:70:92:26:41:b3:a7:da:4d:cb:27:42:02:ea:f5: 7f:1e:37:7d:27:23:b8:99:79:fc:83:2c:7e:63:68:cb:a9:b1: 06:4e:24:21:bf:7e:cd:09:dc:3a:d8:1c:cc:97:8f:4d:3e:e5: f4:a9:f1:73:10:61:1d:dd:e0:79:b4:9a:75:d1:3d:1c:48:97: 59:41:c4:97:57:c0:33:c8:9d:69:91:f6:ae:43:e9:9f:c4:45: 0c:7b:1c:0a:32:49:af:e6:28:16:2b:88:7e:c5:1d:0d:b4:1b: 80:6b:1b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjUwNTExMDIxNjAzWhcNMjUwNTE4MDIxNjAzWjAYMRYwFAYD VQQDEw02ODIwMDg2My03Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobQwUAArEIIw0TWFuc4GFSA8HFJvstsLu79hbWSg6Qkxx6Oadfu/Z9LLcPav cJllQdcbAmieYdRHvl5cB6DaxWJFLn7ws3jNHM8KLEH7eFLlt6UQmR6YkMEVvrQO K8WXDVahGUBWtcCyjuhUp8avOBzvDl0ve9FK9dRwLxQqsV9R0BDbufbbwtcseRZt 2RezT82M32crqNfv9y/XBhCk6ApVqF9mlVvsSDy7vosY9xALx0iCHAWMOEldYHjy 9Z+iopS5fEXiW+zPuj0pFjdNsI/wWN9eRA9rZ8vvf8vSvVVbNEaDRbqg4yFr0rQU MT/ELX+Sm4AFLnE5wGWqm+B6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4h1r3K QvDt8NM+iDL4b170An1XMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3 ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6NWwJ7cVRe0cBO76p6pONsZHYGB6LycbIHiN485J2rCPmgiZWgPdx kAzfI2ZE8dZTM1vPUzv9MgAunDk/uXzqn7Lr7RvbcH0CU3agbOJeU/fxEgbDrxce HKrkDmAAG3VjENvLXCcsbkzkX2uMc6cmf8ylraOAthFz6eBhazxELdblzt3Jr+vB Rwd7x31MsGNhZwk7cJImQbOn2k3LJ0IC6vV/Hjd9JyO4mXn8gyx+Y2jLqbEGTiQh v37NCdw62BzMl49NPuX0qfFzEGEd3eB5tJp10T0cSJdZQcSXV8AzyJ1pkfauQ+mf xEUMexwKMkmv5igWK4h+xR0NtBuAaxvp -----END CERTIFICATE-----Generated at Sun May 11 09:06:31 2025 by rpki-client