$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: rW0pUjIf0WPF9lNR4qUiZEB8vuZ5Hr4QVfNZ9bHWI70= Subject key identifier: 5E:76:0A:3F:C8:A8:FF:41:2A:C5:7C:86:84:EA:27:AB:50:A3:4D:03 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 05FD Signing time: Mon 12 May 2025 22:44:54 +0000 Manifest this update: Mon 12 May 2025 22:44:53 +0000 Manifest next update: Mon 19 May 2025 22:44:53 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: 3NsNbhRMUEtZJKnH2w6AASkmqvKYqo1zAAR2RDNIYZo=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: ivy50aev8PBBtQI+t4rrn9t9SCrZ7neT5wRMbs+lYyY=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: 7ut9o3eElxzFIAxqT3mKev4l3ztho9GK4MCuBdiUU04=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: 0y/oUEJ0oLEK6LTqItC77+xxNnH5haM8NaGvhbSVTdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: May 12 22:44:53 2025 GMT Not After : May 19 22:44:53 2025 GMT Subject: CN=682279e6-8e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:78:61:8b:97:d2:be:f4:bb:1a:44:69:79: 62:91:91:86:b1:17:62:6c:3a:a5:f5:77:3f:15:84: 5d:81:1e:24:97:59:93:28:2e:0c:08:2b:49:6a:49: 83:b1:5d:c4:42:27:f2:24:ac:be:6e:86:2f:d8:3b: 6f:07:ea:d5:a4:91:47:bb:dc:ce:54:56:c0:83:62: 21:b9:d9:87:cf:fb:0b:59:96:3d:0e:a2:81:d3:90: e3:83:7d:e6:f2:8c:a2:66:ac:e8:c0:dc:c6:19:43: d4:a3:85:10:7c:75:b8:7c:93:c4:65:7f:3c:fe:75: 23:6c:a9:08:97:cd:06:6a:45:b6:4a:14:07:76:4a: 40:bc:f7:74:cd:7d:45:c7:5e:34:22:c7:93:6e:8e: db:37:c3:f8:78:a1:37:71:d8:a8:df:e1:0f:06:f5: bd:a1:cc:65:22:8b:b5:d0:20:79:8a:4e:fe:6f:01: 4d:de:9c:07:e6:3e:72:7f:3e:23:44:90:92:62:ec: fd:83:cd:08:43:a4:8e:d2:22:bf:fc:5f:5d:2f:3c: 63:9c:2c:06:3c:be:8c:d7:d4:a5:28:b3:a1:d7:6e: 97:45:cf:a3:ae:7e:f1:46:b5:cb:59:e2:35:06:f7: 92:71:f1:f8:30:53:8a:d9:e5:f9:55:81:60:d3:76: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:0A:3F:C8:A8:FF:41:2A:C5:7C:86:84:EA:27:AB:50:A3:4D:03 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5f:bc:5d:29:08:de:2f:b0:e4:3d:93:9b:cc:92:6e:06:fa: f1:68:eb:0b:68:a3:bb:bd:41:20:ea:03:61:af:2c:93:f1:c6: 03:4e:64:f8:8a:6a:e3:ea:db:6e:c3:e4:8f:6a:76:46:af:cd: 65:e6:1c:bc:c6:22:9d:5b:6c:e9:25:30:bc:70:f4:a5:0b:11: f4:c0:a0:cf:e9:e5:aa:64:28:ad:70:a0:32:58:55:2d:20:1a: 2a:6c:88:61:55:25:31:6b:55:6c:f3:a5:b7:a0:26:d0:5f:ef: 5f:84:d1:7e:bb:65:11:a4:e6:f3:9b:9b:7c:4e:4b:af:7c:ad: f3:0b:17:f0:24:9a:ed:ef:d3:cc:cd:04:b6:ec:af:75:50:8d: 65:1f:85:ec:e2:6f:ad:1e:14:3b:de:0f:0b:cb:9b:c9:7b:96: b3:c5:e3:de:3f:7e:fe:88:a8:70:88:76:05:e6:81:1b:1f:62: 47:65:f9:f8:70:07:60:90:ac:65:8c:93:bc:15:c8:3a:b0:88: 17:5b:12:59:35:f5:e3:20:ee:77:05:5d:44:e0:70:10:9d:23: 51:0c:5b:0c:bc:b9:49:0b:b7:7c:57:f4:6d:81:f7:be:58:41: a1:5d:0f:ac:e4:d8:7d:88:c4:4c:6e:e3:d5:a2:e1:83:21:ee: 0c:f2:60:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUwNTEyMjI0NDUzWhcNMjUwNTE5MjI0NDUzWjAYMRYwFAYD VQQDEw02ODIyNzllNi04ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dh4YYuX0r70uxpEaXlikZGGsRdibDql9Xc/FYRdgR4kl1mTKC4MCCtJakmD sV3EQifyJKy+boYv2DtvB+rVpJFHu9zOVFbAg2IhudmHz/sLWZY9DqKB05Djg33m 8oyiZqzowNzGGUPUo4UQfHW4fJPEZX88/nUjbKkIl80GakW2ShQHdkpAvPd0zX1F x140IseTbo7bN8P4eKE3cdio3+EPBvW9ocxlIou10CB5ik7+bwFN3pwH5j5yfz4j RJCSYuz9g80IQ6SO0iK//F9dLzxjnCwGPL6M19SlKLOh126XRc+jrn7xRrXLWeI1 BveScfH4MFOK2eX5VYFg03YFaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF52Cj/I qP9BKsV8hoTqJ6tQo00DMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6X7xdKQjeL7DkPZObzJJuBvrxaOsLaKO7vUEg6gNhryyT8cYDTmT4 imrj6ttuw+SPanZGr81l5hy8xiKdW2zpJTC8cPSlCxH0wKDP6eWqZCitcKAyWFUt IBoqbIhhVSUxa1Vs86W3oCbQX+9fhNF+u2URpObzm5t8TkuvfK3zCxfwJJrt79PM zQS27K91UI1lH4Xs4m+tHhQ73g8Ly5vJe5azxePeP37+iKhwiHYF5oEbH2JHZfn4 cAdgkKxljJO8Fcg6sIgXWxJZNfXjIO53BV1E4HAQnSNRDFsMvLlJC7d8V/Rtgfe+ WEGhXQ+s5Nh9iMRMbuPVouGDIe4M8mAV -----END CERTIFICATE-----Generated at Tue May 13 19:02:31 2025 by rpki-client