$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: ynfxUFZSslmJEcLU36UfCJq3N+bv9SK8L7tgmEbIxYY= Subject key identifier: C3:6D:1E:07:A0:28:21:63:E6:B5:37:40:94:F8:BD:BE:84:D8:41:91 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0504 Signing time: Tue 01 Jul 2025 00:06:24 +0000 Manifest this update: Tue 01 Jul 2025 00:06:23 +0000 Manifest next update: Tue 08 Jul 2025 00:06:23 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: kLmkvzgSGxefVCjIClz7bFGiw8zHceWhNsoxDEdfevU=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Jul 1 00:06:23 2025 GMT Not After : Jul 8 00:06:23 2025 GMT Subject: CN=6863267f-fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:f9:af:2f:18:76:12:f9:34:4c:01:f7:a0: 9a:aa:ee:0b:f0:c1:0c:e7:50:5d:57:f4:e3:41:a6: 94:47:49:32:e6:f9:7e:fc:fd:6e:34:33:d7:ee:78: 88:82:76:6f:58:77:44:4e:28:61:dc:fb:ff:fb:a2: bb:88:2b:a0:7f:03:a0:3a:a3:4a:5b:d2:1e:4f:01: f6:79:4d:7f:d0:92:f4:b1:31:c2:de:1b:cf:e6:92: 46:d3:06:24:e3:09:f1:69:ea:bb:1b:d5:d4:ac:27: 63:b5:8d:6a:5f:23:ef:4c:84:2b:c2:8a:fb:56:98: 93:5d:8e:5c:5b:8b:f9:d7:f4:f6:29:22:36:e2:61: b1:12:b0:4a:6d:42:1a:47:f5:cb:8a:ee:74:a0:cd: 31:36:49:5a:93:61:3e:89:51:51:e8:58:df:ab:5d: 7b:f4:21:60:92:7c:2b:3c:21:43:31:a5:38:0b:af: 56:15:02:34:53:7c:b2:16:89:af:c6:c1:72:c4:5b: c4:24:c9:e5:3a:fa:69:66:fc:e8:e6:f5:e0:db:47: 7e:df:43:4f:15:0c:05:98:ab:78:8e:9a:34:ab:91: d8:a5:8a:b7:5e:09:31:82:ee:8d:f5:8f:58:a1:ed: 1b:1c:53:c6:5b:74:ed:d8:0c:c1:07:2d:3b:63:56: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6D:1E:07:A0:28:21:63:E6:B5:37:40:94:F8:BD:BE:84:D8:41:91 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:55:6e:d4:3b:20:9b:d4:e1:ae:1e:5a:34:39:3b:9d:d1: 7a:c1:5a:07:cb:99:26:14:5d:5a:cc:e6:35:60:40:41:32:2c: fb:09:a7:16:83:cc:2a:35:c9:e9:86:3b:7a:83:96:44:71:8c: d0:2b:95:df:95:43:c3:bc:59:e4:42:a9:b2:c9:20:49:ea:12: 88:43:cb:41:f8:5a:6b:55:b1:84:17:0c:a9:08:c7:2b:d4:c9: 3b:d0:02:3c:9a:3a:d6:4d:3c:fd:e7:2d:bb:9c:45:43:ce:6c: 28:a7:b7:89:7d:03:40:57:59:1c:ce:f5:ba:46:32:0f:ad:0d: de:ef:b2:4e:2c:6d:95:47:a7:bc:13:5d:05:8e:58:25:96:ba: 38:a3:0b:cb:80:e1:de:e3:b8:e5:03:19:df:dd:04:92:64:16: fd:be:52:6e:a1:f4:5a:9c:df:dc:9f:d2:9f:fa:54:d3:e9:78: fa:bb:9e:bc:5d:39:40:58:8e:18:41:76:8c:aa:2a:f3:d4:d2: 1b:5e:47:43:e2:63:8b:ff:f9:6c:05:40:b5:87:ba:0a:63:f7: 6a:38:f7:d2:63:13:7e:fe:b9:aa:b4:95:c9:ec:8f:8c:f5:22: c8:01:17:65:b3:df:f3:94:b9:f8:17:40:6b:a5:89:33:a7:60: 7a:98:b6:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUwNzAxMDAwNjIzWhcNMjUwNzA4MDAwNjIzWjAYMRYwFAYD VQQDEw02ODYzMjY3Zi1mZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzz5ry8YdhL5NEwB96Caqu4L8MEM51BdV/TjQaaUR0ky5vl+/P1uNDPX7niI gnZvWHdETihh3Pv/+6K7iCugfwOgOqNKW9IeTwH2eU1/0JL0sTHC3hvP5pJG0wYk 4wnxaeq7G9XUrCdjtY1qXyPvTIQrwor7VpiTXY5cW4v51/T2KSI24mGxErBKbUIa R/XLiu50oM0xNklak2E+iVFR6Fjfq1179CFgknwrPCFDMaU4C69WFQI0U3yyFomv xsFyxFvEJMnlOvppZvzo5vXg20d+30NPFQwFmKt4jpo0q5HYpYq3Xgkxgu6N9Y9Y oe0bHFPGW3Tt2AzBBy07Y1YkeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNtHgeg KCFj5rU3QJT4vb6E2EGRMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnR1Vu1Dsgm9Thrh5aNDk7ndF6wVoHy5kmFF1azOY1YEBBMiz7CacW g8wqNcnphjt6g5ZEcYzQK5XflUPDvFnkQqmyySBJ6hKIQ8tB+FprVbGEFwypCMcr 1Mk70AI8mjrWTTz95y27nEVDzmwop7eJfQNAV1kczvW6RjIPrQ3e77JOLG2VR6e8 E10Fjlgllro4owvLgOHe47jlAxnf3QSSZBb9vlJuofRanN/cn9Kf+lTT6Xj6u568 XTlAWI4YQXaMqirz1NIbXkdD4mOL//lsBUC1h7oKY/dqOPfSYxN+/rmqtJXJ7I+M 9SLIARdls9/zlLn4F0BrpYkzp2B6mLbX -----END CERTIFICATE-----Generated at Wed Jul 2 21:23:33 2025 by rpki-client